aboutsummaryrefslogtreecommitdiff
path: root/default.nix (unfollow)
Commit message (Collapse)AuthorFilesLines
2020-09-22Remove exclusion patterns from default.nixEuAndreh1-4/+2
2020-08-10Filter encrypted files from lintingEuAndreh1-2/+2
2020-08-10Migration: Remove Ansible and Docker code, move only to NixOSEuAndreh1-15/+0
2020-08-10WIP: Move to Vultr and NixOSEuAndreh1-1/+1
2019-06-13default.nix: Add file package to shell build inputsEuAndreh1-0/+1
Used in 'setup.sh'.
2019-06-12default.nix: Use shell helper functions from utils.nixEuAndreh1-21/+10
2019-06-10Provision DNS entries using DigitalOcean instead of DNS registrarEuAndreh1-15/+1
This way we can implement dynamic (provision-time) Floating IP, instead of a hardcoded pre-created Floating IP address. Related changes: - remove =terraform-godaddy= provider, use =digitalocean_record= instead; - create =generated-known-hosts= after provisioning instead of during =setup.sh=: use the =$(terraform output public_floating_ip)= value to make this file dynamic; - remote the =$PINNED_IP= and =$TF_VAR_floating_ip= variables; - add type and descriptions to variable declarations in Terraform recipe.
2019-06-09Don't use terraform-full derivationEuAndreh1-3/+1
2019-06-09s/terraformGodaddy/terraformGodaddyBuild/EuAndreh1-1/+1
2019-06-09Expose build of terraform-godaddy under subtasks attribute setEuAndreh1-1/+1
2019-06-08ci dbg: Revert "Revert "Update modSha256 for terraform-godaddy""EuAndreh1-1/+1
This reverts commit 4d04172f9027203e3656f74bd8cecdc0d9c45e69.
2019-06-08Revert "Update modSha256 for terraform-godaddy"EuAndreh1-1/+1
This reverts commit 5ad5984f47860bdf3a85abeddef18d17c2095e69.
2019-06-08Format default.nix (nixfmt linter offense)EuAndreh1-2/+3
2019-06-08Update modSha256 for terraform-godaddyEuAndreh1-1/+1
2019-06-08Use terraform-godaddy and Terraform 0.11EuAndreh1-2/+17
The =terraform-godaddy= package supports only Terraform 0.11 as of now. It is not packaged by default by nixpkgs, and the =postInstall= hook is required because Terraform looks for providers usinthe the =terraform-provider-$name= template, which the package doesn't follow. I had to remove the loop on vps.tf since it requires Terraform 0.12. I'll either wait for =terraform-godaddy= to upgrade to 0.12 or try to do it myself if it bothers me enough.
2019-06-08Update terraform to 0.12EuAndreh1-1/+1
2019-06-06Make message when for shellEnvironment when running tests more readableEuAndreh1-1/+1
2019-06-05Add Ansible to shell derivationEuAndreh1-0/+1
Required to run =ansible-playbook= in the CI pipeline.
2019-06-05Remove ansible-lintEuAndreh1-8/+0
It wasn't trivial to configure: Ansible tried to work on /homeless-shelter :facepalm:
2019-06-05Add ansible lint in test stageEuAndreh1-0/+8
2019-06-05Fix subtasks.dockerComposeLint derivationEuAndreh1-0/+2
2019-06-04Fix "dotfiles" name left overEuAndreh1-1/+1
2019-06-04Build shell buildInputs in test derivationEuAndreh1-7/+16
This way we make sure the =shell= derivation always builds, instead of seeing these kinds of failure during CI runs when it's trying to deploy.
2019-06-04Add utils.nix and remove common derivations from default.nixEuAndreh1-79/+24
2019-06-04Inline definition of rootSrcEuAndreh1-2/+1
2019-05-28Remove git rev-parse from .envrcEuAndreh1-1/+1
2019-05-28Suppress output of docker-compose configEuAndreh1-1/+1
This derivation sources =.envrc= and it's output can potentially leak secret environment variables from it.
2019-05-28Fix docker-compose config stepEuAndreh1-1/+2
Add gitMinimal package to baseTasks to allow any derivation to =source .envrc= freely. dockerComposeLint sources it to properly lint the file that will be ran.
2019-05-27Add more descriptive error message for FIXME derivation testEuAndreh1-1/+5
2019-05-27Fix formatting of default.nix (linter offense)EuAndreh1-7/+2
2019-05-27Revert Terraform to "default" versionEuAndreh1-1/+1
2019-05-26Use Terraform 0.12.0 in nix-shell and CIEuAndreh1-2/+7
2019-05-26Format default.nix (nixfmt offense)EuAndreh1-7/+2
2019-05-26Use nix-shell --pure to run scriptsEuAndreh1-2/+8
Instead of adding them to the =packages= section of .build.yml.
2019-05-26Run shellcheck on Bash files stored in git-cryptEuAndreh1-2/+1
2019-05-26Automate provisioning and deployment of VPSEuAndreh1-1/+2
In order to perform that I had to remove Terraform's =.tfstate= files from the repository. Terraform does support "backends" for storing the state files, but I settled for storing it on a separate repo (vps-state). For now it solves the state management problem: - it has history of states; - all state files are GPG encrypted; - there's no coordination however, but only the CI should perform a deploy in order to avoid race conditions. I had to add GPG and SSH keys to sr.ht to achieve that: - SSH public key to my profile to authorize it to push to vps-state repo; - SSH private key to the secret builds.sr.ht environment to enable push to the repository from the pipeline; - GPG public key to git-crypt to make it possible for the pipeline to unlock the encrypted content; - GPG private key to the secret builds.sr.ht environment to enable decrypting git-crypt content from the pipeline. In order to avoid divergent environment from local and CI, the ./provision.sh script is ran through nix-shell.
2019-05-25Don't run shellcheck on encrypted Bash codeEuAndreh1-1/+2
2019-05-25Format default.nix (nixfmt offense)EuAndreh1-10/+7
2019-05-25Fix formatTerraform stageEuAndreh1-1/+1
2019-05-25Add dockerComposeLint job stageEuAndreh1-4/+15
2019-05-25Add lint checks and a pipeline to check using NixEuAndreh1-0/+93
generated by cgit v1.3 (git 2.53.0) at 2026-10-19 21:04:47 +0000