snix/ops/glesys
Vincent Ambo 75fe623d97 feat(ops/nevsky): run keycloak/panettone/paroxysm
These are the postgres-database using services.

Change-Id: I4e8d854e798d85e1b14bfa78aae8827ac0881c7d
Reviewed-on: https://cl.tvl.fyi/c/depot/+/13092
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>
2025-02-02 14:58:16 +00:00
..
.gitignore feat(ops/glesys): Add gitignore for Terraform files 2021-12-24 18:54:44 +00:00
default.nix refactor(ops/glesys): Use tools.checks.validateTerraform 2022-06-07 09:32:13 +00:00
dns-nixery-dev.tf feat(ops/glesys): point nixery.dev records at bugry 2025-01-15 15:38:48 +00:00
dns-tvix-dev.tf feat(ops/glesys): move static site DNS records to bugry 2025-02-02 14:18:10 +00:00
dns-tvl-fyi.tf feat(ops/glesys): move static site DNS records to bugry 2025-02-02 14:18:10 +00:00
dns-tvl-su.tf feat(ops/glesys): move static site DNS records to bugry 2025-02-02 14:18:10 +00:00
main.tf feat(ops/nevsky): run keycloak/panettone/paroxysm 2025-02-02 14:58:16 +00:00
README.md feat(ops/secrets): Import secrets for tf-glesys 2021-12-27 15:53:57 +00:00

Terraform for GleSYS

This contains the Terraform configuration for deploying TVL's infrastructure at GleSYS. This includes object storage (e.g. for backups and Terraform state) and DNS.

Secrets are needed for applying this. The encrypted file //ops/secrets/tf-glesys.age contains export calls which should be sourced, for example via direnv, by users with the appropriate credentials.

An example direnv configuration used by tazjin is this:

# //ops/secrets/.envrc
source_up
eval $(age --decrypt -i ~/.ssh/id_ed25519 $(git rev-parse --show-toplevel)/ops/secrets/tf-glesys.age)
watch_file $(git rev-parse --show-toplevel)/secrets/tf-glesys.age