shockrah/infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
200 Commits 1 Branch 0 Tags
8870fb197304bc8e4c58dc63ead94638c79b2358
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
shockrah 8870fb1973 local tests passing now, nginx proxy working as expected without configs 2024-04-16 21:33:19 -07:00
shockrah 5337fabe17 Setting up all nginx websites on the host 2024-04-16 20:37:47 -07:00
shockrah 31795ea6d9 Site configs 2024-04-16 20:27:54 -07:00
shockrah 4fd20a9136 Simple test playbook to confirm things are working as expected 2024-04-15 20:17:54 -07:00
shockrah 1c6fe055f7 Adding a way of getting the ssh key out for now 2024-04-15 18:34:41 -07:00
shockrah cd42d0c281 nginx setup with anisble 2024-04-15 17:58:23 -07:00
shockrah fbad8e3a64 Using openssh format for ssh key pub 2024-04-14 18:16:46 -07:00
shockrah e2fdfd3c6f Adding ssh key to the host on creation 2024-04-14 18:08:09 -07:00
shockrah 812a4b686f Base configuration for a small host to hold all the website file stuff 2024-04-14 17:33:05 -07:00
shockrah 0a9aad30fb Cluster configuration with working TLS for 1 domain but not two 2024-03-24 13:41:55 -07:00
shockrah 61439ca1a1 Removing cluster since project is super backlogged right now 2024-03-24 13:41:21 -07:00
shockrah 219bd2c97d remove fluff 2024-02-28 18:53:23 -08:00
shockrah 60667f1ef0 Common tls configuration setup however I cant load the new domain with it 2024-02-27 23:38:41 -08:00
shockrah ba05bb6e2c Incorporating parameterized lb ip 2024-02-27 23:05:46 -08:00
shockrah 76a47b55a1 parameterizing load balancer public ip 2024-02-27 23:04:59 -08:00
shockrah 39982e516d Sample secondary configuration for another website 2024-02-27 21:14:12 -08:00
shockrah 57a7642ad7 Cleaning up k8s config files for now 2024-02-27 18:50:09 -08:00
shockrah a948901e0f Sample files 2024-02-21 23:19:28 -08:00
shockrah 61e2a8d2aa Working sample project with full tls and nginx container 2024-02-21 23:13:40 -08:00
shockrah 5409586c18 Slowly building proper cluster 2024-02-21 22:57:08 -08:00
shockrah c395709c65 Updating k8s version and adding var value for lab_domain 2024-02-19 16:51:49 -08:00
shockrah 2cd95902a5 removing old dns iam things while new testing domain populates ns servers on vultr 2024-02-19 16:51:19 -08:00
shockrah f896e9a3ff project template 2024-02-18 19:26:27 -08:00
shockrah 5bd1f53222 fixing container spec in sample deployment 2024-02-09 15:36:53 -08:00
shockrah b71182d910 Creating user for DNS updates from K8s cluster 2024-02-04 21:09:15 -08:00
shockrah f60c5b9a35 Sample deployment of simple nginx pod 2024-01-17 21:17:25 -08:00
shockrah 3e149c43ef Tracking 6443 for kubectl 2024-01-17 21:06:25 -08:00
shockrah cb065d22f2 Firewall and provider version bump 2024-01-16 19:49:52 -08:00
shockrah 31cee5a125 Base configuration for building an empty cluster with one node 2024-01-16 19:07:55 -08:00
shockrah 8a66a04337 Base configuration for settingup vke 2024-01-16 16:05:38 -08:00
shockrah 69d75cdb2d Lab folder created 2023-11-28 21:41:15 -08:00
shockrah f0e815e9cb Ignoring sensitive tfvars file 2023-11-28 21:21:55 -08:00
shockrah bf00b3482d Basic skeleton for new gitea server ( not provisioned yet ) 2023-11-27 22:28:06 -08:00
shockrah 4f3d1a090e Simple outline for services I want to support going foward 2023-11-27 18:16:31 -08:00
shockrah 4840955361 Simple docs for future git server 2023-11-27 17:53:31 -08:00
shockrah 175ae5f1e5 Explicity setting max percent value on nginx 2023-10-30 22:28:38 -07:00
shockrah 49be08d169 Adding mx records for temper@temper.tv email 2023-10-27 17:58:23 -07:00
