| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Setup cgit and Prosody | EuAndreh | 2020-08-14 | 1 | -0/+0 | |
| | | | | | The TLS setup for Prosody is broken, though. | |||||
| * | Add .tfplan extension to Terraform plan files | EuAndreh | 2020-08-12 | 33 | -0/+0 | |
| | | ||||||
| * | vps-configuration.env.nix: Finish working Nextcloud installation | EuAndreh | 2020-08-11 | 6 | -0/+0 | |
| | | ||||||
| * | nixos-update.sh: Always set the NixOS channel based on $SYSTEM_STATE_VERSION | EuAndreh | 2020-08-11 | 1 | -0/+0 | |
| | | ||||||
| * | Update Terraform infrastructure | EuAndreh | 2020-08-10 | 3 | -0/+0 | |
| | | ||||||
| * | Semi working setup: Terraform and LetsEncrypt working | EuAndreh | 2020-08-10 | 23 | -0/+1 | |
| | | ||||||
| * | Interactive Terraform plan -> apply cycle | EuAndreh | 2020-08-10 | 11 | -0/+0 | |
| | | ||||||
| * | nixfmt ./secrets/nix/e1d5f317b0f7a-snapshot-configuration.nix | EuAndreh | 2020-08-10 | 1 | -0/+0 | |
| | | ||||||
| * | Use password via stdin, and store the snapshot image configuration.nix | EuAndreh | 2020-08-10 | 2 | -0/+0 | |
| | | ||||||
| * | Use new image with new SSH key and andreh user | EuAndreh | 2020-08-10 | 1 | -0/+0 | |
| | | ||||||
| * | Remove unused secrets/{borg,ssh}/ | EuAndreh | 2020-08-10 | 6 | -0/+0 | |
| | | ||||||
| * | Migration: Remove Ansible and Docker code, move only to NixOS | EuAndreh | 2020-08-10 | 7 | -0/+0 | |
| | | ||||||
| * | WIP: Move to Vultr and NixOS | EuAndreh | 2020-08-10 | 4 | -0/+0 | |
| | | ||||||
| * | secret-envrc.sh: Fix remote borg path | EuAndreh | 2020-08-09 | 1 | -0/+0 | |
| | | ||||||
| * | scripts/ci/setup.sh: Get GPG key from server | EuAndreh | 2020-08-08 | 1 | -0/+0 | |
| | | | | | Instead of storing it on the repository. | |||||
| * | Remove gpodder.net sync software from the server | EuAndreh | 2020-08-06 | 1 | -0/+0 | |
| | | ||||||
| * | Add gpodder environment variables | EuAndreh | 2020-08-05 | 1 | -0/+0 | |
| | | ||||||
| * | Add gpodder container initial implementation | EuAndreh | 2020-08-05 | 1 | -0/+0 | |
| | | ||||||
| * | Toggle DESTROY_VPS | EuAndreh | 2020-08-02 | 1 | -0/+0 | |
| | | ||||||
| * | Conform volume_name to digital ocean's limitation | EuAndreh | 2020-08-02 | 1 | -0/+0 | |
| | | ||||||
| * | Remove all wallabag references left | EuAndreh | 2020-08-02 | 1 | -0/+0 | |
| | | ||||||
| * | Rename DESTROY_VOLUME -> DESTROY_VPS | EuAndreh | 2020-08-02 | 1 | -0/+0 | |
| | | ||||||
| * | Toggle DESTROY_VOLUME | EuAndreh | 2020-08-02 | 1 | -0/+0 | |
| | | ||||||
| * | secret-envry.sh: Add ${DESTROY_VOLUME} operational toggle | EuAndreh | 2020-08-02 | 1 | -0/+0 | |
| | | ||||||
| * | Use a name from the environment for the names of the host and the volume | EuAndreh | 2020-08-02 | 1 | -0/+0 | |
| | | ||||||
| * | secret-envrc.sh: Update TLD | EuAndreh | 2020-08-02 | 1 | -0/+0 | |
| | | ||||||
| * | Chage $TLD! :tada: | EuAndreh | 2019-06-16 | 1 | -0/+0 | |
| | | ||||||
| * | Fancify TLD prefixes for Wallabag and Nextcloud | EuAndreh | 2019-06-15 | 1 | -0/+0 | |
| | | ||||||
| * | Specify email address when rotating keys | EuAndreh | 2019-06-13 | 1 | -0/+0 | |
| | | ||||||
| * | Remove call to =cd= in envrc files | EuAndreh | 2019-06-10 | 1 | -0/+0 | |
| | | ||||||
| * | Output all generated files on ./generated/, refactor .envrc variables | EuAndreh | 2019-06-10 | 2 | -0/+0 | |
| | | ||||||
| * | Re enable $DESTROY_VOLUME toggle | EuAndreh | 2019-06-10 | 1 | -0/+0 | |
| | | ||||||
| * | Import GPG key before provisioning | EuAndreh | 2019-06-10 | 1 | -0/+0 | |
| | | ||||||
| * | Encrypt attached log | EuAndreh | 2019-06-10 | 1 | -0/+0 | |
| | | ||||||
