phfroidmont/self-hosting
1
0
Fork 0
mirror of https://github.com/phfroidmont/self-hosting.git synced 2025-12-25 13:46:59 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Improve terraform secrets management

Browse source
This commit is contained in:
Paul-Henri Froidmont 2023-02-07 23:25:29 +01:00
parent 4b0dee3a16
commit 4be62a69ed
Signed by: phfroidmont
GPG key ID: BE948AFD7E7873BE
7 changed files with 57 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

86
terraform/instances.tf Normal file
View file

@ -0,0 +1,86 @@
data "hcloud_image" "nixos_stable" {
with_selector = "nixos=21.05"
}
resource "hcloud_network" "private_network" {
name = "private"
ip_range = "10.0.0.0/16"
}
resource "hcloud_network_subnet" "db_network_subnet" {
type = "cloud"
network_id = hcloud_network.private_network.id
network_zone = "eu-central"
ip_range = "10.0.1.0/24"
}
resource "hcloud_network_subnet" "banditlair_vswitch_network_subnet" {
type = "vswitch"
network_id = hcloud_network.private_network.id
network_zone = "eu-central"
ip_range = "10.0.2.0/24"
vswitch_id = 29224
}
resource "hcloud_server" "db1" {
name = "db1"
image = data.hcloud_image.nixos_stable.id
server_type = "cpx11"
ssh_keys = [
hcloud_ssh_key.froidmpa-desktop.id
]
keep_disk = true
location = "fsn1"
network {
network_id = hcloud_network.private_network.id
ip = "10.0.1.11"
}
labels = {
type = "db"
}
depends_on = [
hcloud_network_subnet.db_network_subnet
]
lifecycle {
ignore_changes = [
ssh_keys,
image
]
}
}
resource "hcloud_server" "backend1" {
name = "backend1"
image = data.hcloud_image.nixos_stable.id
server_type = "cpx21"
ssh_keys = [
hcloud_ssh_key.froidmpa-desktop.id
]
keep_disk = true
location = "fsn1"
network {
network_id = hcloud_network.private_network.id
ip = "10.0.1.1"
}
labels = {
type = "backend"
}
depends_on = [
hcloud_network_subnet.db_network_subnet
]
lifecycle {
ignore_changes = [
ssh_keys,
image
]
}
}