Use Ansible instead of Bash for provisioning

The deployment is not quite working, and I'm unable to test right now:
DigitalOcean is returning 503 for my requests.

As of this commit, I can run =ansible-playbook provider.yml= more than once and
it will actually be idempotent.

Notes:
- SSH fingerprint are now taken from the public key file instead of manually
supplying it in the terraform template using the =digitalocean_ssh_key=
resource;
- use Ansible instead of ad-hoc Bash scripts for provisioning the Droplets
created by Terraform;
- use the =filename.env.extension= to create the concrete files in CI;
- use the =user_data= to add the know SSH key pair to the newly created Droplet;
- add =rotate-ssh-keys.sh= utils;

1 files changed, 49 insertions, 0 deletions

diff --git a/secrets/ssh/vps-box-client b/secrets/ssh/vps-box-client
new file mode 100644
index 0000000..e85c977
--- /dev/null
+++ b/secrets/ssh/vps-box-client
@@ -0,0 +1,49 @@
+-----BEGIN OPENSSH PRIVATE KEY-----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+-----END OPENSSH PRIVATE KEY-----