aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* Unify quoted strings from restore-backup.env.shEuAndreh2019-06-061-1/+1
|
* Use ${DOLLAR}{VAR} to double scape bash variable in .env templatesEuAndreh2019-06-062-2/+7
|
* Notify when backup fails instead od saying nothingEuAndreh2019-06-061-1/+1
|
* Don't start docker-compose services while debugging restore-backup.shEuAndreh2019-06-061-5/+5
|
* Make message when for shellEnvironment when running tests more readableEuAndreh2019-06-061-1/+1
|
* Allow backups to fail for nowEuAndreh2019-06-062-1/+2
|
* Add mode to all files being copied by AnsibleEuAndreh2019-06-061-7/+7
| | | | | | | | | | Use strict 400 or 500 modes: r: 4 w: 2 x: 1 4 means read-only, while 5 means readable and executable. None are writable: immuatable infrastructure check.
* Re-add Ansible task to create /home/vps/ directoryEuAndreh2019-06-051-0/+4
|
* Remove debug echoEuAndreh2019-06-051-1/+0
|
* Fix ShellCheck offensesEuAndreh2019-06-053-3/+5
|
* Restore backup in Ansible instead of BashEuAndreh2019-06-055-18/+18
|
* TODOs.orgEuAndreh2019-06-051-1/+2
|
* Restore from backup in fresh volumeEuAndreh2019-06-054-10/+48
|
* Add Ansible to shell derivationEuAndreh2019-06-051-0/+1
| | | | Required to run =ansible-playbook= in the CI pipeline.
* Format vps.tf (linter offense)EuAndreh2019-06-051-1/+1
|
* TODOs.orgEuAndreh2019-06-051-0/+1
|
* Add volume to VPSEuAndreh2019-06-053-4/+18
| | | | Don't destroy everything on deploy. This would destroy the volume too.
* Always destroy infrastructure before applyingEuAndreh2019-06-052-1/+6
|
* Script: rotate SSH keysEuAndreh2019-06-055-0/+0
|
* Uncomment accidentally commented codeEuAndreh2019-06-051-6/+6
|
* Script: rotate SSH keysEuAndreh2019-06-055-0/+0
|
* Remove duplicate chmod on borg-remoteEuAndreh2019-06-051-1/+0
|
* Remove ansible-lintEuAndreh2019-06-053-17/+6
| | | | It wasn't trivial to configure: Ansible tried to work on /homeless-shelter :facepalm:
* TODOs.orgEuAndreh2019-06-051-1/+2
|
* Script: rotate SSH keysEuAndreh2019-06-055-0/+0
|
* Add ansible lint in test stageEuAndreh2019-06-052-0/+11
|
* TODOs.orgEuAndreh2019-06-051-1/+5
|
* Fix git-crypt configurationEuAndreh2019-06-0510-1/+1
|
* Add ./secrets/borg/meta.txtEuAndreh2019-06-051-0/+2
|
* Use specific known keys for connecting with the backup serverEuAndreh2019-06-055-3/+6
|
* Change permission of borg client keyEuAndreh2019-06-051-0/+1
|
* Add borgbackup package in Ansible recipeEuAndreh2019-06-051-2/+2
|
* Uncomment phases from provision.shEuAndreh2019-06-051-13/+13
| | | | | I was letting it be commented during iteration, it shouldn't have been committed this way.
* TODOs.orgEuAndreh2019-06-052-13/+33
|
* Add note on SSH logsEuAndreh2019-06-051-0/+2
|
* Use non-standard port for SSHEuAndreh2019-06-053-0/+2
|
* Fix permission of server private key on bootEuAndreh2019-06-051-0/+1
|
* Remove unused cloud-config.env.yamlEuAndreh2019-06-052-8/+0
|
* Use known-hosts.txt with public key from the rotated SSH key pairEuAndreh2019-06-051-0/+1
|
* Fix typo in user-data.env.shEuAndreh2019-06-051-1/+1
|
* Prevent Ansible from generating provision.retry filesEuAndreh2019-06-051-1/+2
|
* cd into ./vps/ before running CI commandsEuAndreh2019-06-051-3/+6
|
* Revert "Use =nix build= instead of =nix-build="EuAndreh2019-06-051-1/+1
| | | | | | | This reverts commit c835e5ed00690d5dc05f4073ad2f7d52e56fe502. The =nix build= command isn't CI friendly: it prints many empty lines instead of the build progress.
* Fix subtasks.dockerComposeLint derivationEuAndreh2019-06-051-0/+2
|
* Fix ShellCheck offensesEuAndreh2019-06-053-2/+6
|
* Clean leftovers from rotate-ssh-keys.shEuAndreh2019-06-051-18/+2
|
* Format vps.tf (linter offense)EuAndreh2019-06-051-1/+1
|
* Use Ansible instead of Bash for provisioningEuAndreh2019-06-0529-64/+301
| | | | | | | | | | | | | | | | | | The deployment is not quite working, and I'm unable to test right now: DigitalOcean is returning 503 for my requests. As of this commit, I can run =ansible-playbook provider.yml= more than once and it will actually be idempotent. Notes: - SSH fingerprint are now taken from the public key file instead of manually supplying it in the terraform template using the =digitalocean_ssh_key= resource; - use Ansible instead of ad-hoc Bash scripts for provisioning the Droplets created by Terraform; - use the =filename.env.extension= to create the concrete files in CI; - use the =user_data= to add the know SSH key pair to the newly created Droplet; - add =rotate-ssh-keys.sh= utils;
* Use =nix build= instead of =nix-build=EuAndreh2019-06-041-1/+1
|
* Fix "dotfiles" name left overEuAndreh2019-06-041-1/+1
|