systems/infrastructure

Servers, containers and stuff

Find a file

Jake Howard 4eab0d4f01 Don't mount docker socket to traefik It was already configured to use the proxy, and was running as non-root anyway, so likely didn't have access to it in the first place.		2022-08-16 09:38:27 +01:00
ansible	Don't mount docker socket to traefik	2022-08-16 09:38:27 +01:00
scripts	Decommission k8s environment	2022-05-02 21:44:33 +01:00
terraform	Deploy commento++	2022-06-05 15:44:49 +01:00
.gitattributes	Force yaml to be detected as its own language	2020-11-11 09:05:08 +00:00
.gitignore	Commit the terraform lock file	2022-01-08 22:12:44 +00:00
.gitlab-ci.yml	Pretend vault pass script is the password	2021-12-20 17:48:14 +00:00
README.md	Read vault password from bitwarden instead of filesystem	2021-12-20 17:25:18 +00:00
renovate.json	Remove limit for open MRs	2022-05-07 12:21:21 +01:00
yamllint.yml	Add a skeleton k8s deployment setup	2022-03-07 21:58:17 +00:00

README.md

Infrastructure

Requirements

Python 3
Locally configured SSH config (ideally deployed through dotfiles)
ansible installed on the system

Installation

./scripts/ansible/setup.sh
cd terraform/ && ./scripts/terraform/terraform.sh init

Private Settings

Ansible integrates with Bitwarden through its CLI.

Terraform configuration needs to be placed in terraform/secrets.auto.tfvars.

Terraform backend secrets need to be placed in terraform/secrets.sh.

Deploying

./scripts/ansible/deploy.sh
./scripts/terraform/terraform.sh apply