796c694170
This ensures it has all the right permissions to access all the right files. Host is mounted read-only, so there's no real security risk.
Infrastructure
Requirements
- Python 3
- Locally configured SSH config (ideally deployed through dotfiles)
ansibleinstalled on the system
Installation
./scripts/ansible/setup.shcd terraform/ && ./scripts/terraform/terraform.sh init
Private Settings
The ansible vault password needs setting in ansible/.vault_pass.
Terraform configuration needs to be placed in terraform/secrets.auto.tfvars.
Terraform backend secrets need to be placed in terraform/secrets.sh.
Deploying
./scripts/ansible/deploy.sh./scripts/terraform/terraform.sh apply