Commit Graph

190 Commits

Author SHA1 Message Date
0fcdb0ac3c Don't run test file by default. 2023-09-24 11:23:40 -05:00
869a1272a6 Use a new template for PM, create provider, high-sea.
- New template had to be based on a CIFS file system to be
referencable across hosts

- high-sea is new VM for *arr hosting.
2023-09-24 11:22:21 -05:00
06615390aa Create new debian_base role.
- To be used as a platform for other deployments.
2023-08-13 09:13:30 -05:00
21a30eabd1 Remove "all" deploy. I have literally never used this. 2023-08-13 09:12:55 -05:00
e253cf9898 Add cluster nodes to ansible inventory, add DNS records. 2023-08-13 09:12:27 -05:00
9d7ba14fdb Create new nix-configs folder for host specific nix configuration. 2023-08-13 09:11:48 -05:00
65fc8af6d8 Remove no longer used nix configs.
Deprecated the nix cluster.
2023-08-13 09:10:04 -05:00
f2bc058e20 Rename to make even easier to track. 2023-08-09 09:10:33 -05:00
ace9806e76 Split out record files to be domain specific, remove jitsi domain.
This doesn't solve my API limit problem but makes editing and viewing
current state in terraform much easier.
2023-08-09 09:08:43 -05:00
f83ec22eb8 Move to using DO:Spaces as state backend.
- Update provider.tf to include details about the backend
- Include AWS PROFILE export in env creds
- Update readme.
2023-08-06 20:41:36 -05:00
9046da30d9 Manage DO domains in Terraform!!
This is a nice step forward, for me. But there are some challenges
here I need to fix.

The first, and biggest one, is that DO rate limits API requests per
minute to ~250. If I'm doing even a small amount of changes and
iterating a lot I will run into issues with that just due to recrods;
each record pull appears to be its OWN CALL. God.

With that in mind, an easy next step seems like splitting the domain
management into their own submodules to prevent unnecessary calls.

For now, i'm just happy to have this managed in code :).
2023-07-30 09:37:11 -05:00
d80830f8d3 Initial terraform commit.
Create 2 different subfolders:
- jowj dot net owns / will own DNS for jowj.net and its subdomains
- Bikeshed owns my provisioning VMs against my proxmox cluster

env_creds.sh is just a simple way to export secrets from `pass` to my
local environment.
2023-07-28 09:59:41 -05:00
8bd2207632 More tf stuff to ignore. 2023-07-28 09:59:00 -05:00
e8cb59a7c8 Ignore tfstate files. 2023-07-28 09:50:48 -05:00
32eaca73d0 Nixos and nixflake shit. Non working changes.
The last of my fucking around with Nix and Flakes prior to killing the
nixos portion of my k8s project. This was just too hard to figure out,
honestly. Docs around nixflakes suck. They appear to be the future! I
believe the hype! But I can't figure out DICK ALL.

Committing, will probably rip out once I'm fully over on PM.
2023-07-28 09:48:30 -05:00
7b38b89acb Fuck with ansible layout.
1. Fuck around with Goof configuration. I think ultimately this never
went anywhere, and I'll probably rip it out, but I forgot to commit it
at the time so i'm including it just to be safe.

2. Home services and home net refactor. Smaller clean ups

3. Removal of wg stuff.
2023-07-28 09:47:04 -05:00
cf8b48f3d4 Add Demiurge, exgod deploy blocks.
I'm not really convinced I'm doing this the right way, but this method
gives me rough feature parity with what I can do with Morph.
2023-02-20 18:24:39 -06:00
da5b7e200e Disable sig detection until I fix deploy's broken shit.
I think I can get this working again with a combo of trusted users +
changing the user arg (not sshuser!!). Will revisit.
2023-02-20 18:23:54 -06:00
e60c91e2b4 Add Demiurge host definitions. 2023-02-20 17:52:23 -06:00
627a9acd97 Move alice/root definitions to configuration.nix for deploy-rs.
Deploy-RS will follow module imports, but seems to do some fucking
DUMB SHIT when it comes to actually building the whole package. I
found that unless I defined the user in the core configuration.nix
file, regardless of other imports, I would lose access to the users
halfway through the deploy.

I'm not totally sure why. I never tried setting the import inside the
configuration.nix, but I /was/ setting it inside the fucking
flake.nix, so who knows.

