systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 22 Activity Actions
Servers, containers and stuff
733 commits 23 branches 0 tags 3 MiB
HCL 80%
Shell 8.3%
PHP 5.2%
Just 4.4%
JavaScript 1.1%
Other 1%
Find a file
Jake Howard 4d218248fa
Remotely connect to fail2ban to do ports 
Traefik can affect the edge, so blocks work there and prevent traffic hitting home network.
2021-03-28 16:06:36 +01:00
.github/workflows Replace terraform action with official one 2020-11-22 16:21:48 +00:00
ansible Remotely connect to fail2ban to do ports 2021-03-28 16:06:36 +01:00
scripts Use ansible collections for things 2021-02-07 13:02:14 +00:00
terraform Remove walker for now 2021-03-26 21:58:24 +00:00
.gitattributes Force yaml to be detected as its own language 2020-11-11 09:05:08 +00:00
.gitignore Use ansible collections for things 2021-02-07 13:02:14 +00:00
README.md Note that ansible is now installed at system level 2020-06-27 21:27:07 +01:00

README.md

Infrastructure

CI Status

Requirements

  • Python 3
  • Locally configured SSH config (ideally deployed through dotfiles)
  • ansible installed on the system

Installation

  • ./scripts/ansible/setup.sh
  • cd terraform/ && ./scripts/terraform/terraform.sh init

Private Settings

The ansible vault password needs setting in ansible/.vault_pass.

Terraform configuration needs to be placed in terraform/secrets.auto.tfvars.

Terraform backend secrets need to be placed in terraform/secrets.sh.

Deploying

  • ./scripts/ansible/deploy.sh
  • ./scripts/terraform/terraform.sh apply