systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 15 Activity Actions
Servers, containers and stuff
1064 commits 16 branches 0 tags 3 MiB
HCL 79.8%
Shell 8.3%
PHP 5.3%
Just 4.4%
JavaScript 1.2%
Other 1%
Find a file
Jake Howard 4eab0d4f01
Don't mount docker socket to traefik 
It was already configured to use the proxy, and was running as non-root
anyway, so likely didn't have access to it in the first place.
2022-08-16 09:38:27 +01:00
ansible Don't mount docker socket to traefik 2022-08-16 09:38:27 +01:00
scripts Decommission k8s environment 2022-05-02 21:44:33 +01:00
terraform Deploy commento++ 2022-06-05 15:44:49 +01:00
.gitattributes Force yaml to be detected as its own language 2020-11-11 09:05:08 +00:00
.gitignore Commit the terraform lock file 2022-01-08 22:12:44 +00:00
.gitlab-ci.yml Pretend vault pass script is the password 2021-12-20 17:48:14 +00:00
README.md Read vault password from bitwarden instead of filesystem 2021-12-20 17:25:18 +00:00
renovate.json Remove limit for open MRs 2022-05-07 12:21:21 +01:00
yamllint.yml Add a skeleton k8s deployment setup 2022-03-07 21:58:17 +00:00

README.md

Infrastructure

CI

Requirements

  • Python 3
  • Locally configured SSH config (ideally deployed through dotfiles)
  • ansible installed on the system

Installation

  • ./scripts/ansible/setup.sh
  • cd terraform/ && ./scripts/terraform/terraform.sh init

Private Settings

Ansible integrates with Bitwarden through its CLI.

Terraform configuration needs to be placed in terraform/secrets.auto.tfvars.

Terraform backend secrets need to be placed in terraform/secrets.sh.

Deploying

  • ./scripts/ansible/deploy.sh
  • ./scripts/terraform/terraform.sh apply