| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Format vps.tf (linter offense) | EuAndreh | 2019-06-05 | 1 | -1/+1 |
| * | Use Ansible instead of Bash for provisioning•••The deployment is not quite working, and I'm unable to test right now:
DigitalOcean is returning 503 for my requests.
As of this commit, I can run =ansible-playbook provider.yml= more than once and
it will actually be idempotent.
Notes:
- SSH fingerprint are now taken from the public key file instead of manually
supplying it in the terraform template using the =digitalocean_ssh_key=
resource;
- use Ansible instead of ad-hoc Bash scripts for provisioning the Droplets
created by Terraform;
- use the =filename.env.extension= to create the concrete files in CI;
- use the =user_data= to add the know SSH key pair to the newly created Droplet;
- add =rotate-ssh-keys.sh= utils;
| EuAndreh | 2019-06-05 | 29 | -64/+301 |
| * | Use =nix build= instead of =nix-build= | EuAndreh | 2019-06-04 | 1 | -1/+1 |
| * | Fix "dotfiles" name left over | EuAndreh | 2019-06-04 | 1 | -1/+1 |
| * | Build shell buildInputs in test derivation•••This way we make sure the =shell= derivation always builds, instead of seeing
these kinds of failure during CI runs when it's trying to deploy.
| EuAndreh | 2019-06-04 | 1 | -7/+16 |
| * | Add utils.nix and remove common derivations from default.nix | EuAndreh | 2019-06-04 | 2 | -79/+120 |
| * | TODOs.org | EuAndreh | 2019-06-04 | 1 | -0/+1 |
| * | Inline definition of rootSrc | EuAndreh | 2019-06-04 | 1 | -2/+1 |
| * | TODOs.org | EuAndreh | 2019-06-04 | 1 | -0/+4 |
| * | TODOs.org | EuAndreh | 2019-06-02 | 1 | -0/+2 |
| * | TODOs.org | EuAndreh | 2019-06-01 | 1 | -0/+1 |
| * | TODOs.org | EuAndreh | 2019-05-30 | 1 | -5/+52 |
| * | Fix vps.tf formatting (linter offense) | EuAndreh | 2019-05-28 | 1 | -1/+1 |
| * | Use Floating IP on Droplet | EuAndreh | 2019-05-28 | 3 | -1/+13 |
| * | Split $VPS_COMMIT_SHA variable declaration for exporting•••ShellCheck offense.
| EuAndreh | 2019-05-28 | 1 | -1/+2 |
| * | Use correct Droplet size slug•••Taken from https://developers.digitalocean.com/documentation/v2/#list-all-sizes
| EuAndreh | 2019-05-28 | 1 | -1/+1 |
| * | Rotate SSH key and use correct VPS_COMMIT_SHA on provisioning | EuAndreh | 2019-05-28 | 2 | -5/+6 |
| * | Rotate SSH key secret | EuAndreh | 2019-05-28 | 1 | -1/+1 |
| * | Disable StrictHostKeyChecking for CI SSH configuration | EuAndreh | 2019-05-28 | 1 | -0/+2 |
| * | TODOs.org•••Extend on how to use =vps-state= to store Terraform state.
| EuAndreh | 2019-05-28 | 1 | -1/+5 |
| * | Configure git for vps-state repo in ./scripts/ci/setup.sh | EuAndreh | 2019-05-28 | 3 | -4/+6 |
| * | Use SSH to fetch vps-state so we can push to it later | EuAndreh | 2019-05-28 | 1 | -1/+1 |
| * | TODOs.org•••Expand on the decision of using =vps-state= to store Terraform files.
| EuAndreh | 2019-05-28 | 1 | -0/+11 |
| * | Add git config metadata to enable commiting in CI | EuAndreh | 2019-05-28 | 1 | -0/+2 |
| * | Fix mixed usage of $PLAN_FILE variable•••Split $PLAN_FILE into $PLAN_FILE_NAME and $PLAN_FILE_PATH.
