aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Use correct Droplet size slugEuAndreh2019-05-281-1/+1
| | | | Taken from https://developers.digitalocean.com/documentation/v2/#list-all-sizes
* Rotate SSH key and use correct VPS_COMMIT_SHA on provisioningEuAndreh2019-05-282-5/+6
|
* Rotate SSH key secretEuAndreh2019-05-281-1/+1
|
* Disable StrictHostKeyChecking for CI SSH configurationEuAndreh2019-05-281-0/+2
|
* TODOs.orgEuAndreh2019-05-281-1/+5
| | | | Extend on how to use =vps-state= to store Terraform state.
* Configure git for vps-state repo in ./scripts/ci/setup.shEuAndreh2019-05-283-4/+6
|
* Use SSH to fetch vps-state so we can push to it laterEuAndreh2019-05-281-1/+1
|
* TODOs.orgEuAndreh2019-05-281-0/+11
| | | | Expand on the decision of using =vps-state= to store Terraform files.
* Add git config metadata to enable commiting in CIEuAndreh2019-05-281-0/+2
|
* Fix mixed usage of $PLAN_FILE variableEuAndreh2019-05-281-4/+5
| | | | Split $PLAN_FILE into $PLAN_FILE_NAME and $PLAN_FILE_PATH.
* Store plan file in vps-state tooEuAndreh2019-05-281-4/+18
|
* Fix shell.nix path in nix-shell custom shebangEuAndreh2019-05-282-2/+2
|
* Fix script references in .build.ymlEuAndreh2019-05-281-6/+3
|
* Split scripts into CI and VPS boxEuAndreh2019-05-285-2/+4
|
* Remove git rev-parse from .envrcEuAndreh2019-05-283-2/+2
|
* Rotate secretsEuAndreh2019-05-281-0/+0
|
* Remove set -x from ci-setup.shEuAndreh2019-05-281-1/+1
|
* Suppress output of docker-compose configEuAndreh2019-05-281-1/+1
| | | | | This derivation sources =.envrc= and it's output can potentially leak secret environment variables from it.
* Fix docker-compose config stepEuAndreh2019-05-281-1/+2
| | | | | | | Add gitMinimal package to baseTasks to allow any derivation to =source .envrc= freely. dockerComposeLint sources it to properly lint the file that will be ran.
* Fix Nextcloud image nameEuAndreh2019-05-281-1/+1
|
* Split Bash variable declaration from assignment (shellcheck offense)EuAndreh2019-05-281-0/+0
|
* Add =set -x= to ci-setup.shEuAndreh2019-05-281-1/+1
|
* Add backup routing before possibly tearing down machineEuAndreh2019-05-286-11/+21
| | | | | | | | | | Create a new backup entry before running =terraform apply=, which may (or may not) destroy the current machine. This shouldn't be an issue for the backup itself, since all of the data should be stored in a separate Block Storage Volume, but we can take advantage of the sevices already needing to be taken down in order to perform a full backup of the data.
* Add secrets/borg_remote{.pub} SSH keypairEuAndreh2019-05-282-0/+0
|
* Rename ./secrets/id_rsa{.pub} -> ./secrets/vps_box{.pub}EuAndreh2019-05-285-3/+3
|
* TODOs.orgEuAndreh2019-05-271-0/+2
|
* TODOs.orgEuAndreh2019-05-271-0/+1
| | | | Add =Nice to have= task on docker-compose version
* TODOs.orgEuAndreh2019-05-271-0/+9
| | | | Add notes on creating backups, and questions on the best strategies available.
* Add variables to properly tag a backupEuAndreh2019-05-271-0/+0
|
* Add --color to ls aliasEuAndreh2019-05-271-1/+1
|
* Add cd to /home/vps/ in profileEuAndreh2019-05-271-0/+1
| | | | | Just a nice to have when SSH'ing interactively, doesn't have and effect on non-interactive SSH commands.
* Use ssh pipe and cat instead of hacky temporary file descriptorEuAndreh2019-05-271-3/+1
| | | | Taken from http://compgroups.net/comp.unix.shell/-scp-dev-fd-63-not-a-regular-file/3063561
* WIP: take a backup during deploymentEuAndreh2019-05-272-2/+11
| | | | | | | Before possibly tearing down the machine, while all services are stopped (after the =docker-compose down= command), create a new backup with the current data. The backup tag should include the commit SHA of the deployment.
* Add more descriptive error message for FIXME derivation testEuAndreh2019-05-271-1/+5
|
* Add bash_aliases.sh and scp it when deploying a new boxEuAndreh2019-05-272-0/+4
|
* Add Nextcloud recipe to docker-compose.yamlEuAndreh2019-05-272-0/+19
|
* Use Bash variables for domain names and container portsEuAndreh2019-05-272-9/+9
|
* Fix formatting of default.nix (linter offense)EuAndreh2019-05-271-7/+2
|
* Revert Terraform to "default" versionEuAndreh2019-05-271-1/+1
|
* TODOs.orgEuAndreh2019-05-271-4/+25
|
* Run terraform init before running terraform applyEuAndreh2019-05-261-0/+1
|
* Use Terraform 0.12.0 in nix-shell and CIEuAndreh2019-05-261-2/+7
|
* ci dbgEuAndreh2019-05-261-0/+1
|
* Change permission of ./secrets/id_rsa after git crypt unlockEuAndreh2019-05-261-0/+2
|
* Disable StrictHostKeyChecking for SSH accessEuAndreh2019-05-261-0/+1
|
* Fix missing argument to sshEuAndreh2019-05-261-1/+1
|
* Fix call to ./provision.sh in .build.ymlEuAndreh2019-05-261-1/+1
|
* Specify shell type to ShellCheck in nix-shell shebang filesEuAndreh2019-05-262-0/+2
|
* Format default.nix (nixfmt offense)EuAndreh2019-05-261-7/+2
|
* Use more robust Bash cd approachEuAndreh2019-05-264-3/+3
|