Go to file

Jeremy Dormitzer 2c645d94c6 [WIP] Use terraform to generate nginx conf file		2021-10-04 09:06:02 -04:00
bin	Move tf-init.sh to bin directory	2020-12-04 14:15:35 -05:00
mgmt	Point rss.jeremydormitzer.com to FreshRSS instance	2021-02-03 10:38:39 -05:00
prod	[WIP] Use terraform to generate nginx conf file	2021-10-04 09:06:02 -04:00
terraform-modules/packer_droplet	Add "terraform" tag to terraform-created DO resources	2021-01-22 11:42:39 -05:00
.dir-locals.el	Add dir-locals	2021-10-03 12:31:53 -04:00
.envrc	Switch to .env.local files instead of using pass directly in direnv	2021-01-25 10:20:18 -05:00
.gitignore	Ignore all tmp directories	2021-10-04 09:05:29 -04:00
README.md	Move tf-init.sh to bin directory	2020-12-04 14:15:35 -05:00

README.md

My personal infrastructure-as-code

This repository contains the configuration files and scripts to support the infrastructure I use for personal projects.

Terraform environment variables and config

Terraform state is stored in a DigitalOcean Spaces bucket. In order to access the bucket, the Terraform backend configuration needs the access_key and secret_key variables set. These variables are the DigitalOcean Spaces access key and secret key, respectively, which are generated from the DigitalOcean Spaces UI. I'm passing them to Terraform via the -backend-config terraform init option and pulling their values from my password manager. This operation is encapsulated in the bin/tf-init.sh script.

The Terraform scripts also require some environment variables set:

export TF_VAR_do_token=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
export TF_VAR_spaces_access_id=xxxxxxxxxxxxxxxxxxxx
export TF_VAR_spaces_secret_key=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

The do_token is the DigitalOcean API token, generated from the DigitalOcean API console UI, and the spaces_access_id and spaces_secret_key are the same Spaces configuration values as above. I'm setting these variables via direnv with a .envrc file at the repository root.