server - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Files	Lines
2019-06-13	TODOs.org	EuAndreh	1	-1/+1

2019-06-11	Revert "Install gitMinimal package to allow getting git SHA in .buildenv"	EuAndreh	1	-2/+0
	This reverts commit 8bb7cd9d1f090a3e20e212566746b61a5f1fe4e9.
2019-06-11	Install gitMinimal package to allow getting git SHA in .buildenv	EuAndreh	1	-0/+2

2019-06-10	Output all generated files on ./generated/, refactor .envrc variables	EuAndreh	1	-1/+1

2019-06-09	Remove CI dbg code	EuAndreh	1	-2/+0

2019-06-09	ci dbg	EuAndreh	1	-0/+2

2019-06-05	cd into ./vps/ before running CI commands	EuAndreh	1	-3/+6

2019-06-05	Revert "Use =nix build= instead of =nix-build="	EuAndreh	1	-1/+1
	This reverts commit c835e5ed00690d5dc05f4073ad2f7d52e56fe502. The =nix build= command isn't CI friendly: it prints many empty lines instead of the build progress.
2019-06-04	Use =nix build= instead of =nix-build=	EuAndreh	1	-1/+1

2019-05-28	Rotate SSH key and use correct VPS_COMMIT_SHA on provisioning	EuAndreh	1	-1/+1

2019-05-28	Rotate SSH key secret	EuAndreh	1	-1/+1

2019-05-28	Configure git for vps-state repo in ./scripts/ci/setup.sh	EuAndreh	1	-1/+1

2019-05-28	Use SSH to fetch vps-state so we can push to it later	EuAndreh	1	-1/+1

2019-05-28	Fix script references in .build.yml	EuAndreh	1	-6/+3

2019-05-26	Fix call to ./provision.sh in .build.yml	EuAndreh	1	-1/+1

2019-05-26	Run CI scripts from ./vps/ folder	EuAndreh	1	-2/+5

2019-05-26	Use nix-shell shebang to run CI scripts	EuAndreh	1	-6/+3

2019-05-26	Use nix-shell --pure to run scripts	EuAndreh	1	-2/+3
	Instead of adding them to the =packages= section of .build.yml.
2019-05-26	Prepare builds.sr.ht CI environment before running build tasks	EuAndreh	1	-5/+2
	Make content of .envrc available to subsequent build jobs.
2019-05-26	Unlock with git-crypt in setup phase	EuAndreh	1	-1/+3

2019-05-26	Revert back from Debian to NixOS	EuAndreh	1	-5/+3

2019-05-26	Perform single-user installation of Nix	EuAndreh	1	-3/+1

2019-05-26	Change ownership to build instead of root of /nix	EuAndreh	1	-1/+2

2019-05-26	Create Nix store with sudo before installing Nix	EuAndreh	1	-1/+2

2019-05-26	Create Nix store with sudo	EuAndreh	1	-1/+1

2019-05-26	Change GPG secret reference	EuAndreh	1	-1/+1

2019-05-26	Run shellcheck on Bash files stored in git-crypt	EuAndreh	1	-0/+2

2019-05-26	Change GPG secret reference	EuAndreh	1	-2/+1

2019-05-26	Test using Debian to correctly import GPG secret	EuAndreh	1	-4/+6
	Right now the NixOS image tries to import the GPG before installing GPG. Adding it as a package doesn't solve it.
2019-05-26	Add gnupg to allow pipeline to import GPG keys	EuAndreh	1	-0/+2

2019-05-26	Automate provisioning and deployment of VPS	EuAndreh	1	-0/+7
	In order to perform that I had to remove Terraform's =.tfstate= files from the repository. Terraform does support "backends" for storing the state files, but I settled for storing it on a separate repo (vps-state). For now it solves the state management problem: - it has history of states; - all state files are GPG encrypted; - there's no coordination however, but only the CI should perform a deploy in order to avoid race conditions. I had to add GPG and SSH keys to sr.ht to achieve that: - SSH public key to my profile to authorize it to push to vps-state repo; - SSH private key to the secret builds.sr.ht environment to enable push to the repository from the pipeline; - GPG public key to git-crypt to make it possible for the pipeline to unlock the encrypted content; - GPG private key to the secret builds.sr.ht environment to enable decrypting git-crypt content from the pipeline. In order to avoid divergent environment from local and CI, the ./provision.sh script is ran through nix-shell.
2019-05-25	Add lint checks and a pipeline to check using Nix	EuAndreh	1	-0/+13