aboutsummaryrefslogtreecommitdiff
path: root/secrets (unfollow)
Commit message (Collapse)AuthorFilesLines
2019-06-04Fix "dotfiles" name left overEuAndreh1-1/+1
2019-06-04Build shell buildInputs in test derivationEuAndreh1-7/+16
This way we make sure the =shell= derivation always builds, instead of seeing these kinds of failure during CI runs when it's trying to deploy.
2019-06-04Add utils.nix and remove common derivations from default.nixEuAndreh2-79/+120
2019-06-04TODOs.orgEuAndreh1-0/+1
2019-06-04Inline definition of rootSrcEuAndreh1-2/+1
2019-06-04TODOs.orgEuAndreh1-0/+4
2019-06-02TODOs.orgEuAndreh1-0/+2
2019-06-01TODOs.orgEuAndreh1-0/+1
2019-05-30TODOs.orgEuAndreh1-5/+52
2019-05-28Fix vps.tf formatting (linter offense)EuAndreh1-1/+1
2019-05-28Use Floating IP on DropletEuAndreh3-1/+13
2019-05-28Split $VPS_COMMIT_SHA variable declaration for exportingEuAndreh1-1/+2
ShellCheck offense.
2019-05-28Use correct Droplet size slugEuAndreh1-1/+1
Taken from https://developers.digitalocean.com/documentation/v2/#list-all-sizes
2019-05-28Rotate SSH key and use correct VPS_COMMIT_SHA on provisioningEuAndreh2-5/+6
2019-05-28Rotate SSH key secretEuAndreh1-1/+1
2019-05-28Disable StrictHostKeyChecking for CI SSH configurationEuAndreh1-0/+2
2019-05-28TODOs.orgEuAndreh1-1/+5
Extend on how to use =vps-state= to store Terraform state.
2019-05-28Configure git for vps-state repo in ./scripts/ci/setup.shEuAndreh3-4/+6
2019-05-28Use SSH to fetch vps-state so we can push to it laterEuAndreh1-1/+1
2019-05-28TODOs.orgEuAndreh1-0/+11
Expand on the decision of using =vps-state= to store Terraform files.
2019-05-28Add git config metadata to enable commiting in CIEuAndreh1-0/+2
2019-05-28Fix mixed usage of $PLAN_FILE variableEuAndreh1-4/+5
Split $PLAN_FILE into $PLAN_FILE_NAME and $PLAN_FILE_PATH.
2019-05-28Store plan file in vps-state tooEuAndreh1-4/+18
2019-05-28Fix shell.nix path in nix-shell custom shebangEuAndreh2-2/+2
2019-05-28Fix script references in .build.ymlEuAndreh1-6/+3
2019-05-28Split scripts into CI and VPS boxEuAndreh5-2/+4
2019-05-28Remove git rev-parse from .envrcEuAndreh3-2/+2
2019-05-28Rotate secretsEuAndreh1-0/+0
2019-05-28Remove set -x from ci-setup.shEuAndreh1-1/+1
2019-05-28Suppress output of docker-compose configEuAndreh1-1/+1
This derivation sources =.envrc= and it's output can potentially leak secret environment variables from it.
2019-05-28Fix docker-compose config stepEuAndreh1-1/+2
Add gitMinimal package to baseTasks to allow any derivation to =source .envrc= freely. dockerComposeLint sources it to properly lint the file that will be ran.
2019-05-28Fix Nextcloud image nameEuAndreh1-1/+1
2019-05-28Split Bash variable declaration from assignment (shellcheck offense)EuAndreh1-0/+0
2019-05-28Add =set -x= to ci-setup.shEuAndreh1-1/+1
2019-05-28Add backup routing before possibly tearing down machineEuAndreh6-11/+21
Create a new backup entry before running =terraform apply=, which may (or may not) destroy the current machine. This shouldn't be an issue for the backup itself, since all of the data should be stored in a separate Block Storage Volume, but we can take advantage of the sevices already needing to be taken down in order to perform a full backup of the data.
2019-05-28Add secrets/borg_remote{.pub} SSH keypairEuAndreh2-0/+0
2019-05-28Rename ./secrets/id_rsa{.pub} -> ./secrets/vps_box{.pub}EuAndreh5-3/+3
2019-05-27TODOs.orgEuAndreh1-0/+2
2019-05-27TODOs.orgEuAndreh1-0/+1
Add =Nice to have= task on docker-compose version
2019-05-27TODOs.orgEuAndreh1-0/+9
Add notes on creating backups, and questions on the best strategies available.
2019-05-27Add variables to properly tag a backupEuAndreh1-0/+0
2019-05-27Add --color to ls aliasEuAndreh1-1/+1
2019-05-27Add cd to /home/vps/ in profileEuAndreh1-0/+1
Just a nice to have when SSH'ing interactively, doesn't have and effect on non-interactive SSH commands.
2019-05-27Use ssh pipe and cat instead of hacky temporary file descriptorEuAndreh1-3/+1
Taken from http://compgroups.net/comp.unix.shell/-scp-dev-fd-63-not-a-regular-file/3063561
2019-05-27WIP: take a backup during deploymentEuAndreh2-2/+11
Before possibly tearing down the machine, while all services are stopped (after the =docker-compose down= command), create a new backup with the current data. The backup tag should include the commit SHA of the deployment.
2019-05-27Add more descriptive error message for FIXME derivation testEuAndreh1-1/+5
2019-05-27Add bash_aliases.sh and scp it when deploying a new boxEuAndreh2-0/+4
2019-05-27Add Nextcloud recipe to docker-compose.yamlEuAndreh2-0/+19
2019-05-27Use Bash variables for domain names and container portsEuAndreh2-9/+9
2019-05-27Fix formatting of default.nix (linter offense)EuAndreh1-7/+2