systems/infrastructure
1
Fork 0
Code Issues 1 Pull requests 22 Activity Actions
Servers, containers and stuff
958 commits 23 branches 0 tags 3 MiB
HCL 80%
Shell 8.3%
PHP 5.2%
Just 4.4%
JavaScript 1.1%
Other 1%
Find a file
Jake Howard d5c7d94ac8
Run traefik as dockeruser, and without host networking 
This required port forwarding, a docker proxy, and a docker network, but the end result should be much more secure!
2022-01-15 23:44:06 +00:00
ansible Run traefik as dockeruser, and without host networking 2022-01-15 23:44:06 +00:00
scripts Update yamllint to fix dependency issue 2022-01-11 20:51:12 +00:00
terraform Decommission decker on Vultr 2022-01-11 19:25:04 +00:00
.gitattributes Force yaml to be detected as its own language 2020-11-11 09:05:08 +00:00
.gitignore Commit the terraform lock file 2022-01-08 22:12:44 +00:00
.gitlab-ci.yml Pretend vault pass script is the password 2021-12-20 17:48:14 +00:00
README.md Read vault password from bitwarden instead of filesystem 2021-12-20 17:25:18 +00:00

README.md

Infrastructure

CI

Requirements

  • Python 3
  • Locally configured SSH config (ideally deployed through dotfiles)
  • ansible installed on the system

Installation

  • ./scripts/ansible/setup.sh
  • cd terraform/ && ./scripts/terraform/terraform.sh init

Private Settings

Ansible integrates with Bitwarden through its CLI.

Terraform configuration needs to be placed in terraform/secrets.auto.tfvars.

Terraform backend secrets need to be placed in terraform/secrets.sh.

Deploying

  • ./scripts/ansible/deploy.sh
  • ./scripts/terraform/terraform.sh apply