about summary refs log tree commit diff
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2021-12-27T14·58+0300
committertazjin <mail@tazj.in>2021-12-27T15·53+0000
commitdf8edcb5f7543baac51bddcd65faaac1e69989ee (patch)
treefb440a8ba1d4b9304a665546b294e1b74009b0f7
parent23693ca898439869748077f0537a6cf859f22213 (diff)
feat(ops/secrets): Import secrets for tf-glesys r/3474
Adds the secrets and some instructions for deploying the GleSYS
Terraform infrastructure.

Change-Id: I1a10f9cee7648d406b3d27ef45fc74b6923cbc30
Reviewed-on: https://cl.tvl.fyi/c/depot/+/4712
Tested-by: BuildkiteCI
Reviewed-by: grfn <grfn@gws.fyi>
-rw-r--r--ops/glesys/README.md20
-rw-r--r--ops/secrets/secrets.nix1
-rw-r--r--ops/secrets/tf-glesys.agebin0 -> 822 bytes
3 files changed, 21 insertions, 0 deletions
diff --git a/ops/glesys/README.md b/ops/glesys/README.md
new file mode 100644
index 000000000000..00f61a93604b
--- /dev/null
+++ b/ops/glesys/README.md
@@ -0,0 +1,20 @@
+Terraform for GleSYS
+======================
+
+This contains the Terraform configuration for deploying TVL's
+infrastructure at [GleSYS](https://glesys.com). This includes object
+storage (e.g. for backups and Terraform state) and DNS.
+
+Secrets are needed for applying this. The encrypted file
+`//ops/secrets/tf-glesys.age` contains `export` calls which should be
+sourced, for example via `direnv`, by users with the appropriate
+credentials.
+
+An example `direnv` configuration used by tazjin is this:
+
+```
+# //ops/secrets/.envrc
+source_up
+eval $(age --decrypt -i ~/.ssh/id_ed25519 $(git rev-parse --show-toplevel)/ops/secrets/tf-glesys.age)
+watch_file $(git rev-parse --show-toplevel)/secrets/tf-glesys.age
+```
diff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix
index d21db24660a5..11b1e1d2e9cb 100644
--- a/ops/secrets/secrets.nix
+++ b/ops/secrets/secrets.nix
@@ -30,5 +30,6 @@ in {
   "nix-cache-pub.age" = default;
   "owothia.age" = default;
   "panettone.age" = default;
+  "tf-glesys.age" = default;
   "tf-keycloak.age" = default;
 }
diff --git a/ops/secrets/tf-glesys.age b/ops/secrets/tf-glesys.age
new file mode 100644
index 000000000000..53aa5e1acb03
--- /dev/null
+++ b/ops/secrets/tf-glesys.age
Binary files differ