systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 17 Activity Actions
Servers, containers and stuff
1406 commits 18 branches 0 tags 3 MiB
HCL 79.8%
Shell 8.3%
PHP 5.3%
Just 4.4%
JavaScript 1.2%
Other 1%
Find a file
Jake Howard 5a0df92a6a
All checks were successful
/ terraform (push) Successful in 1m4s
Details
/ ansible (push) Successful in 2m20s
Details
Disable ip_forward 
I don't need P2P comms for this, so disable this for extra security.

I should add a proper firewall at some point...
2023-09-01 19:52:36 +01:00
.gitea/workflows Fix README documentation for terraform secrets 2023-06-18 17:21:18 +01:00
ansible Disable ip_forward 2023-09-01 19:52:36 +01:00
terraform Decommission BG 2023-08-01 21:49:20 +01:00
.gitattributes Mark vault files as generated 2023-01-27 17:33:04 +00:00
.gitignore Move split secrets into single env file 2023-05-03 20:54:06 +01:00
.yamllint.yml Move scripts to justfile 2023-06-18 17:14:49 +01:00
justfile Add helper to edit ansible vault 2023-08-31 09:21:14 +01:00
README.md Fix README documentation for terraform secrets 2023-06-18 17:21:18 +01:00
renovate.json Let renovate find galaxy requirements 2023-05-06 21:44:12 +01:00

README.md

Infrastructure

Requirements

  • Python 3
  • Locally configured SSH config (ideally deployed through dotfiles)
  • ansible installed on the system
  • just

Installation

  • just setup
  • just terraform init

Private Settings

Ansible integrates with Bitwarden through its CLI.

Terraform secrets are stored in terraform/.env, and provisioned using just update-secrets.

Deploying

  • just ansible-deploy
  • juts terraform apply