This way does make some sense, it feels safer to have my deploy user /
root defs inside the core config file so there's never a possibility
of losing access remotely, but still. What a fucking pain. Morph
doesn't have this problem! Morph is good! What are you doing deploy-rs!!
2023-02-20 17:50:15 -06:00
bf539313c1 Add final cluster node. 2023-02-20 15:47:58 -06:00
5ea2e1d028 Update gc. 2023-02-19 12:44:25 -06:00
03e6d225e4 Fix signature checking.
You have to add, explicitly, users you want to be trusted! See:
https://github.com/serokell/deploy-rs/issues/25
2023-02-19 12:43:44 -06:00
2d60d9e6a2 Add. 2023-02-19 11:35:00 -06:00
3dad1c8710 Move to managing hoyden, exgod under Morph.
This appears to be working out pretty well.

Alice is now a required user for all machines to manage remote
deployment requirements.

Probably should figure out a reasonable refactor in order to move
Alice into a "secrets" sort of thing, so that I'm not giving away user
info for free on git, but i'm not that worried about it.
2023-02-19 11:31:38 -06:00
c72e3e2e81 Experimenting with deploy-rs, DO NOT USE.
Deploy-rs ultimately did not work for us. It seems to break when
trying to push the flake to remote machines.

Leaving here for historical purposes.
2023-02-19 11:30:38 -06:00
b66bf60cb6 Rename drone step. 2023-02-19 11:30:29 -06:00
0d5a66d2b8 Don't track .gcroots, probably?
Not sure what i'm doing here, but I'm assuming it shouldn't be tracked.
2023-02-19 11:29:53 -06:00
569f038464 Update hardware conf. 2023-02-17 22:53:55 -06:00
b6ed6b0a56 Add exgod host. 2023-02-17 22:52:27 -06:00
bdcf751dee Experiment with different nixOS deploy mechanisms. 2023-02-17 20:47:16 -06:00
25a21a54c9 Add server argument to docker login.
All checks were successful
continuous-integration/drone Build is passing
2023-02-10 21:27:03 -06:00
975932a54a Add login step.
Some checks failed
continuous-integration/drone Build is failing
2023-02-10 21:26:30 -06:00
c8cce77565 Test passing, now try a retag.
Some checks failed
continuous-integration/drone Build is failing
2023-02-10 21:25:04 -06:00
f32714192f Move from docker to ssh runner.
All checks were successful
continuous-integration/drone Build is passing
2023-02-10 21:19:23 -06:00
8e2d567299 Test using drone ssh instead of drone docker. 2023-02-10 21:19:09 -06:00
aa35e08901 Add sleep; docker hasn't started yet.
Some checks failed
continuous-integration/drone Build is failing
2023-02-07 18:01:47 -06:00
0f26ce7ca2 Try based on docker to avoid pull issues.
Some checks failed
continuous-integration/drone Build is failing
2023-02-07 18:00:34 -06:00
18edabd072 Remove trigger shit, i'm not sure that's useful yet.
Some checks failed
continuous-integration/drone Build is failing
2023-02-07 17:57:36 -06:00
26c5895de6 Trying again with alpine. 2023-02-07 17:56:35 -06:00
dca98b2772 Trying a new build.
Some checks reported errors
continuous-integration/drone Build encountered an error
Ref: https://jlelse.blog/dev/drone-dind
2023-02-07 17:36:11 -06:00
9b29bda22c More dumb testing.
Some checks failed
continuous-integration/drone Build is failing
2023-02-07 16:40:52 -06:00
744ad7b365 Attempt to use image pull secrets for eveyrthing.
Some checks failed
continuous-integration/drone Build is failing
2023-02-07 16:33:11 -06:00
aa81e92dc9 Try password from stdin.
Some checks failed
continuous-integration/drone Build is failing
2023-02-07 16:12:25 -06:00
cf5c4eda93 This works locally! Why aren't you working in the build :(.
Some checks failed
continuous-integration/drone Build is failing
2023-02-07 16:04:29 -06:00
70664922e9 More testing of docker args.
Some checks failed
continuous-integration/drone Build is failing
2023-02-07 16:03:10 -06:00
9934e0ee68 printf statement
Some checks failed
continuous-integration/drone Build is failing
2023-02-07 16:00:38 -06:00
68d3f524be Gotta have a docker, bro.
Some checks failed
continuous-integration/drone Build is failing
2023-02-07 15:58:03 -06:00
7888174bad Experiment with drone.
Some checks failed
continuous-integration/drone Build is failing
2023-02-07 15:54:23 -06:00
387d4eba76 Add drone, donre-worker deploys to halo swarm.
Just a note to be deliberate about Quote usage. I spent like, an
hour trying to figure out why my shit was trying to talk to
"git.awful.club", quotes included.

Quote the entire yaml property, not just the value of the k:v pair.
2023-02-05 20:38:42 -06:00