| * | Send logs via email after finishing provision.sh | EuAndreh | 2019-06-10 | 1 | -0/+0 | |
| | | | | | The email will be send for both sucessfull and failed runs. | |||||
| * | Disable $DESTROY_VOLUME operational toggle | EuAndreh | 2019-06-10 | 1 | -0/+0 | |
| | | ||||||
| * | Change SSH port | EuAndreh | 2019-06-10 | 1 | -0/+0 | |
| | | ||||||
| * | Provision DNS entries using DigitalOcean instead of DNS registrar | EuAndreh | 2019-06-10 | 1 | -0/+0 | |
| | | | | | | | | | | | | | | This way we can implement dynamic (provision-time) Floating IP, instead of a hardcoded pre-created Floating IP address. Related changes: - remove =terraform-godaddy= provider, use =digitalocean_record= instead; - create =generated-known-hosts= after provisioning instead of during =setup.sh=: use the =$(terraform output public_floating_ip)= value to make this file dynamic; - remote the =$PINNED_IP= and =$TF_VAR_floating_ip= variables; - add type and descriptions to variable declarations in Terraform recipe. | |||||
| * | Change $TLD | EuAndreh | 2019-06-09 | 1 | -0/+0 | |
| | | ||||||
| * | Rotate DNS registrar keys | EuAndreh | 2019-06-09 | 1 | -0/+0 | |
| | | ||||||
| * | Use same NIX_PATH locally and on the CI | EuAndreh | 2019-06-09 | 1 | -0/+0 | |
| | | ||||||
| * | Use terraform-godaddy and Terraform 0.11 | EuAndreh | 2019-06-08 | 1 | -0/+0 | |
| | | | | | | | | | | | | | The =terraform-godaddy= package supports only Terraform 0.11 as of now. It is not packaged by default by nixpkgs, and the =postInstall= hook is required because Terraform looks for providers usinthe the =terraform-provider-$name= template, which the package doesn't follow. I had to remove the loop on vps.tf since it requires Terraform 0.12. I'll either wait for =terraform-godaddy= to upgrade to 0.12 or try to do it myself if it bothers me enough. | |||||
| * | Add credentials for manipulating DNS entries. | EuAndreh | 2019-06-08 | 1 | -0/+0 | |
| | | ||||||
| * | Generate UserKnownHostsFile dynamically instead of when rotating keys | EuAndreh | 2019-06-08 | 1 | -0/+0 | |
| | | | | | | | | | | | | | The previous solution would hardcode the server IP. This way we can change the server IP address that is hosting everything and keep the SSH keypair. Previously changing the IP address would require either calling the =./rotate-ssh-keys.sh= script or manually changing the IP address on the known-hosts.txt file. The IP address being duplicated itself was a code smell. Both SSH keypair and IP address can now be changed independently. | |||||
| * | Use nextcloud.${TLD} instead of cloud.${TLD} as CNAME for Nextcloud installation | EuAndreh | 2019-06-08 | 1 | -0/+0 | |
| | | ||||||
| * | Add ${DESTROY_VOLUME} operational toggle | EuAndreh | 2019-06-06 | 1 | -0/+0 | |
| | | | | | | | | | | | | | | This way I can dynamically control whether to destroy and recreate all the existing infrastructure entirely from scratch. The advantages of doing so are: - test the non-existence of local state on every deployment; - make sure I can always recreate everything from scratch. The disadvantages are: - slower deployment times; - longer downtime during deployments. | |||||
| * | Script: rotate SSH keys | EuAndreh | 2019-06-05 | 5 | -0/+0 | |
| | | ||||||
| * | Script: rotate SSH keys | EuAndreh | 2019-06-05 | 5 | -0/+0 | |
| | | ||||||
| * | Script: rotate SSH keys | EuAndreh | 2019-06-05 | 5 | -0/+0 | |
| | | ||||||
| * | Fix git-crypt configuration | EuAndreh | 2019-06-05 | 9 | -0/+0 | |
| | | ||||||
 |
index : toph | |
| Setup and configuration for VPS and other personal server | External SSH Git service user |
| aboutsummaryrefslogtreecommitdiff |