server - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Files	Lines
2019-06-10	Provision DNS entries using DigitalOcean instead of DNS registrar	EuAndreh	1	-1/+0
	This way we can implement dynamic (provision-time) Floating IP, instead of a hardcoded pre-created Floating IP address. Related changes: - remove =terraform-godaddy= provider, use =digitalocean_record= instead; - create =generated-known-hosts= after provisioning instead of during =setup.sh=: use the =$(terraform output public_floating_ip)= value to make this file dynamic; - remote the =$PINNED_IP= and =$TF_VAR_floating_ip= variables; - add type and descriptions to variable declarations in Terraform recipe.
2019-06-08	Add quote around nested quote expansion	EuAndreh	1	-1/+1
	Thanks ShellCheck :)
2019-06-08	Remove unused $PUBLIC_KEY_ONLY	EuAndreh	1	-1/+0
	Thanks ShellCheck.
2019-06-08	Generate UserKnownHostsFile dynamically instead of when rotating keys	EuAndreh	1	-0/+2
	The previous solution would hardcode the server IP. This way we can change the server IP address that is hosting everything and keep the SSH keypair. Previously changing the IP address would require either calling the =./rotate-ssh-keys.sh= script or manually changing the IP address on the known-hosts.txt file. The IP address being duplicated itself was a code smell. Both SSH keypair and IP address can now be changed independently.
2019-06-06	Use ${DOLLAR}{VAR} to double scape bash variable in .env templates	EuAndreh	1	-0/+5

2019-06-05	Restore backup in Ansible instead of Bash	EuAndreh	1	-1/+3

2019-06-05	Remove duplicate chmod on borg-remote	EuAndreh	1	-1/+0

2019-06-05	Remove unused cloud-config.env.yaml	EuAndreh	1	-1/+0

2019-06-05	Fix ShellCheck offenses	EuAndreh	1	-2/+4

2019-06-05	Use Ansible instead of Bash for provisioning	EuAndreh	1	-3/+11
	The deployment is not quite working, and I'm unable to test right now: DigitalOcean is returning 503 for my requests. As of this commit, I can run =ansible-playbook provider.yml= more than once and it will actually be idempotent. Notes: - SSH fingerprint are now taken from the public key file instead of manually supplying it in the terraform template using the =digitalocean_ssh_key= resource; - use Ansible instead of ad-hoc Bash scripts for provisioning the Droplets created by Terraform; - use the =filename.env.extension= to create the concrete files in CI; - use the =user_data= to add the know SSH key pair to the newly created Droplet; - add =rotate-ssh-keys.sh= utils;
2019-05-28	Configure git for vps-state repo in ./scripts/ci/setup.sh	EuAndreh	1	-1/+5

2019-05-28	Fix shell.nix path in nix-shell custom shebang	EuAndreh	1	-1/+1

2019-05-28	Split scripts into CI and VPS box	EuAndreh	1	-0/+1

2019-05-28	Remove set -x from ci-setup.sh	EuAndreh	1	-1/+1

2019-05-28	Add =set -x= to ci-setup.sh	EuAndreh	1	-1/+1

2019-05-28	Add backup routing before possibly tearing down machine	EuAndreh	1	-0/+1
	Create a new backup entry before running =terraform apply=, which may (or may not) destroy the current machine. This shouldn't be an issue for the backup itself, since all of the data should be stored in a separate Block Storage Volume, but we can take advantage of the sevices already needing to be taken down in order to perform a full backup of the data.
2019-05-28	Rename ./secrets/id_rsa{.pub} -> ./secrets/vps_box{.pub}	EuAndreh	1	-1/+1

2019-05-26	Change permission of ./secrets/id_rsa after git crypt unlock	EuAndreh	1	-0/+2

2019-05-26	Specify shell type to ShellCheck in nix-shell shebang files	EuAndreh	1	-0/+1

2019-05-26	Use more robust Bash cd approach	EuAndreh	1	-1/+1

2019-05-26	Use nix-shell shebang to run CI scripts	EuAndreh	1	-1/+2

2019-05-26	Prepare builds.sr.ht CI environment before running build tasks	EuAndreh	1	-0/+16
	Make content of .envrc available to subsequent build jobs.