diff options
| -rw-r--r-- | ops/glesys/README.md | 20 | ||||
| -rw-r--r-- | ops/secrets/secrets.nix | 1 | ||||
| -rw-r--r-- | ops/secrets/tf-glesys.age | bin | 0 -> 822 bytes |
3 files changed, 21 insertions, 0 deletions
diff --git a/ops/glesys/README.md b/ops/glesys/README.md new file mode 100644 index 000000000000..00f61a93604b --- /dev/null +++ b/ops/glesys/README.md @@ -0,0 +1,20 @@ +Terraform for GleSYS +====================== + +This contains the Terraform configuration for deploying TVL's +infrastructure at [GleSYS](https://glesys.com). This includes object +storage (e.g. for backups and Terraform state) and DNS. + +Secrets are needed for applying this. The encrypted file +`//ops/secrets/tf-glesys.age` contains `export` calls which should be +sourced, for example via `direnv`, by users with the appropriate +credentials. + +An example `direnv` configuration used by tazjin is this: + +``` +# //ops/secrets/.envrc +source_up +eval $(age --decrypt -i ~/.ssh/id_ed25519 $(git rev-parse --show-toplevel)/ops/secrets/tf-glesys.age) +watch_file $(git rev-parse --show-toplevel)/secrets/tf-glesys.age +``` diff --git a/ops/secrets/secrets.nix b/ops/secrets/secrets.nix index d21db24660a5..11b1e1d2e9cb 100644 --- a/ops/secrets/secrets.nix +++ b/ops/secrets/secrets.nix @@ -30,5 +30,6 @@ in { "nix-cache-pub.age" = default; "owothia.age" = default; "panettone.age" = default; + "tf-glesys.age" = default; "tf-keycloak.age" = default; } diff --git a/ops/secrets/tf-glesys.age b/ops/secrets/tf-glesys.age new file mode 100644 index 000000000000..53aa5e1acb03 --- /dev/null +++ b/ops/secrets/tf-glesys.age Binary files differ |