toph - Setup and configuration for VPS and other personal server

	Commit message (Collapse)	Author	Age	Files	Lines
*	Output all generated files on ./generated/, refactor .envrc variables	EuAndreh	2019-06-10	1	-1/+1
\|
*	Remove CI dbg code	EuAndreh	2019-06-09	1	-2/+0
\|
*	ci dbg	EuAndreh	2019-06-09	1	-0/+2
\|
*	cd into ./vps/ before running CI commands	EuAndreh	2019-06-05	1	-3/+6
\|
*	Revert "Use =nix build= instead of =nix-build="	EuAndreh	2019-06-05	1	-1/+1
\| \| \| \| \| \| \|	This reverts commit c835e5ed00690d5dc05f4073ad2f7d52e56fe502. The =nix build= command isn't CI friendly: it prints many empty lines instead of the build progress.
*	Use =nix build= instead of =nix-build=	EuAndreh	2019-06-04	1	-1/+1
\|
*	Rotate SSH key and use correct VPS_COMMIT_SHA on provisioning	EuAndreh	2019-05-28	1	-1/+1
\|
*	Rotate SSH key secret	EuAndreh	2019-05-28	1	-1/+1
\|
*	Configure git for vps-state repo in ./scripts/ci/setup.sh	EuAndreh	2019-05-28	1	-1/+1
\|
*	Use SSH to fetch vps-state so we can push to it later	EuAndreh	2019-05-28	1	-1/+1
\|
*	Fix script references in .build.yml	EuAndreh	2019-05-28	1	-6/+3
\|
*	Fix call to ./provision.sh in .build.yml	EuAndreh	2019-05-26	1	-1/+1
\|
*	Run CI scripts from ./vps/ folder	EuAndreh	2019-05-26	1	-2/+5
\|
*	Use nix-shell shebang to run CI scripts	EuAndreh	2019-05-26	1	-6/+3
\|
*	Use nix-shell --pure to run scripts	EuAndreh	2019-05-26	1	-2/+3
\| \| \| \|	Instead of adding them to the =packages= section of .build.yml.
*	Prepare builds.sr.ht CI environment before running build tasks	EuAndreh	2019-05-26	1	-5/+2
\| \| \| \|	Make content of .envrc available to subsequent build jobs.
*	Unlock with git-crypt in setup phase	EuAndreh	2019-05-26	1	-1/+3
\|
*	Revert back from Debian to NixOS	EuAndreh	2019-05-26	1	-5/+3
\|
*	Perform single-user installation of Nix	EuAndreh	2019-05-26	1	-3/+1
\|
*	Change ownership to build instead of root of /nix	EuAndreh	2019-05-26	1	-1/+2
\|
*	Create Nix store with sudo before installing Nix	EuAndreh	2019-05-26	1	-1/+2
\|
*	Create Nix store with sudo	EuAndreh	2019-05-26	1	-1/+1
\|
*	Change GPG secret reference	EuAndreh	2019-05-26	1	-1/+1
\|
*	Run shellcheck on Bash files stored in git-crypt	EuAndreh	2019-05-26	1	-0/+2
\|
*	Change GPG secret reference	EuAndreh	2019-05-26	1	-2/+1
\|
*	Test using Debian to correctly import GPG secret	EuAndreh	2019-05-26	1	-4/+6
\| \| \| \| \|	Right now the NixOS image tries to import the GPG before installing GPG. Adding it as a package doesn't solve it.
*	Add gnupg to allow pipeline to import GPG keys	EuAndreh	2019-05-26	1	-0/+2
\|
*	Automate provisioning and deployment of VPS	EuAndreh	2019-05-26	1	-0/+7
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	In order to perform that I had to remove Terraform's =.tfstate= files from the repository. Terraform does support "backends" for storing the state files, but I settled for storing it on a separate repo (vps-state). For now it solves the state management problem: - it has history of states; - all state files are GPG encrypted; - there's no coordination however, but only the CI should perform a deploy in order to avoid race conditions. I had to add GPG and SSH keys to sr.ht to achieve that: - SSH public key to my profile to authorize it to push to vps-state repo; - SSH private key to the secret builds.sr.ht environment to enable push to the repository from the pipeline; - GPG public key to git-crypt to make it possible for the pipeline to unlock the encrypted content; - GPG private key to the secret builds.sr.ht environment to enable decrypting git-crypt content from the pipeline. In order to avoid divergent environment from local and CI, the ./provision.sh script is ran through nix-shell.
*	Add lint checks and a pipeline to check using Nix	EuAndreh	2019-05-25	1	-0/+13