From 54fd61c887f266f8e2e6b1419a86fc6681116069 Mon Sep 17 00:00:00 2001 From: EuAndreh Date: Wed, 5 Jun 2019 16:38:53 -0300 Subject: Use Ansible instead of Bash for provisioning The deployment is not quite working, and I'm unable to test right now: DigitalOcean is returning 503 for my requests. As of this commit, I can run =ansible-playbook provider.yml= more than once and it will actually be idempotent. Notes: - SSH fingerprint are now taken from the public key file instead of manually supplying it in the terraform template using the =digitalocean_ssh_key= resource; - use Ansible instead of ad-hoc Bash scripts for provisioning the Droplets created by Terraform; - use the =filename.env.extension= to create the concrete files in CI; - use the =user_data= to add the know SSH key pair to the newly created Droplet; - add =rotate-ssh-keys.sh= utils; --- secrets/borg/borg_remote.pub | 1 + 1 file changed, 1 insertion(+) create mode 100644 secrets/borg/borg_remote.pub (limited to 'secrets/borg/borg_remote.pub') diff --git a/secrets/borg/borg_remote.pub b/secrets/borg/borg_remote.pub new file mode 100644 index 0000000..2f7af58 --- /dev/null +++ b/secrets/borg/borg_remote.pub @@ -0,0 +1 @@ +ssh-rsa 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 rsync.net@euandre.org -- cgit v1.3