Change-Id: I360876dfd416eb1cce4dd2772ef312aae6dd7ac3 Reviewed-on: https://cl.tvl.fyi/c/depot/+/12998 Reviewed-by: sterni <sternenseemann@systemli.org> Autosubmit: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI |
||
|---|---|---|
| .. | ||
| .gitignore | ||
| default.nix | ||
| dns-nixery-dev.tf | ||
| dns-tvix-dev.tf | ||
| dns-tvl-fyi.tf | ||
| dns-tvl-su.tf | ||
| main.tf | ||
| README.md | ||
Terraform for GleSYS
This contains the Terraform configuration for deploying TVL's infrastructure at GleSYS. This includes object storage (e.g. for backups and Terraform state) and DNS.
Secrets are needed for applying this. The encrypted file
//ops/secrets/tf-glesys.age contains export calls which should be
sourced, for example via direnv, by users with the appropriate
credentials.
An example direnv configuration used by tazjin is this:
# //ops/secrets/.envrc
source_up
eval $(age --decrypt -i ~/.ssh/id_ed25519 $(git rev-parse --show-toplevel)/ops/secrets/tf-glesys.age)
watch_file $(git rev-parse --show-toplevel)/secrets/tf-glesys.age