systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 22 Activity Actions
Servers, containers and stuff
1588 commits 23 branches 0 tags 3 MiB
HCL 80%
Shell 8.3%
PHP 5.2%
Just 4.4%
JavaScript 1.1%
Other 1%
Find a file
Renovate 5f66a26bfd
Some checks failed
/ terraform (push) Failing after 2m54s
Details
/ ansible (push) Successful in 10m11s
Details
Update dependency artis3n.tailscale to v4.4.4
2024-03-18 10:00:35 +00:00
.gitea/workflows Update actions/setup-python action to v5 2024-03-04 08:35:57 +00:00
ansible Update dependency artis3n.tailscale to v4.4.4 2024-03-18 10:00:35 +00:00
terraform Allow only exposing services over Tailscale 2024-03-07 22:30:10 +00:00
.gitattributes Mark vault files as generated 2023-01-27 17:33:04 +00:00
.gitignore Move split secrets into single env file 2023-05-03 20:54:06 +01:00
.yamllint.yml Fix lint issues 2023-10-01 17:10:37 +01:00
justfile Always use diff when running deploys 2023-11-08 19:46:28 +00:00
README.md Move AdGuardHome configuration to Terraform 2024-01-08 21:45:28 +00:00
renovate.json Let renovate find galaxy requirements 2023-05-06 21:44:12 +01:00

README.md

Infrastructure

Requirements

  • Python 3
  • Locally configured SSH config (ideally deployed through dotfiles)
  • ansible installed on the system
  • just

Installation

  • just setup
  • just terraform init

Private Settings

Ansible integrates with Bitwarden through its CLI.

Terraform secrets are stored in terraform/.env, and provisioned using just update-secrets.

Deploying

  • just ansible-deploy
  • juts terraform apply

External configuration

This repository contains most of my infrastructure configuration, but not everything is configured here. Some things are external, for various reasons.