| EuAndreh | 2019-05-28 | 1 | -4/+5 |
| * | Store plan file in vps-state too | EuAndreh | 2019-05-28 | 1 | -4/+18 |
| * | Fix shell.nix path in nix-shell custom shebang | EuAndreh | 2019-05-28 | 2 | -2/+2 |
| * | Fix script references in .build.yml | EuAndreh | 2019-05-28 | 1 | -6/+3 |
| * | Split scripts into CI and VPS box | EuAndreh | 2019-05-28 | 5 | -2/+4 |
| * | Remove git rev-parse from .envrc | EuAndreh | 2019-05-28 | 3 | -2/+2 |
| * | Rotate secrets | EuAndreh | 2019-05-28 | 1 | -0/+0 |
| * | Remove set -x from ci-setup.sh | EuAndreh | 2019-05-28 | 1 | -1/+1 |
| * | Suppress output of docker-compose config•••This derivation sources =.envrc= and it's output can potentially leak secret
environment variables from it.
| EuAndreh | 2019-05-28 | 1 | -1/+1 |
| * | Fix docker-compose config step•••Add gitMinimal package to baseTasks to allow any derivation to =source .envrc=
freely.
dockerComposeLint sources it to properly lint the file that will be ran.
| EuAndreh | 2019-05-28 | 1 | -1/+2 |
| * | Fix Nextcloud image name | EuAndreh | 2019-05-28 | 1 | -1/+1 |
| * | Split Bash variable declaration from assignment (shellcheck offense) | EuAndreh | 2019-05-28 | 1 | -0/+0 |
| * | Add =set -x= to ci-setup.sh | EuAndreh | 2019-05-28 | 1 | -1/+1 |
| * | Add backup routing before possibly tearing down machine•••Create a new backup entry before running =terraform apply=, which may (or may
not) destroy the current machine.
This shouldn't be an issue for the backup itself, since all of the data should
be stored in a separate Block Storage Volume, but we can take advantage of the
sevices already needing to be taken down in order to perform a full backup of
the data.
| EuAndreh | 2019-05-28 | 6 | -11/+21 |
| * | Add secrets/borg_remote{.pub} SSH keypair | EuAndreh | 2019-05-28 | 2 | -0/+0 |
| * | Rename ./secrets/id_rsa{.pub} -> ./secrets/vps_box{.pub} | EuAndreh | 2019-05-28 | 5 | -3/+3 |
| * | TODOs.org | EuAndreh | 2019-05-27 | 1 | -0/+2 |
| * | TODOs.org•••Add =Nice to have= task on docker-compose version
| EuAndreh | 2019-05-27 | 1 | -0/+1 |
| * | TODOs.org•••Add notes on creating backups, and questions on the best strategies available.
| EuAndreh | 2019-05-27 | 1 | -0/+9 |
| * | Add variables to properly tag a backup | EuAndreh | 2019-05-27 | 1 | -0/+0 |
| * | Add --color to ls alias | EuAndreh | 2019-05-27 | 1 | -1/+1 |
| * | Add cd to /home/vps/ in profile•••Just a nice to have when SSH'ing interactively, doesn't have and effect on
non-interactive SSH commands.
| EuAndreh | 2019-05-27 | 1 | -0/+1 |
| * | Use ssh pipe and cat instead of hacky temporary file descriptor•••Taken from http://compgroups.net/comp.unix.shell/-scp-dev-fd-63-not-a-regular-file/3063561
| EuAndreh | 2019-05-27 | 1 | -3/+1 |
| * | WIP: take a backup during deployment•••Before possibly tearing down the machine, while all services are stopped (after
the =docker-compose down= command), create a new backup with the current data.
The backup tag should include the commit SHA of the deployment.
| EuAndreh | 2019-05-27 | 2 | -2/+11 |
| * | Add more descriptive error message for FIXME derivation test | EuAndreh | 2019-05-27 | 1 | -1/+5 |
| * | Add bash_aliases.sh and scp it when deploying a new box | EuAndreh | 2019-05-27 | 2 | -0/+4 |
