aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Store plan file in vps-state tooEuAndreh2019-05-281-4/+18
|
* Fix shell.nix path in nix-shell custom shebangEuAndreh2019-05-282-2/+2
|
* Fix script references in .build.ymlEuAndreh2019-05-281-6/+3
|
* Split scripts into CI and VPS boxEuAndreh2019-05-285-2/+4
|
* Remove git rev-parse from .envrcEuAndreh2019-05-283-2/+2
|
* Rotate secretsEuAndreh2019-05-281-0/+0
|
* Remove set -x from ci-setup.shEuAndreh2019-05-281-1/+1
|
* Suppress output of docker-compose configEuAndreh2019-05-281-1/+1
| | | | | This derivation sources =.envrc= and it's output can potentially leak secret environment variables from it.
* Fix docker-compose config stepEuAndreh2019-05-281-1/+2
| | | | | | | Add gitMinimal package to baseTasks to allow any derivation to =source .envrc= freely. dockerComposeLint sources it to properly lint the file that will be ran.
* Fix Nextcloud image nameEuAndreh2019-05-281-1/+1
|
* Split Bash variable declaration from assignment (shellcheck offense)EuAndreh2019-05-281-0/+0
|
* Add =set -x= to ci-setup.shEuAndreh2019-05-281-1/+1
|
* Add backup routing before possibly tearing down machineEuAndreh2019-05-286-11/+21
| | | | | | | | | | Create a new backup entry before running =terraform apply=, which may (or may not) destroy the current machine. This shouldn't be an issue for the backup itself, since all of the data should be stored in a separate Block Storage Volume, but we can take advantage of the sevices already needing to be taken down in order to perform a full backup of the data.
* Add secrets/borg_remote{.pub} SSH keypairEuAndreh2019-05-282-0/+0
|
* Rename ./secrets/id_rsa{.pub} -> ./secrets/vps_box{.pub}EuAndreh2019-05-285-3/+3
|
* TODOs.orgEuAndreh2019-05-271-0/+2
|
* TODOs.orgEuAndreh2019-05-271-0/+1
| | | | Add =Nice to have= task on docker-compose version
* TODOs.orgEuAndreh2019-05-271-0/+9
| | | | Add notes on creating backups, and questions on the best strategies available.
* Add variables to properly tag a backupEuAndreh2019-05-271-0/+0
|
* Add --color to ls aliasEuAndreh2019-05-271-1/+1
|
* Add cd to /home/vps/ in profileEuAndreh2019-05-271-0/+1
| | | | | Just a nice to have when SSH'ing interactively, doesn't have and effect on non-interactive SSH commands.
* Use ssh pipe and cat instead of hacky temporary file descriptorEuAndreh2019-05-271-3/+1
| | | | Taken from http://compgroups.net/comp.unix.shell/-scp-dev-fd-63-not-a-regular-file/3063561
* WIP: take a backup during deploymentEuAndreh2019-05-272-2/+11
| | | | | | | Before possibly tearing down the machine, while all services are stopped (after the =docker-compose down= command), create a new backup with the current data. The backup tag should include the commit SHA of the deployment.
* Add more descriptive error message for FIXME derivation testEuAndreh2019-05-271-1/+5
|
* Add bash_aliases.sh and scp it when deploying a new boxEuAndreh2019-05-272-0/+4
|
* Add Nextcloud recipe to docker-compose.yamlEuAndreh2019-05-272-0/+19
|
* Use Bash variables for domain names and container portsEuAndreh2019-05-272-9/+9
|
* Fix formatting of default.nix (linter offense)EuAndreh2019-05-271-7/+2
|
* Revert Terraform to "default" versionEuAndreh2019-05-271-1/+1
|
* TODOs.orgEuAndreh2019-05-271-4/+25
|
* Run terraform init before running terraform applyEuAndreh2019-05-261-0/+1
|
* Use Terraform 0.12.0 in nix-shell and CIEuAndreh2019-05-261-2/+7
|
* ci dbgEuAndreh2019-05-261-0/+1
|
* Change permission of ./secrets/id_rsa after git crypt unlockEuAndreh2019-05-261-0/+2
|
* Disable StrictHostKeyChecking for SSH accessEuAndreh2019-05-261-0/+1
|
* Fix missing argument to sshEuAndreh2019-05-261-1/+1
|
* Fix call to ./provision.sh in .build.ymlEuAndreh2019-05-261-1/+1
|
* Specify shell type to ShellCheck in nix-shell shebang filesEuAndreh2019-05-262-0/+2
|
* Format default.nix (nixfmt offense)EuAndreh2019-05-261-7/+2
|
* Use more robust Bash cd approachEuAndreh2019-05-264-3/+3
|
* Run CI scripts from ./vps/ folderEuAndreh2019-05-261-2/+5
|
* Use nix-shell shebang to run CI scriptsEuAndreh2019-05-263-8/+7
|
* Use nix-shell --pure to run scriptsEuAndreh2019-05-262-4/+11
| | | | Instead of adding them to the =packages= section of .build.yml.
* TODOs.orgEuAndreh2019-05-261-3/+12
|
* Prepare builds.sr.ht CI environment before running build tasksEuAndreh2019-05-265-13/+21
| | | | Make content of .envrc available to subsequent build jobs.
* Unlock with git-crypt in setup phaseEuAndreh2019-05-262-9/+5
|
* Revert back from Debian to NixOSEuAndreh2019-05-261-5/+3
|
* TODOs.orgEuAndreh2019-05-261-10/+34
|
* Perform single-user installation of NixEuAndreh2019-05-261-3/+1
|
* Change ownership to build instead of root of /nixEuAndreh2019-05-261-1/+2
|