aboutsummaryrefslogtreecommitdiff
path: root/secrets/terraform (unfollow)
Commit message (Collapse)AuthorFilesLines
2022-03-07Delete all old code and configuration to start from scratch with Guix onlyEuAndreh3-0/+0
Delete files related to: - Terraform - opt/* - scripts/deploy - secrets/* - git-crypt - Nix
2021-03-07Remove terraform stateEuAndreh2-0/+0
2021-02-23Delete Vultr vps resourcesEuAndreh2-0/+0
2021-01-16Update tfstate fileEuAndreh2-0/+0
2021-01-15Checkpoint: Working vps.tf declaration after Vultr migrationEuAndreh2-0/+0
2021-01-15Remove secrets/terraform/tfstate-backups/EuAndreh2-0/+0
2021-01-15Remove secrets/terraform/plan-files/ and terraform-apply.shEuAndreh81-0/+0
2020-11-28vps.tf: Add CNAME "*" subdomain aliasEuAndreh3-0/+0
2020-11-26Terraform: Add email DNS records (DKIM, DMARC, SPF)EuAndreh15-0/+0
2020-11-18Remove default.nix and shell.nixEuAndreh3-0/+0
2020-11-18Remove most Nix filesEuAndreh3-0/+0
2020-11-16Add base Guix configuration and start switching to itEuAndreh5-0/+0
- remove NixOS stateVersion from .envrc; - add guix-reconfigure.sh; - add vps.scm with initial Guix system configuration; - update vps.tf to use the new "base-guix" snapshot. The "base-guix" image doesn't need a password. The "andreh" users has one, but it is configured for not requiring it when running commands as "sudo". The expected minimal steps one has to go through for privilege scalation is via the SSH private key, and accessing the VPS via SSH. Since password login is disabled and root can't login via SSH either, only the private SSH key allows access to the server. After that, the attacker will be able to run commands as root.
2020-11-16Forget existing resource to start working on new VPSEuAndreh1-0/+0
2020-11-02Update terraform generated filesEuAndreh5-0/+0
2020-09-06Refactor vps-configuration.nix: Split secrets from config and envsubst varsEuAndreh8-0/+0
Also rename thingTLD to thingDomain.
2020-08-29Build new VPS server from snapshot using bigger machineEuAndreh4-0/+0
I'm using the snapshot here because I don't have any backup system yet, ¯\_(ツ)_/¯ This should be reverted on vps.tf after applying, and I should get down to doing automatic backups.
2020-08-25Enable automatic backup for VPS serverEuAndreh3-0/+0
2020-08-23Chage DNS record of prosodyEuAndreh6-0/+0
Terraform file changes were du to me initially trying to do this via creating a SRV DNS record. However this is not required, because Prosody is already on the $TLD sever, the only difference being that it is listening on a different port.
2020-08-22Add songbooks documentation DNS addressEuAndreh5-0/+0
2020-08-22WIP: reenable prosody and matterbridge, and add PDFsEuAndreh6-0/+0
2020-08-16Use NGINX to handle the creation of certificates for prosodyEuAndreh6-0/+0
After a terraform state rm '...' of the server and domain configuration, and recreating the instance again while leaving the dettached one running. I had to do this because I was experimenting too much with the domain and I hit the Let's Encrypt rate limit[0]. Because of that I'll recreate certificates less often so that doesn't happen in the new domain during development of the VPS. I'm not shure if this solution works, but I'll commit just as a checkpoint. I had to change the custom DNS nameservers from Digital Ocean to Vultr and that may take a while, so it's worth having this as a checkpoint in time while I'm off to other things. [0]: https://letsencrypt.org/docs/rate-limits/
2020-08-15Use new image with ownership of /etc/nixos/configuration.nix by userEuAndreh4-0/+0
Useful reference: - https://discourse.nixos.org/t/can-i-move-etc-nixos-to-my-dotfiles-and-symlink-it-back-to-etc-nixos/4833/10
2020-08-14Add generated Terraform filesEuAndreh4-0/+0
2020-08-14Add updated terraform filesEuAndreh2-0/+0
2020-08-12Add .tfplan extension to Terraform plan filesEuAndreh33-0/+0
2020-08-11vps-configuration.env.nix: Finish working Nextcloud installationEuAndreh6-0/+0
2020-08-10Update Terraform infrastructureEuAndreh3-0/+0
2020-08-10Semi working setup: Terraform and LetsEncrypt workingEuAndreh21-0/+0
2020-08-10Interactive Terraform plan -> apply cycleEuAndreh11-0/+0
2020-08-10Migration: Remove Ansible and Docker code, move only to NixOSEuAndreh1-0/+0
2020-08-10WIP: Move to Vultr and NixOSEuAndreh2-0/+0