AWS prerequisites:
EBS volumes
Subnets
Security groups

TLS prerequisites:
./bin/genCA.sh
mkdir gluster && ./bin/genCA.sh gluster
./bin/genCert.sh gluster nodeA
./bin/genCert.sh gluster nodeB
./bin/genCert.sh gluster clnt1

Launch:
ansible-playbook -i hosts.ini gluster-start.yaml
ssh a.gluster.zi3.fi 'sudo ~/bin/luks-open' < disk_key
ssh b.gluster.zi3.fi 'sudo ~/bin/luks-open' < disk_key
ansible-playbook -i hosts.ini gluster-run.yaml

fail2ban:
fail2ban-client set sshd unbanip 75.172.12.35