aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* TODOs.orgEuAndreh2019-05-271-0/+2
|
* TODOs.orgEuAndreh2019-05-271-0/+1
| | | | Add =Nice to have= task on docker-compose version
* TODOs.orgEuAndreh2019-05-271-0/+9
| | | | Add notes on creating backups, and questions on the best strategies available.
* Add variables to properly tag a backupEuAndreh2019-05-271-0/+0
|
* Add --color to ls aliasEuAndreh2019-05-271-1/+1
|
* Add cd to /home/vps/ in profileEuAndreh2019-05-271-0/+1
| | | | | Just a nice to have when SSH'ing interactively, doesn't have and effect on non-interactive SSH commands.
* Use ssh pipe and cat instead of hacky temporary file descriptorEuAndreh2019-05-271-3/+1
| | | | Taken from http://compgroups.net/comp.unix.shell/-scp-dev-fd-63-not-a-regular-file/3063561
* WIP: take a backup during deploymentEuAndreh2019-05-272-2/+11
| | | | | | | Before possibly tearing down the machine, while all services are stopped (after the =docker-compose down= command), create a new backup with the current data. The backup tag should include the commit SHA of the deployment.
* Add more descriptive error message for FIXME derivation testEuAndreh2019-05-271-1/+5
|
* Add bash_aliases.sh and scp it when deploying a new boxEuAndreh2019-05-272-0/+4
|
* Add Nextcloud recipe to docker-compose.yamlEuAndreh2019-05-272-0/+19
|
* Use Bash variables for domain names and container portsEuAndreh2019-05-272-9/+9
|
* Fix formatting of default.nix (linter offense)EuAndreh2019-05-271-7/+2
|
* Revert Terraform to "default" versionEuAndreh2019-05-271-1/+1
|
* TODOs.orgEuAndreh2019-05-271-4/+25
|
* Run terraform init before running terraform applyEuAndreh2019-05-261-0/+1
|
* Use Terraform 0.12.0 in nix-shell and CIEuAndreh2019-05-261-2/+7
|
* ci dbgEuAndreh2019-05-261-0/+1
|
* Change permission of ./secrets/id_rsa after git crypt unlockEuAndreh2019-05-261-0/+2
|
* Disable StrictHostKeyChecking for SSH accessEuAndreh2019-05-261-0/+1
|
* Fix missing argument to sshEuAndreh2019-05-261-1/+1
|
* Fix call to ./provision.sh in .build.ymlEuAndreh2019-05-261-1/+1
|
* Specify shell type to ShellCheck in nix-shell shebang filesEuAndreh2019-05-262-0/+2
|
* Format default.nix (nixfmt offense)EuAndreh2019-05-261-7/+2
|
* Use more robust Bash cd approachEuAndreh2019-05-264-3/+3
|
* Run CI scripts from ./vps/ folderEuAndreh2019-05-261-2/+5
|
* Use nix-shell shebang to run CI scriptsEuAndreh2019-05-263-8/+7
|
* Use nix-shell --pure to run scriptsEuAndreh2019-05-262-4/+11
| | | | Instead of adding them to the =packages= section of .build.yml.
* TODOs.orgEuAndreh2019-05-261-3/+12
|
* Prepare builds.sr.ht CI environment before running build tasksEuAndreh2019-05-265-13/+21
| | | | Make content of .envrc available to subsequent build jobs.
* Unlock with git-crypt in setup phaseEuAndreh2019-05-262-9/+5
|
* Revert back from Debian to NixOSEuAndreh2019-05-261-5/+3
|
* TODOs.orgEuAndreh2019-05-261-10/+34
|
* Perform single-user installation of NixEuAndreh2019-05-261-3/+1
|
* Change ownership to build instead of root of /nixEuAndreh2019-05-261-1/+2
|
* Create Nix store with sudo before installing NixEuAndreh2019-05-261-1/+2
|
* Create Nix store with sudoEuAndreh2019-05-261-1/+1
|
* Change GPG secret referenceEuAndreh2019-05-261-1/+1
|
* TODOs.orgEuAndreh2019-05-261-1/+8
|
* Fix terraform fmt offenseEuAndreh2019-05-261-1/+1
|
* Run shellcheck on Bash files stored in git-cryptEuAndreh2019-05-262-2/+3
|
* Disable shellcheck 2139 offenseEuAndreh2019-05-262-0/+2
|
* Remove extra newline at "Done.\n" messagesEuAndreh2019-05-262-8/+8
|
* Fix unexpected shell scapingEuAndreh2019-05-261-1/+1
|
* Change GPG secret referenceEuAndreh2019-05-261-2/+1
|
* Test using Debian to correctly import GPG secretEuAndreh2019-05-261-4/+6
| | | | | Right now the NixOS image tries to import the GPG before installing GPG. Adding it as a package doesn't solve it.
* Add gnupg to allow pipeline to import GPG keysEuAndreh2019-05-262-1/+3
|
* Automate provisioning and deployment of VPSEuAndreh2019-05-2610-11/+83
| | | | | | | | | | | | | | | | | | | | | | | | In order to perform that I had to remove Terraform's =.tfstate= files from the repository. Terraform does support "backends" for storing the state files, but I settled for storing it on a separate repo (vps-state). For now it solves the state management problem: - it has history of states; - all state files are GPG encrypted; - there's no coordination however, but only the CI should perform a deploy in order to avoid race conditions. I had to add GPG and SSH keys to sr.ht to achieve that: - SSH public key to my profile to authorize it to push to vps-state repo; - SSH private key to the secret builds.sr.ht environment to enable push to the repository from the pipeline; - GPG public key to git-crypt to make it possible for the pipeline to unlock the encrypted content; - GPG private key to the secret builds.sr.ht environment to enable decrypting git-crypt content from the pipeline. In order to avoid divergent environment from local and CI, the ./provision.sh script is ran through nix-shell.
* Add 1 git-crypt collaboratorEuAndreh2019-05-261-0/+0
| | | | | | New collaborators: E69F5ACF euandreh@builds.sr.ht <euandreh@builds.sr.ht>
* Add static file server container with nginxEuAndreh2019-05-262-1/+16
|
generated by cgit v1.3 (git 2.53.0) at 2026-10-19 23:25:36 +0000