aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Use =nix build= instead of =nix-build=EuAndreh2019-06-041-1/+1
|
* Fix "dotfiles" name left overEuAndreh2019-06-041-1/+1
|
* Build shell buildInputs in test derivationEuAndreh2019-06-041-7/+16
| | | | | This way we make sure the =shell= derivation always builds, instead of seeing these kinds of failure during CI runs when it's trying to deploy.
* Add utils.nix and remove common derivations from default.nixEuAndreh2019-06-042-79/+120
|
* TODOs.orgEuAndreh2019-06-041-0/+1
|
* Inline definition of rootSrcEuAndreh2019-06-041-2/+1
|
* TODOs.orgEuAndreh2019-06-041-0/+4
|
* TODOs.orgEuAndreh2019-06-021-0/+2
|
* TODOs.orgEuAndreh2019-06-011-0/+1
|
* TODOs.orgEuAndreh2019-05-301-5/+52
|
* Fix vps.tf formatting (linter offense)EuAndreh2019-05-281-1/+1
|
* Use Floating IP on DropletEuAndreh2019-05-283-1/+13
|
* Split $VPS_COMMIT_SHA variable declaration for exportingEuAndreh2019-05-281-1/+2
| | | | ShellCheck offense.
* Use correct Droplet size slugEuAndreh2019-05-281-1/+1
| | | | Taken from https://developers.digitalocean.com/documentation/v2/#list-all-sizes
* Rotate SSH key and use correct VPS_COMMIT_SHA on provisioningEuAndreh2019-05-282-5/+6
|
* Rotate SSH key secretEuAndreh2019-05-281-1/+1
|
* Disable StrictHostKeyChecking for CI SSH configurationEuAndreh2019-05-281-0/+2
|
* TODOs.orgEuAndreh2019-05-281-1/+5
| | | | Extend on how to use =vps-state= to store Terraform state.
* Configure git for vps-state repo in ./scripts/ci/setup.shEuAndreh2019-05-283-4/+6
|
* Use SSH to fetch vps-state so we can push to it laterEuAndreh2019-05-281-1/+1
|
* TODOs.orgEuAndreh2019-05-281-0/+11
| | | | Expand on the decision of using =vps-state= to store Terraform files.
* Add git config metadata to enable commiting in CIEuAndreh2019-05-281-0/+2
|
* Fix mixed usage of $PLAN_FILE variableEuAndreh2019-05-281-4/+5
| | | | Split $PLAN_FILE into $PLAN_FILE_NAME and $PLAN_FILE_PATH.
* Store plan file in vps-state tooEuAndreh2019-05-281-4/+18
|
* Fix shell.nix path in nix-shell custom shebangEuAndreh2019-05-282-2/+2
|
* Fix script references in .build.ymlEuAndreh2019-05-281-6/+3
|
* Split scripts into CI and VPS boxEuAndreh2019-05-285-2/+4
|
* Remove git rev-parse from .envrcEuAndreh2019-05-283-2/+2
|
* Rotate secretsEuAndreh2019-05-281-0/+0
|
* Remove set -x from ci-setup.shEuAndreh2019-05-281-1/+1
|
* Suppress output of docker-compose configEuAndreh2019-05-281-1/+1
| | | | | This derivation sources =.envrc= and it's output can potentially leak secret environment variables from it.
* Fix docker-compose config stepEuAndreh2019-05-281-1/+2
| | | | | | | Add gitMinimal package to baseTasks to allow any derivation to =source .envrc= freely. dockerComposeLint sources it to properly lint the file that will be ran.
* Fix Nextcloud image nameEuAndreh2019-05-281-1/+1
|
* Split Bash variable declaration from assignment (shellcheck offense)EuAndreh2019-05-281-0/+0
|
* Add =set -x= to ci-setup.shEuAndreh2019-05-281-1/+1
|
* Add backup routing before possibly tearing down machineEuAndreh2019-05-286-11/+21
| | | | | | | | | | Create a new backup entry before running =terraform apply=, which may (or may not) destroy the current machine. This shouldn't be an issue for the backup itself, since all of the data should be stored in a separate Block Storage Volume, but we can take advantage of the sevices already needing to be taken down in order to perform a full backup of the data.
* Add secrets/borg_remote{.pub} SSH keypairEuAndreh2019-05-282-0/+0
|
* Rename ./secrets/id_rsa{.pub} -> ./secrets/vps_box{.pub}EuAndreh2019-05-285-3/+3
|
* TODOs.orgEuAndreh2019-05-271-0/+2
|
* TODOs.orgEuAndreh2019-05-271-0/+1
| | | | Add =Nice to have= task on docker-compose version
* TODOs.orgEuAndreh2019-05-271-0/+9
| | | | Add notes on creating backups, and questions on the best strategies available.
* Add variables to properly tag a backupEuAndreh2019-05-271-0/+0
|
* Add --color to ls aliasEuAndreh2019-05-271-1/+1
|
* Add cd to /home/vps/ in profileEuAndreh2019-05-271-0/+1
| | | | | Just a nice to have when SSH'ing interactively, doesn't have and effect on non-interactive SSH commands.
* Use ssh pipe and cat instead of hacky temporary file descriptorEuAndreh2019-05-271-3/+1
| | | | Taken from http://compgroups.net/comp.unix.shell/-scp-dev-fd-63-not-a-regular-file/3063561
* WIP: take a backup during deploymentEuAndreh2019-05-272-2/+11
| | | | | | | Before possibly tearing down the machine, while all services are stopped (after the =docker-compose down= command), create a new backup with the current data. The backup tag should include the commit SHA of the deployment.
* Add more descriptive error message for FIXME derivation testEuAndreh2019-05-271-1/+5
|
* Add bash_aliases.sh and scp it when deploying a new boxEuAndreh2019-05-272-0/+4
|
* Add Nextcloud recipe to docker-compose.yamlEuAndreh2019-05-272-0/+19
|
* Use Bash variables for domain names and container portsEuAndreh2019-05-272-9/+9
|