29c9e14f62
This is technically _slightly_ less secure, but means it logs to journald properly, so can be picked up by fail2ban in future
Infrastructure
Requirements
- Python 3
- Locally configured SSH config (ideally deployed through dotfiles)
ansibleinstalled on the system
Installation
./scripts/ansible/setup.shcd terraform/ && ./scripts/terraform/terraform.sh init
Private Settings
The ansible vault password needs setting in ansible/.vault_pass.
Terraform configuration needs to be placed in terraform/secrets.auto.tfvars.
Terraform backend secrets need to be placed in terraform/secrets.sh.
Deploying
./scripts/ansible/deploy.sh./scripts/terraform/terraform.sh apply