mgmt/do-ssh-keys/terraform/.terraform.lock.hcl

@@ -5,7 +5,6 @@ provider "registry.terraform.io/digitalocean/digitalocean" {
   version     = "2.19.0"
   constraints = "~> 2.19.0"
   hashes = [
-    "h1:XcLoKA2a1MR4foSFeFbJgCADRvsXtN9SyIiJX0fSGys=",
     "h1:z3FmDpOuKq+bOYgFE5MtFpXjOL2gAbtutL4jeAd9rJE=",
     "zh:01cee85343dee2dfc01499e19ef4e56b0c9260eee0a47329231cf500c07b4386",
     "zh:099eeddf9baf9c282430231da501a8b96b3fb28507ce3b78e3a185cc9d4b3860",

mgmt/do-ssh-keys/terraform/main.tf

@@ -9,12 +9,17 @@ resource "digitalocean_ssh_key" "jdormit_laptop" {
   public_key = "ssh-rsa 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 jeremy.dormitzer@gmail.com"
 }
 
-moved {
-  from = digitalocean_ssh_key.jdormit_macbook_lola
-  to = digitalocean_ssh_key.jdormit_macbook
-}
-
 resource "digitalocean_ssh_key" "jdormit_macbook" {
   name       = "jdormit-macbook"
+  public_key = "ssh-rsa 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 jdormitzer@BOSMM2T13LQH03Q"
+}
+
+resource "digitalocean_ssh_key" "jdormit_macbook_lola" {
+  name       = "jdormit-macbook-lola"
   public_key = "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgtweszDBXhSW3ceaTWmCc/2M6tqCNClooaOWCubdfGxw+n7mJwKmH/zXvlJaW3FYIZw9oX04FkqPPfBOP58Tr/csyjIrkbVQ4Ns1ajVvavmF3+XuzFAzJnBXHLdPdQg6ajyOWljQMr6cQYpAsEp5iMwfU4CQiUkAM3gF5Dw+Xl8uqrnhwhJmDxiSVPfdpx5eW7U07twVGYFJG6GMnEfSX6xn5b2fYqGu3wxiDrydeVHgEjc/CnrIqtEM8XFTmOjeoHpPzcDPjfE0bHOp3h2vuyWX02pJGZUFew3E883iuxutPSIQvDD+fRrWbfJ5XlGwV5lyrFe68xXU8grCWJlOZ jdormit@Jeremys-MacBook-Pro.local"
 }
+
+resource "digitalocean_ssh_key" "jdormit_macbook_spotify" {
+  name       = "jdormit-macbook-spotify"
+  public_key = "ssh-rsa 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 jdormitzer@MM2NY6LN94"
+}

mgmt/do-ssh-keys/terraform/outputs.tf

@@ -5,3 +5,11 @@ output "jdormit_laptop_ssh_key_id" {
 output "jdormit_macbook_ssh_key_id" {
   value = digitalocean_ssh_key.jdormit_macbook.id
 }
+
+output "jdormit_macbook_lola_ssh_key_id" {
+  value = digitalocean_ssh_key.jdormit_macbook_lola.id
+}
+
+output "jdormit_macbook_spotify_ssh_key_id" {
+  value = digitalocean_ssh_key.jdormit_macbook_spotify.id
+}

prod/gitea/packer/files/certbot-renew.service

@@ -3,6 +3,5 @@ Description=Renew certbot certificates
 Wants=cerbot-renew.timer
 
 [Service]
-Type=oneshot
+Type=simple
 ExecStart=/usr/bin/env certbot renew
-ExecStartPost=/usr/bin/env systemctl restart nginx

prod/gitea/packer/gitea.json

@@ -2,7 +2,7 @@
   "builders": [
     {
       "type": "digitalocean",
-      "image": "ubuntu-24-04-x64",
+      "image": "ubuntu-23-10-x64",
       "region": "nyc1",
       "size": "s-1vcpu-1gb",
       "snapshot_name": "packer-gitea-{{timestamp}}",

prod/gitea/packer/packer-manifest.json

@@ -152,34 +152,7 @@
       "artifact_id": "nyc1:149969417",
       "packer_run_uuid": "293e17d9-aa9f-292c-eed6-7117c5f34479",
       "custom_data": null
-    },
-    {
-      "name": "digitalocean",
-      "builder_type": "digitalocean",
-      "build_time": 1723915250,
-      "files": null,
-      "artifact_id": "nyc1:163229340",
-      "packer_run_uuid": "7eb25857-c225-7ca3-499f-0ca2b6777a86",
-      "custom_data": null
-    },
-    {
-      "name": "digitalocean",
-      "builder_type": "digitalocean",
-      "build_time": 1723949431,
-      "files": null,
-      "artifact_id": "nyc1:163258757",
-      "packer_run_uuid": "9e852c33-433f-0522-9c3d-af9dfd1bcc76",
-      "custom_data": null
-    },
-    {
-      "name": "digitalocean",
-      "builder_type": "digitalocean",
-      "build_time": 1723950259,
-      "files": null,
-      "artifact_id": "nyc1:163259232",
-      "packer_run_uuid": "aafc31bc-0c6c-b2a7-ec66-07ee2e9c2615",
-      "custom_data": null
     }
   ],
-  "last_run_uuid": "aafc31bc-0c6c-b2a7-ec66-07ee2e9c2615"
+  "last_run_uuid": "293e17d9-aa9f-292c-eed6-7117c5f34479"
 }

prod/gitea/packer/scripts/dependencies.sh

@@ -2,8 +2,6 @@
 
 set -ex
 
-sudo apt-get clean
-sudo add-apt-repository universe
 sudo apt-get update
 sleep 2
 sudo apt-get install -y \

prod/gitea/packer/scripts/gitea.sh

@@ -17,7 +17,7 @@ chown -R root:git /etc/gitea
 chmod 770 /etc/gitea
 chmod 660 /etc/gitea/app.ini
 
-wget -O gitea https://dl.gitea.io/gitea/1.22.1/gitea-1.22.1-linux-amd64
+wget -O gitea https://dl.gitea.io/gitea/1.13.1/gitea-1.13.1-linux-amd64
 chmod +x gitea
 mv gitea /usr/local/bin/
 

terraform-modules/packer_droplet/main.tf

@@ -39,6 +39,7 @@ resource "digitalocean_droplet" "droplet" {
   tags    = var.tags
   ssh_keys = [
     data.terraform_remote_state.do_ssh_keys.outputs.jdormit_laptop_ssh_key_id,
-    data.terraform_remote_state.do_ssh_keys.outputs.jdormit_macbook_ssh_key_id,
+    data.terraform_remote_state.do_ssh_keys.outputs.jdormit_macbook_lola_ssh_key_id,
+    data.terraform_remote_state.do_ssh_keys.outputs.jdormit_macbook_spotify_ssh_key_id
   ]
 }