systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 15 Activity Actions
Servers, containers and stuff
1172 commits 16 branches 0 tags 3 MiB
HCL 79.5%
Shell 8.4%
PHP 5.3%
Just 4.5%
JavaScript 1.2%
Other 1.1%
Find a file
Jake Howard 6c2c87e43e Merge branch 'renovate/ghcr.io-goauthentik-server-2022.x' into 'master' 
Update ghcr.io/goauthentik/server Docker tag to v2022.11.3

See merge request sys/infrastructure!77
2022-12-13 08:55:08 +00:00
ansible Merge branch 'renovate/ghcr.io-goauthentik-server-2022.x' into 'master' 2022-12-13 08:55:08 +00:00
scripts Decommission k8s environment 2022-05-02 21:44:33 +01:00
terraform Define alert contacts for uptimerobot monitors 2022-12-09 19:05:35 +00:00
.gitattributes Force yaml to be detected as its own language 2020-11-11 09:05:08 +00:00
.gitignore Commit the terraform lock file 2022-01-08 22:12:44 +00:00
.gitlab-ci.yml Pretend vault pass script is the password 2021-12-20 17:48:14 +00:00
README.md Read vault password from bitwarden instead of filesystem 2021-12-20 17:25:18 +00:00
renovate.json Remove limit for open MRs 2022-05-07 12:21:21 +01:00
yamllint.yml Add a skeleton k8s deployment setup 2022-03-07 21:58:17 +00:00

README.md

Infrastructure

CI

Requirements

  • Python 3
  • Locally configured SSH config (ideally deployed through dotfiles)
  • ansible installed on the system

Installation

  • ./scripts/ansible/setup.sh
  • cd terraform/ && ./scripts/terraform/terraform.sh init

Private Settings

Ansible integrates with Bitwarden through its CLI.

Terraform configuration needs to be placed in terraform/secrets.auto.tfvars.

Terraform backend secrets need to be placed in terraform/secrets.sh.

Deploying

  • ./scripts/ansible/deploy.sh
  • ./scripts/terraform/terraform.sh apply