From 54fd61c887f266f8e2e6b1419a86fc6681116069 Mon Sep 17 00:00:00 2001 From: EuAndreh Date: Wed, 5 Jun 2019 16:38:53 -0300 Subject: Use Ansible instead of Bash for provisioning The deployment is not quite working, and I'm unable to test right now: DigitalOcean is returning 503 for my requests. As of this commit, I can run =ansible-playbook provider.yml= more than once and it will actually be idempotent. Notes: - SSH fingerprint are now taken from the public key file instead of manually supplying it in the terraform template using the =digitalocean_ssh_key= resource; - use Ansible instead of ad-hoc Bash scripts for provisioning the Droplets created by Terraform; - use the =filename.env.extension= to create the concrete files in CI; - use the =user_data= to add the know SSH key pair to the newly created Droplet; - add =rotate-ssh-keys.sh= utils; --- ssh.env.conf | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 ssh.env.conf (limited to 'ssh.env.conf') diff --git a/ssh.env.conf b/ssh.env.conf new file mode 100644 index 0000000..6ce50ed --- /dev/null +++ b/ssh.env.conf @@ -0,0 +1,6 @@ +Host $TLD + User root + IdentityFile $PWD/secrets/ssh/vps-box-client + UserKnownHostsFile $PWD/secrets/ssh/known-hosts.txt +Host git.sr.ht + StrictHostKeyChecking no -- cgit v1.3