aboutsummaryrefslogtreecommitdiff
path: root/secrets/ssh (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Remove unused secrets/{borg,ssh}/EuAndreh2020-08-102-0/+0
|
* Migration: Remove Ansible and Docker code, move only to NixOSEuAndreh2020-08-104-0/+0
|
* Generate UserKnownHostsFile dynamically instead of when rotating keysEuAndreh2019-06-081-0/+0
| | | | | | | | | | | | The previous solution would hardcode the server IP. This way we can change the server IP address that is hosting everything and keep the SSH keypair. Previously changing the IP address would require either calling the =./rotate-ssh-keys.sh= script or manually changing the IP address on the known-hosts.txt file. The IP address being duplicated itself was a code smell. Both SSH keypair and IP address can now be changed independently.
* Script: rotate SSH keysEuAndreh2019-06-055-0/+0
|
* Script: rotate SSH keysEuAndreh2019-06-055-0/+0
|
* Script: rotate SSH keysEuAndreh2019-06-055-0/+0
|
* Fix git-crypt configurationEuAndreh2019-06-055-0/+0
|
* Use known-hosts.txt with public key from the rotated SSH key pairEuAndreh2019-06-051-0/+1
|
* Use Ansible instead of Bash for provisioningEuAndreh2019-06-055-0/+100
The deployment is not quite working, and I'm unable to test right now: DigitalOcean is returning 503 for my requests. As of this commit, I can run =ansible-playbook provider.yml= more than once and it will actually be idempotent. Notes: - SSH fingerprint are now taken from the public key file instead of manually supplying it in the terraform template using the =digitalocean_ssh_key= resource; - use Ansible instead of ad-hoc Bash scripts for provisioning the Droplets created by Terraform; - use the =filename.env.extension= to create the concrete files in CI; - use the =user_data= to add the know SSH key pair to the newly created Droplet; - add =rotate-ssh-keys.sh= utils;