toph/secrets/ssh/vps-box-server, branch main Setup and configuration for VPS and other personal server http://euandre.org/git/toph/atom?h=main 2020-08-10T15:45:43Z Migration: Remove Ansible and Docker code, move only to NixOS 2020-08-10T15:45:43Z EuAndreh eu@euandre.org 2020-08-10T15:15:49Z urn:sha1:100ab568e3aeb512e86fd1155a73454d22e24895 Script: rotate SSH keys 2019-06-05T22:44:12Z EuAndreh eu@euandre.org 2019-06-05T22:44:12Z urn:sha1:5ef193b08008903e1f2cac4f89b84963975f4150 Script: rotate SSH keys 2019-06-05T22:37:40Z EuAndreh eu@euandre.org 2019-06-05T22:37:40Z urn:sha1:bc426ca3e3d9c1a10786ea54f44877affb3faeec Script: rotate SSH keys 2019-06-05T22:27:26Z EuAndreh eu@euandre.org 2019-06-05T22:27:26Z urn:sha1:fd205c2b81edb09819dece00c05a7fc2bf8b35ea Fix git-crypt configuration 2019-06-05T22:25:05Z EuAndreh eu@euandre.org 2019-06-05T22:23:59Z urn:sha1:b5195ce90b7357a4b963861f62343ac26adc0e1a Use Ansible instead of Bash for provisioning 2019-06-05T19:42:06Z EuAndreh eu@euandre.org 2019-06-05T19:38:53Z urn:sha1:54fd61c887f266f8e2e6b1419a86fc6681116069 The deployment is not quite working, and I'm unable to test right now: DigitalOcean is returning 503 for my requests. As of this commit, I can run =ansible-playbook provider.yml= more than once and it will actually be idempotent. Notes: - SSH fingerprint are now taken from the public key file instead of manually supplying it in the terraform template using the =digitalocean_ssh_key= resource; - use Ansible instead of ad-hoc Bash scripts for provisioning the Droplets created by Terraform; - use the =filename.env.extension= to create the concrete files in CI; - use the =user_data= to add the know SSH key pair to the newly created Droplet; - add =rotate-ssh-keys.sh= utils;