snix/ops/glesys
Vincent Ambo 52124c76ce feat(ops/glesys): add nevsky.tvl.fyi to DNS setup
This is a candidate for the new builder, featuring a beefy new AMD CPU with 32
threads and more than double the per-core performance of whitby, as well as
brand-new DDR5 RAM and NVMe disks.

The machine is hosted with Timeweb, in St. Petersburg.

We'll see how this performs.

Change-Id: I5ccbf42cd5274d3a4703afd6942fb42a915bed7a
Reviewed-on: https://cl.tvl.fyi/c/depot/+/12966
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>
2025-01-11 17:47:47 +00:00
..
.gitignore feat(ops/glesys): Add gitignore for Terraform files 2021-12-24 18:54:44 +00:00
default.nix refactor(ops/glesys): Use tools.checks.validateTerraform 2022-06-07 09:32:13 +00:00
dns-nixery-dev.tf fix(ops): update DNS record for nixery-01 2024-04-18 08:39:59 +00:00
dns-tvix-dev.tf feat(ops/glesys): add bolt.tvix.dev 2024-02-23 18:44:18 +00:00
dns-tvl-fyi.tf feat(ops/glesys): add nevsky.tvl.fyi to DNS setup 2025-01-11 17:47:47 +00:00
dns-tvl-su.tf feat(ops/glesys): add bolt.tvix.dev 2024-02-23 18:44:18 +00:00
main.tf feat(ops/glesys): add nevsky.tvl.fyi to DNS setup 2025-01-11 17:47:47 +00:00
README.md feat(ops/secrets): Import secrets for tf-glesys 2021-12-27 15:53:57 +00:00

Terraform for GleSYS

This contains the Terraform configuration for deploying TVL's infrastructure at GleSYS. This includes object storage (e.g. for backups and Terraform state) and DNS.

Secrets are needed for applying this. The encrypted file //ops/secrets/tf-glesys.age contains export calls which should be sourced, for example via direnv, by users with the appropriate credentials.

An example direnv configuration used by tazjin is this:

# //ops/secrets/.envrc
source_up
eval $(age --decrypt -i ~/.ssh/id_ed25519 $(git rev-parse --show-toplevel)/ops/secrets/tf-glesys.age)
watch_file $(git rev-parse --show-toplevel)/secrets/tf-glesys.age