aboutsummaryrefslogtreecommitdiff
path: root/scripts (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Debug failing run of Ansible playbookEuAndreh2019-06-111-1/+1
|
* Run git crypt lock inside trap functionEuAndreh2019-06-111-7/+7
|
* Move envsubst calls out of setup.sh into deploy.shEuAndreh2019-06-112-7/+9
|
* Set the directory before sourcingEuAndreh2019-06-111-1/+1
|
* Quiet import GPGEuAndreh2019-06-101-1/+1
|
* Allow envrc to be sourced in CIEuAndreh2019-06-101-3/+3
|
* Reorder setup.shEuAndreh2019-06-101-6/+6
|
* Output all generated files on ./generated/, refactor .envrc variablesEuAndreh2019-06-105-52/+47
|
* Store updated Terraform files in case of failureEuAndreh2019-06-101-0/+8
|
* Only send log email when running on CIEuAndreh2019-06-101-0/+7
|
* ci dbgEuAndreh2019-06-101-1/+1
|
* Fix missing stdout redirection '>' characterEuAndreh2019-06-101-1/+1
|
* Trust commited keyEuAndreh2019-06-101-1/+2
|
* Add filename to logs.txt outputEuAndreh2019-06-101-1/+1
| | | | | Taken from: https://stackoverflow.com/questions/5917413/concatenate-multiple-files-but-include-filename-as-section-headers
* Put terraform output in email logs.txtEuAndreh2019-06-101-3/+3
|
* Commit public key instead of downloading itEuAndreh2019-06-101-1/+1
|
* Import GPG key before provisioningEuAndreh2019-06-101-0/+1
|
* Disable SC2016 warningsEuAndreh2019-06-101-0/+2
|
* Change order of stderr -> stdout redirectionEuAndreh2019-06-101-2/+2
| | | | Thanks ShellCheck.
* Encrypt attached logEuAndreh2019-06-101-1/+3
|
* Show in email subject if the run failedEuAndreh2019-06-102-2/+16
|
* Send logs via email after finishing provision.shEuAndreh2019-06-103-2/+44
| | | | The email will be send for both sucessfull and failed runs.
* Remove --progress from borg createEuAndreh2019-06-101-1/+0
| | | | It shows filenames in CI output log.
* Use create_known_hosts_file function instead of duplicating behaviourEuAndreh2019-06-101-3/+6
|
* Fail CI run if backup failsEuAndreh2019-06-101-3/+3
|
* Don't run restore backup Ansible task when not requiredEuAndreh2019-06-101-7/+0
| | | | | | | Instead of performing this task on the generated =restore-backup.sh= file, do it on provision.yaml. The boolean logic is less confusing and the interpolation is less tricky.
* Create generated-known-hosts.txt twiceEuAndreh2019-06-101-0/+1
| | | | | Since it can change after being destroyed by Terraform, we can't create it before and use it later.
* Allow shutdown process to failEuAndreh2019-06-101-2/+2
|
* Provision DNS entries using DigitalOcean instead of DNS registrarEuAndreh2019-06-102-2/+2
| | | | | | | | | | | | | This way we can implement dynamic (provision-time) Floating IP, instead of a hardcoded pre-created Floating IP address. Related changes: - remove =terraform-godaddy= provider, use =digitalocean_record= instead; - create =generated-known-hosts= after provisioning instead of during =setup.sh=: use the =$(terraform output public_floating_ip)= value to make this file dynamic; - remote the =$PINNED_IP= and =$TF_VAR_floating_ip= variables; - add type and descriptions to variable declarations in Terraform recipe.
* Revert "Create Terraform plan before shutting down running containers"EuAndreh2019-06-091-6/+6
| | | | This reverts commit c8963acd02a5095bafb46c79abd45eec45059707.
* Don't use terraform-full derivationEuAndreh2019-06-091-3/+1
|
* Create Terraform plan before shutting down running containersEuAndreh2019-06-091-8/+8
|
* Quote $() call (ShellCheck offense)EuAndreh2019-06-091-1/+1
|
* Make terraform-provider-godaddy available for TerraformEuAndreh2019-06-091-0/+3
|
* Add quote around nested quote expansionEuAndreh2019-06-081-1/+1
| | | | Thanks ShellCheck :)
* Remove unused $PUBLIC_KEY_ONLYEuAndreh2019-06-081-1/+0
| | | | Thanks ShellCheck.
* Generate UserKnownHostsFile dynamically instead of when rotating keysEuAndreh2019-06-081-0/+2
| | | | | | | | | | | | The previous solution would hardcode the server IP. This way we can change the server IP address that is hosting everything and keep the SSH keypair. Previously changing the IP address would require either calling the =./rotate-ssh-keys.sh= script or manually changing the IP address on the known-hosts.txt file. The IP address being duplicated itself was a code smell. Both SSH keypair and IP address can now be changed independently.
* CI debug: remove --verbose flag from borg create commandEuAndreh2019-06-081-1/+0
| | | | THe objective is to remove the logged files from the CI log.
* Revert "Add verbose logging for Ansible playbook command"EuAndreh2019-06-071-1/+1
| | | | This reverts commit 80ee903ac9f09c22b4ef3458393242fa929cff89.
* Add verbose logging for Ansible playbook commandEuAndreh2019-06-071-1/+1
|
* Fix boolean logic bug on ${DESTROY_VOLUME} usageEuAndreh2019-06-071-2/+2
|
* Disable SC2034 for ${DOLLAR} interpolated variableEuAndreh2019-06-071-0/+3
|
* Add ${DESTROY_VOLUME} operational toggleEuAndreh2019-06-062-2/+13
| | | | | | | | | | | | | This way I can dynamically control whether to destroy and recreate all the existing infrastructure entirely from scratch. The advantages of doing so are: - test the non-existence of local state on every deployment; - make sure I can always recreate everything from scratch. The disadvantages are: - slower deployment times; - longer downtime during deployments.
* Remove invalid --stats option from borg extract commandEuAndreh2019-06-061-1/+0
|
* Fail fast on copied Bash filesEuAndreh2019-06-062-0/+2
|
* Unify quoted strings from restore-backup.env.shEuAndreh2019-06-061-1/+1
|
* Use ${DOLLAR}{VAR} to double scape bash variable in .env templatesEuAndreh2019-06-062-2/+7
|
* Notify when backup fails instead od saying nothingEuAndreh2019-06-061-1/+1
|
* Allow backups to fail for nowEuAndreh2019-06-061-1/+1
|
* Remove debug echoEuAndreh2019-06-051-1/+0
|