aboutsummaryrefslogtreecommitdiff
path: root/secrets (unfollow)
Commit message (Collapse)AuthorFilesLines
2020-08-12Add .tfplan extension to Terraform plan filesEuAndreh33-0/+0
2020-08-11vps-configuration.env.nix: Finish working Nextcloud installationEuAndreh6-0/+0
2020-08-11nixos-update.sh: Always set the NixOS channel based on $SYSTEM_STATE_VERSIONEuAndreh1-0/+0
2020-08-10Update Terraform infrastructureEuAndreh3-0/+0
2020-08-10Semi working setup: Terraform and LetsEncrypt workingEuAndreh23-0/+1
2020-08-10Interactive Terraform plan -> apply cycleEuAndreh11-0/+0
2020-08-10nixfmt ./secrets/nix/e1d5f317b0f7a-snapshot-configuration.nixEuAndreh1-0/+0
2020-08-10Use password via stdin, and store the snapshot image configuration.nixEuAndreh2-0/+0
2020-08-10Use new image with new SSH key and andreh userEuAndreh1-0/+0
2020-08-10Remove unused secrets/{borg,ssh}/EuAndreh6-0/+0
2020-08-10Migration: Remove Ansible and Docker code, move only to NixOSEuAndreh7-0/+0
2020-08-10WIP: Move to Vultr and NixOSEuAndreh4-0/+0
2020-08-09secret-envrc.sh: Fix remote borg pathEuAndreh1-0/+0
2020-08-08scripts/ci/setup.sh: Get GPG key from serverEuAndreh1-0/+0
Instead of storing it on the repository.
2020-08-06Remove gpodder.net sync software from the serverEuAndreh1-0/+0
2020-08-05Add gpodder environment variablesEuAndreh1-0/+0
2020-08-05Add gpodder container initial implementationEuAndreh1-0/+0
2020-08-02Toggle DESTROY_VPSEuAndreh1-0/+0
2020-08-02Conform volume_name to digital ocean's limitationEuAndreh1-0/+0
2020-08-02Remove all wallabag references leftEuAndreh1-0/+0
2020-08-02Rename DESTROY_VOLUME -> DESTROY_VPSEuAndreh1-0/+0
2020-08-02Toggle DESTROY_VOLUMEEuAndreh1-0/+0
2020-08-02secret-envry.sh: Add ${DESTROY_VOLUME} operational toggleEuAndreh1-0/+0
2020-08-02Use a name from the environment for the names of the host and the volumeEuAndreh1-0/+0
2020-08-02secret-envrc.sh: Update TLDEuAndreh1-0/+0
2019-06-16Chage $TLD! :tada:EuAndreh1-0/+0
2019-06-15Fancify TLD prefixes for Wallabag and NextcloudEuAndreh1-0/+0
2019-06-13Specify email address when rotating keysEuAndreh1-0/+0
2019-06-10Remove call to =cd= in envrc filesEuAndreh1-0/+0
2019-06-10Output all generated files on ./generated/, refactor .envrc variablesEuAndreh2-0/+0
2019-06-10Re enable $DESTROY_VOLUME toggleEuAndreh1-0/+0
2019-06-10Import GPG key before provisioningEuAndreh1-0/+0
2019-06-10Encrypt attached logEuAndreh1-0/+0
2019-06-10Send logs via email after finishing provision.shEuAndreh1-0/+0
The email will be send for both sucessfull and failed runs.
2019-06-10Disable $DESTROY_VOLUME operational toggleEuAndreh1-0/+0
2019-06-10Change SSH portEuAndreh1-0/+0
2019-06-10Provision DNS entries using DigitalOcean instead of DNS registrarEuAndreh1-0/+0
This way we can implement dynamic (provision-time) Floating IP, instead of a hardcoded pre-created Floating IP address. Related changes: - remove =terraform-godaddy= provider, use =digitalocean_record= instead; - create =generated-known-hosts= after provisioning instead of during =setup.sh=: use the =$(terraform output public_floating_ip)= value to make this file dynamic; - remote the =$PINNED_IP= and =$TF_VAR_floating_ip= variables; - add type and descriptions to variable declarations in Terraform recipe.
2019-06-09Change $TLDEuAndreh1-0/+0
2019-06-09Rotate DNS registrar keysEuAndreh1-0/+0
2019-06-09Use same NIX_PATH locally and on the CIEuAndreh1-0/+0
2019-06-08Use terraform-godaddy and Terraform 0.11EuAndreh1-0/+0
The =terraform-godaddy= package supports only Terraform 0.11 as of now. It is not packaged by default by nixpkgs, and the =postInstall= hook is required because Terraform looks for providers usinthe the =terraform-provider-$name= template, which the package doesn't follow. I had to remove the loop on vps.tf since it requires Terraform 0.12. I'll either wait for =terraform-godaddy= to upgrade to 0.12 or try to do it myself if it bothers me enough.
2019-06-08Add credentials for manipulating DNS entries.EuAndreh1-0/+0
2019-06-08Generate UserKnownHostsFile dynamically instead of when rotating keysEuAndreh1-0/+0
The previous solution would hardcode the server IP. This way we can change the server IP address that is hosting everything and keep the SSH keypair. Previously changing the IP address would require either calling the =./rotate-ssh-keys.sh= script or manually changing the IP address on the known-hosts.txt file. The IP address being duplicated itself was a code smell. Both SSH keypair and IP address can now be changed independently.
2019-06-08Use nextcloud.${TLD} instead of cloud.${TLD} as CNAME for Nextcloud installationEuAndreh1-0/+0
2019-06-06Add ${DESTROY_VOLUME} operational toggleEuAndreh1-0/+0
This way I can dynamically control whether to destroy and recreate all the existing infrastructure entirely from scratch. The advantages of doing so are: - test the non-existence of local state on every deployment; - make sure I can always recreate everything from scratch. The disadvantages are: - slower deployment times; - longer downtime during deployments.
2019-06-05Script: rotate SSH keysEuAndreh5-0/+0
2019-06-05Script: rotate SSH keysEuAndreh5-0/+0
2019-06-05Script: rotate SSH keysEuAndreh5-0/+0
2019-06-05Fix git-crypt configurationEuAndreh9-0/+0
2019-06-05Add ./secrets/borg/meta.txtEuAndreh1-0/+2
generated by cgit v1.3 (git 2.53.0) at 2026-10-19 22:22:33 +0000