shockrah 1fe7ccc898 Moving dns records to mail server configuration 2023-10-21 00:00:46 -07:00
shockrah 19e42bf778 adding dns entries that would be required for miab server 2023-10-20 23:54:42 -07:00
shockrah a681d29457 Fixing reverse dns infra now setup and working to receive emails 2023-10-20 18:08:55 -07:00
shockrah 488722aaff Creating mail.shockrah.xyz dns records 2023-10-20 16:54:33 -07:00
shockrah 8aee1483fc Fixing group_id issue and missing quotes 2023-10-20 15:09:23 -07:00
shockrah e8dec5a6d8 Start of docs for mail server code 2023-10-20 15:04:14 -07:00
shockrah 69b8ad8a50 Sec configuration with ssh keys 2023-10-20 15:03:05 -07:00
shockrah 6f8d8abd15 Fargate readme 2023-10-16 21:00:16 -07:00
shockrah ba38a0d9c9 Adding back resume.shockrah.xyz to LB endpoints 2023-10-07 15:01:28 -07:00
shockrah 7a388534f1 Cleaning up roles 2023-10-06 22:30:24 -07:00
shockrah 8298dbb4f7 Addig temper.tv conf to docker image' 2023-10-06 00:16:29 -07:00
shockrah 4a210404bb Adding temper.tv cert 2023-10-06 00:09:24 -07:00
shockrah 82f34d03cd Fixing certs that get attached to the LB 2023-10-06 00:08:14 -07:00
shockrah a83debde34 Validation and cert created for tmper 2023-10-05 23:41:18 -07:00
shockrah d02b5de48c Splitting certs into lone files 2023-10-05 23:16:49 -07:00
shockrah df2406720f Improving dependency chaingin slightly however more will stablize the race condition problem here in this folder 2023-10-05 23:12:39 -07:00
shockrah b6aebf06b1 Bringing in tmeper records to track 2023-10-05 23:08:27 -07:00
shockrah da379f20cb Moving remaining s3 configuration to its own folder 2023-10-05 22:43:35 -07:00
shockrah 9bd6cbd3e3 Fixing makefile 2023-10-05 22:28:54 -07:00
shockrah b0e5bd50da Moving out route53 and load balancer resources 2023-10-05 22:20:06 -07:00
shockrah 3029fbb3f6 Moving fargate things to their own folder 2023-10-04 01:15:32 -07:00
shockrah caf09a63cb More variable clean up for security groups 
Removing traces from previous networking cleanout
 2023-10-03 19:38:27 -07:00
shockrah e51ebc7251 Moving security groups out to their own folder as they are basically global to everything 2023-10-03 19:36:59 -07:00
shockrah 609f9b3e7b Moving networking code out into its own module 2023-10-03 19:07:06 -07:00
shockrah 10ed1f1a98 Adding note regarding master record with special record 2023-09-30 16:26:17 -07:00
shockrah 295f933d8a Terraform code cleanup and final reduction of containers from 2 -> 1 
Now able to serve multiple websites with 1 nginx container under an LB
Cost savings not massive but still noticable at this point considering
How low the cost is with this kind of setup
 2023-09-10 16:25:21 -07:00
shockrah b5e53acf0a Adding health check endpoint to nginx container 2023-09-10 16:23:54 -07:00
shockrah efdd75b831 Fresh readme 2023-09-10 15:51:35 -07:00
shockrah 830352a851 MVP nginx configuration for single container support 2023-09-10 15:36:47 -07:00
shockrah 50c6bfeac0 switching to borderline vanilla nginx docker image 2023-09-10 15:21:27 -07:00
shockrah 6b75b2534e Simplifying build and run scripts for general & pipeline usage 2023-09-10 15:20:50 -07:00
shockrah 9cd2fe11db Updating readme 2023-09-10 15:16:17 -07:00
shockrah 9ca3969a53 Ensuring public read access to all required public buckets 
* Required to allow task containers to read from here without crazy auth on
  nginx's part
 2023-09-10 15:10:22 -07:00
shockrah d9e0e8c70b Making public files for websites buckets public readable 2023-08-09 21:51:21 -07:00
shockrah 4987559b15 Adding readme for playbooks 2023-05-07 23:53:41 -07:00
