systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 15 Activity Actions
Servers, containers and stuff
1616 commits 16 branches 0 tags 3 MiB
HCL 79.5%
Shell 8.4%
PHP 5.3%
Just 4.5%
JavaScript 1.2%
Other 1.1%
Find a file
Renovate 7e837832b0
Some checks failed
/ terraform (push) Successful in 40s
Details
/ ansible (push) Failing after 14m5s
Details
Update ghcr.io/goauthentik/server Docker tag to v2024.4
2024-04-24 18:00:24 +01:00
.gitea/workflows Update actions/setup-python action to v5 2024-03-04 08:35:57 +00:00
ansible Update ghcr.io/goauthentik/server Docker tag to v2024.4 2024-04-24 18:00:24 +01:00
terraform Add wireguard config for glinet router 2024-04-23 22:19:57 +01:00
.gitattributes Mark vault files as generated 2023-01-27 17:33:04 +00:00
.gitignore Move split secrets into single env file 2023-05-03 20:54:06 +01:00
.yamllint.yml Fix lint issues 2023-10-01 17:10:37 +01:00
justfile Always use diff when running deploys 2023-11-08 19:46:28 +00:00
README.md Move AdGuardHome configuration to Terraform 2024-01-08 21:45:28 +00:00
renovate.json Let renovate find galaxy requirements 2023-05-06 21:44:12 +01:00

README.md

Infrastructure

Requirements

  • Python 3
  • Locally configured SSH config (ideally deployed through dotfiles)
  • ansible installed on the system
  • just

Installation

  • just setup
  • just terraform init

Private Settings

Ansible integrates with Bitwarden through its CLI.

Terraform secrets are stored in terraform/.env, and provisioned using just update-secrets.

Deploying

  • just ansible-deploy
  • juts terraform apply

External configuration

This repository contains most of my infrastructure configuration, but not everything is configured here. Some things are external, for various reasons.