aboutsummaryrefslogtreecommitdiff
path: root/secrets/envrc.sh (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Add credentials for manipulating DNS entries.EuAndreh2019-06-081-0/+0
|
* Use nextcloud.${TLD} instead of cloud.${TLD} as CNAME for Nextcloud installationEuAndreh2019-06-081-0/+0
|
* Add ${DESTROY_VOLUME} operational toggleEuAndreh2019-06-061-0/+0
| | | | | | | | | | | | | This way I can dynamically control whether to destroy and recreate all the existing infrastructure entirely from scratch. The advantages of doing so are: - test the non-existence of local state on every deployment; - make sure I can always recreate everything from scratch. The disadvantages are: - slower deployment times; - longer downtime during deployments.
* Use non-standard port for SSHEuAndreh2019-06-051-0/+0
|
* Use Ansible instead of Bash for provisioningEuAndreh2019-06-051-0/+0
| | | | | | | | | | | | | | | | | | The deployment is not quite working, and I'm unable to test right now: DigitalOcean is returning 503 for my requests. As of this commit, I can run =ansible-playbook provider.yml= more than once and it will actually be idempotent. Notes: - SSH fingerprint are now taken from the public key file instead of manually supplying it in the terraform template using the =digitalocean_ssh_key= resource; - use Ansible instead of ad-hoc Bash scripts for provisioning the Droplets created by Terraform; - use the =filename.env.extension= to create the concrete files in CI; - use the =user_data= to add the know SSH key pair to the newly created Droplet; - add =rotate-ssh-keys.sh= utils;
* Use Floating IP on DropletEuAndreh2019-05-281-0/+0
|
* Remove git rev-parse from .envrcEuAndreh2019-05-281-0/+0
|
* Rotate secretsEuAndreh2019-05-281-0/+0
|
* Split Bash variable declaration from assignment (shellcheck offense)EuAndreh2019-05-281-0/+0
|
* Add backup routing before possibly tearing down machineEuAndreh2019-05-281-0/+0
| | | | | | | | | | Create a new backup entry before running =terraform apply=, which may (or may not) destroy the current machine. This shouldn't be an issue for the backup itself, since all of the data should be stored in a separate Block Storage Volume, but we can take advantage of the sevices already needing to be taken down in order to perform a full backup of the data.
* Add variables to properly tag a backupEuAndreh2019-05-271-0/+0
|
* Add Nextcloud recipe to docker-compose.yamlEuAndreh2019-05-271-0/+0
|
* Use Bash variables for domain names and container portsEuAndreh2019-05-271-0/+0
|
* Use more robust Bash cd approachEuAndreh2019-05-261-0/+0
|
* Restart docker-compose after deploymentEuAndreh2019-05-251-0/+0
|
* Remove docker-compose.yml from git-cryptEuAndreh2019-05-251-0/+0
|
* Add simple DigitalOcean droplet skeleton for TerraformEuAndreh2019-05-251-0/+0
|
* Start docker-compose.yml skeleton with WallabagEuAndreh2019-05-251-0/+0
|
* Add simple stub VM definitionEuAndreh2019-05-251-0/+0