aboutsummaryrefslogtreecommitdiff
path: root/secrets (unfollow)
Commit message (Collapse)AuthorFilesLines
2019-05-27Use Bash variables for domain names and container portsEuAndreh1-0/+0
2019-05-26Use more robust Bash cd approachEuAndreh1-0/+0
2019-05-26Automate provisioning and deployment of VPSEuAndreh2-0/+0
In order to perform that I had to remove Terraform's =.tfstate= files from the repository. Terraform does support "backends" for storing the state files, but I settled for storing it on a separate repo (vps-state). For now it solves the state management problem: - it has history of states; - all state files are GPG encrypted; - there's no coordination however, but only the CI should perform a deploy in order to avoid race conditions. I had to add GPG and SSH keys to sr.ht to achieve that: - SSH public key to my profile to authorize it to push to vps-state repo; - SSH private key to the secret builds.sr.ht environment to enable push to the repository from the pipeline; - GPG public key to git-crypt to make it possible for the pipeline to unlock the encrypted content; - GPG private key to the secret builds.sr.ht environment to enable decrypting git-crypt content from the pipeline. In order to avoid divergent environment from local and CI, the ./provision.sh script is ran through nix-shell.
2019-05-25Update .tfstate filesEuAndreh2-0/+0
2019-05-25Restart docker-compose after deploymentEuAndreh1-0/+0
2019-05-25Check-in Terraform .tfstate files using git-cryptEuAndreh2-0/+0
2019-05-25Don't use pub_key and pvt_key as input variablesEuAndreh2-0/+0
Embed SSH keypair directly into git-crypt.
2019-05-25Remove docker-compose.yml from git-cryptEuAndreh2-0/+0
2019-05-25Add simple DigitalOcean droplet skeleton for TerraformEuAndreh1-0/+0
2019-05-25Use specific folder for volumesEuAndreh1-0/+0
2019-05-25Start docker-compose.yml skeleton with WallabagEuAndreh2-0/+0
2019-05-25Remove existing NixOps configurationEuAndreh1-0/+0
2019-05-25Test nixcloud-webservicesEuAndreh1-0/+0
2019-05-25Add simple stub VM definitionEuAndreh2-0/+0