nix/machines
1
0
Fork 0
Code Issues Releases Packages Activity Actions

Make some notes on how to bring up servers
All checks were successful
/ dev-shell (push) Successful in 30s
Details
/ rust-packages (push) Successful in 37s
Details
/ check (push) Successful in 1m11s
Details
/ terraform-providers (push) Successful in 59s
Details
/ systems (push) Successful in 3m33s
Details

Browse source
This commit is contained in:
Kaare Hoff Skovgaard 2025-07-19 23:03:40 +02:00
parent e7c73f98dd
commit b2f59a9c77
Signed by: khs
GPG key ID: C7D890804F01E9F0
1 changed files with 30 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

32
README.md
View file

@ -42,6 +42,34 @@ To transfer the secrets needed for OpenTofu from Bitwarden to OpenBAO/Vault run:
nix run '.#bitwarden-to-vault'
```
## Immediate TODO list:
# Bootstrapping
1. Make the hetzner-static-ip.service not fail when the IP is already assigned.
## security.kaareskovgaard.net
The first instance to create is `security.kaareskovgaard.net` as that hosts OpenBAO which is used to deploy all the other instances.
First read the README for that instance, regarding the bootstrapping process (flip a boolean switch in the configuration). Then:
```bash
nix run '.#create-instance' -- security.kaareskovgaard.net
nix run '.#configure-instance' -- security.kaareskovgaard.net
```
Then unbootstrap the instance and:
```bash
nix run '.#update-instance' -- security.kaareskovgaard.net
nix run '.#configure-instance' -- security.kaareskovgaard.net
```
## monitoring.kaareskovgaard.net
Every instance attempts to send logs and metrics to the monitoring instance, as such this should be created next. This should be a simple:
```bash
nix run '.#create-instance' -- monitoring.kaareskovgaard.net
```
## The rest
At this point every other instance should be able to be brought up. The `create-instance` command should be all that is needed.