aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Disable shellcheck 2139 offenseEuAndreh2019-05-262-0/+2
* Remove extra newline at "Done.\n" messagesEuAndreh2019-05-262-8/+8
* Fix unexpected shell scapingEuAndreh2019-05-261-1/+1
* Change GPG secret referenceEuAndreh2019-05-261-2/+1
* Test using Debian to correctly import GPG secret•••Right now the NixOS image tries to import the GPG before installing GPG. Adding it as a package doesn't solve it. EuAndreh2019-05-261-4/+6
* Add gnupg to allow pipeline to import GPG keysEuAndreh2019-05-262-1/+3
* Automate provisioning and deployment of VPS•••In order to perform that I had to remove Terraform's =.tfstate= files from the repository. Terraform does support "backends" for storing the state files, but I settled for storing it on a separate repo (vps-state). For now it solves the state management problem: - it has history of states; - all state files are GPG encrypted; - there's no coordination however, but only the CI should perform a deploy in order to avoid race conditions. I had to add GPG and SSH keys to sr.ht to achieve that: - SSH public key to my profile to authorize it to push to vps-state repo; - SSH private key to the secret builds.sr.ht environment to enable push to the repository from the pipeline; - GPG public key to git-crypt to make it possible for the pipeline to unlock the encrypted content; - GPG private key to the secret builds.sr.ht environment to enable decrypting git-crypt content from the pipeline. In order to avoid divergent environment from local and CI, the ./provision.sh script is ran through nix-shell. EuAndreh2019-05-2610-11/+83
* Add 1 git-crypt collaborator•••New collaborators: E69F5ACF euandreh@builds.sr.ht <euandreh@builds.sr.ht> EuAndreh2019-05-261-0/+0
* Add static file server container with nginxEuAndreh2019-05-262-1/+16
* TODOs.orgEuAndreh2019-05-261-2/+21
* Pull Docker images before running docker-compose upEuAndreh2019-05-251-0/+1
* TODOs.orgEuAndreh2019-05-251-3/+5
* Increase droplet image to 1024mbEuAndreh2019-05-251-1/+1
* TODOs.orgEuAndreh2019-05-251-21/+26
* Fix docker-compose.yaml rename referencesEuAndreh2019-05-251-3/+3
* Add "restart: always" rule for all containersEuAndreh2019-05-251-0/+3
* Remove extra quotes from docker-composeEuAndreh2019-05-251-4/+4
* Add shell.nix pointing to shell derivation in default.nixEuAndreh2019-05-251-0/+1
* Update .tfstate filesEuAndreh2019-05-252-0/+0
* Restart docker-compose after deploymentEuAndreh2019-05-253-5/+10
* Remove provisioning from TerraformEuAndreh2019-05-254-28/+21
* Use apt_wait before interacting with apt-getEuAndreh2019-05-251-3/+20
* Move provisioning code into provision.shEuAndreh2019-05-252-8/+8
* Don't run shellcheck on encrypted Bash codeEuAndreh2019-05-251-1/+2
* TODOs.orgEuAndreh2019-05-251-1/+1
* Add /result to .gitignoreEuAndreh2019-05-251-1/+4
* Format default.nix (nixfmt offense)EuAndreh2019-05-251-10/+7
* Fix formatTerraform stageEuAndreh2019-05-251-1/+1
* Add dockerComposeLint job stageEuAndreh2019-05-252-5/+16
* Add lint checks and a pipeline to check using NixEuAndreh2019-05-254-6/+114
* Format vps.tfEuAndreh2019-05-251-13/+16
* Check-in Terraform .tfstate files using git-cryptEuAndreh2019-05-254-0/+2
* Add .terraform to .gitignoreEuAndreh2019-05-251-0/+2
* Don't use pub_key and pvt_key as input variables•••Embed SSH keypair directly into git-crypt. EuAndreh2019-05-253-5/+6
* Remove docker-compose.yml from git-cryptEuAndreh2019-05-253-1/+42
* Add simple DigitalOcean droplet skeleton for TerraformEuAndreh2019-05-252-0/+36
* Use specific folder for volumesEuAndreh2019-05-251-0/+0
* TODOs.orgEuAndreh2019-05-251-13/+19
* Start docker-compose.yml skeleton with WallabagEuAndreh2019-05-253-0/+1
* Remove existing NixOps configurationEuAndreh2019-05-253-33/+0
* Test nixcloud-webservicesEuAndreh2019-05-253-14/+27
* TODOs.orgEuAndreh2019-05-251-3/+11
* Add simple stub VM definitionEuAndreh2019-05-256-0/+22
* Add 1 git-crypt collaborator•••New collaborators: CD356060 EuAndreh <eu@euandre.org> EuAndreh2019-05-242-0/+4
* TODOs.orgEuAndreh2019-05-241-0/+21