MITOC Ansible
With a strong focus on security and user privacy, this set of Ansible playbooks manages most MITOC infrastructure.
This project is responsible for configuring and deploying multiple MITOC services. It is used both to deploy production services and to automatically provision containers for local development. The NGINX playbook serves a Django application and a Flask microservice, both behind gunicorn. All services are behind HTTPS, with certificates provided by MIT and LetsEncrypt.
Security is a primary focus for this project. The public-facing MITOC Trips project earns an A+ from SSL Labs and Security Headers.
Strong encryption
SSL settings make use of strong Diffie-Hellman exchange parameters, secure protocols, and strong ciphers.
Security-conscious HTTP headers
HTTP headers make use of the latest security features and user protections, including a strict content policy and feature policy.