shockrah 87a549bc1f * Load balancer components are now built dynamically for each domain 
+ Increased health_check intervals
+ HTTPS default action is now a blank 400 page
+ Generating listener rules for beta proxy based on bucket names/domains
Using domain filters for this basically
* Dynamically attaching listener certificates
 2023-03-10 21:37:35 -08:00
shockrah ffe5ffe831 Cleaning up Docker resources 
Adding ez build script
 2023-03-10 21:35:55 -08:00
shockrah f4e06fa24a New docker image supporting proxying S3 2023-03-10 21:34:58 -08:00
shockrah 42e55f7313 Task definition now uses the correct image and env vars 
Services are now mapped to their respective task definitions
 2023-03-10 21:34:06 -08:00
shockrah 28f8436768 Using new s3 access & secret key for s3 reader role 2023-03-10 21:33:24 -08:00
shockrah dfdc62f80c Consolidating locals into one place 
Also adding -input=false to Makefile
 2023-03-10 21:32:56 -08:00
shockrah 17d3f66073 Simplifying nginx vars 2023-03-06 18:35:07 -08:00
shockrah 550cb2eb70 Removing unused infra structure, lowering cost with this commit 2023-03-06 15:51:43 -08:00
shockrah 8f375def3b Updating bucket names to include blog and resume 2023-02-28 21:04:26 -08:00
shockrah 0f96719383 Dockerfile for proxying s3 resources with nginx 2023-02-28 20:20:21 -08:00
shockrah 91bb927cf5 Fixing nginx conf to return 404 on things it cant find rather than index.html 2023-02-14 18:53:11 -08:00
shockrah 321734a453 Adding redirect for 80 which was causing issues on folder path calls to nginx 2023-02-14 18:52:23 -08:00
shockrah f973c67bb4 Fixing indentation from vim 2023-02-11 21:19:08 -08:00
shockrah 5903ba2a5e Updating nginx config to now include resume.shockrah.xyz in the fun :) 
Also nginx.conf now has some gzip configuration parameters set, courtesy of:
https://www.techrepublic.com/article/how-to-configure-gzip-compression-with-nginx/
 2023-02-11 21:14:49 -08:00
shockrah 11ffc23871 Cleaning up DNS Records and updating certs to account for root domains 
For now we're just going to worry about the main blog and resume.shockrah.xyz
In the reverse-proxy image
* Resume pipelines will not work in this state and will need way of updating
their part of the image for ECS to pull updates*
 2023-02-11 20:56:52 -08:00
shockrah 904b730362 blog.shockrah.xyz working at an infrastructure level now 
Also updated the image so that it has the right baseURL
which gets configured during the service build ( Hugo )
 2023-02-10 22:07:26 -08:00
shockrah 53267daf99 Avoiding hard coded values and improving cluster name 2023-02-10 21:30:20 -08:00
shockrah 203ec7f434 Docker image required files 2023-02-10 21:29:50 -08:00
shockrah 1170e879f0 Consolidating roles for ecr and logging 2023-02-10 21:28:49 -08:00
shockrah 5e978b5766 Creating s3 bucket for static content 2023-01-21 16:58:11 -08:00
shockrah 57965a2a5a Replacing target group with proper shockrah.xyz group 2023-01-10 00:28:27 -08:00
shockrah 01e6d7f990 Attaching project-athen.xyz cert onto alpha LB SSL listener 2023-01-09 21:13:19 -08:00
shockrah 8481a5f123 Creating base certificates for shockrah and project-athens.xyz 2023-01-09 21:12:19 -08:00
shockrah 99bc6be5c9 Removing sample infra 2023-01-09 18:21:26 -08:00
shockrah d71c4780d9 Merge branch 'feature/alpha-cluster-sample' 2023-01-09 17:05:56 -08:00
shockrah 5c79b44ceb Removing pointless ufw rule 2023-01-09 17:05:19 -08:00
shockrah e019e09941 Normalizing sites that need cert updates 2023-01-09 17:04:43 -08:00
shockrah f48eb9610b Wildcard for sample project 2023-01-09 17:03:40 -08:00