Compare commits

..

6 commits

Author SHA1 Message Date
Actaeus Curabitur
41125efa35 fixed nginx roles for both nextcloud and pass 2022-09-06 09:12:54 -05:00
Actaeus Curabitur
bb2d2acbd6 fixed 2022-09-06 06:41:25 -05:00
Actaeus Curabitur
0be94787b6 temporarily removed old pass files 2022-09-06 06:40:07 -05:00
Actaeus Curabitur
859ad41131 changed pass backend port 2022-09-06 06:39:02 -05:00
Actaeus Curabitur
701b84dbac added vaultwarden 2022-09-06 06:32:57 -05:00
Actaeus Curabitur
65df55c6e6 switched local nginx proxy to use 127.0.0.1 instead of server IP, reducing exposure 2022-09-06 06:24:57 -05:00
8 changed files with 38 additions and 76 deletions

View file

@ -3,17 +3,17 @@ git fetch --all;
#copy dev to history to ensure we don't lose changes if something goes wrong
git checkout history;
git reset --hard qual;
git reset --hard dev;
git push --force;
#merge to master
git checkout -B prod origin/master;
git merge --squash qual;
git checkout -B master origin/master;
git merge --squash dev;
git commit -am "$cm";
git push;
#clean dev
git checkout qual;
git reset --hard prod;
git checkout dev;
git reset --hard master;
git push --force;
git reset --hard origin/qual;
git reset --hard origin/dev;

View file

@ -1,18 +1,17 @@
{%- set branches=salt.cmd.shell('git ls-remote https://git.actcur.com/actcur/salt.git | grep -o -P "(?<=refs/heads/).*" | grep -Pv "(^temp$)|(^history$)"').split('\n') -%}
branches:
saltmaster:
{%- for branch in branches %}
- {{branch}}
{%- endfor %}
git:
{%- for branch in branches %}
salt_{{branch}}:
salt:
repo: "ssh://gitea@git.actcur.com:5022/actcur/salt.git"
path: "/srv/salt/{{branch}}"
branch: "{{branch}}"
path: "/srv/salt/prod"
branch: "master"
key: "git_actcur"
force: {{ "True" if (branch == "prod" or branch == "qual") else "false" }}
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"
salt_dev:
repo: "ssh://gitea@git.actcur.com:5022/actcur/salt.git"
path: "/srv/salt/dev"
branch: "dev"
key: "git_actcur"
force: true
email: "actcur@actcur.com"
name: "Actaeus Curabitur"
{%- endfor %}

View file

@ -1,7 +1,8 @@
{%- set branches=salt.cmd.shell('git ls-remote https://git.actcur.com/actcur/salt.git | grep -o -P "(?<=refs/heads/).*" | grep -Pv "(^temp$)|(^history$)"').split('\n') -%}
{%- for branch in branches %}
{{branch}}:
prod:
'*':
- roles
- servers
dev:
'*':
- roles
- servers
{%- endfor %}

View file

@ -1,4 +1,5 @@
{%- set os=grains['os'] -%}
salt-master:
{%- if os=="CentOS" or os=="RedHat" %}
pkg.installed: []
@ -18,7 +19,6 @@ salt-master:
- user: root
- group: root
- mode: 644
- template: jinja
/srv/salt/prod/states/pillars:
file.symlink:

View file

@ -422,14 +422,12 @@ state_output: terse
# - /srv/salt/prod/states
#
file_roots:
{%- if pillar['branches'] is defined -%}
{%- if pillar['branches']['saltmaster'] is defined -%}
{%- for branch in pillar['branches']['saltmaster'] %}
{{branch}}:
- /srv/salt/{{branch}}/states
{%- endfor %}
{%- endif %}
{%- endif %}
base:
- /srv/salt/prod/states
prod:
- /srv/salt/prod/states
dev:
- /srv/salt/dev/states
#
# When using multiple environments, each with their own top file, the
@ -441,15 +439,7 @@ file_roots:
# To specify the order in which environments are merged, set the ordering
# in the env_order option. Given a conflict, the last matching value will
# win.
{% if pillar['branches'] is defined -%}
{%- if pillar['branches']['saltmaster'] is defined -%}
env_order: [
{%- for branch in pillar['branches']['saltmaster'] -%}
'{{-branch}}',
{%- endfor -%}
'null']
{%- endif %}
{%- endif %}
env_order: ['base', 'dev', 'prod']
# If top_file_merging_strategy is set to 'same' and an environment does not
# contain a top file, the top file in the environment specified by default_top
@ -570,14 +560,12 @@ hash_type: sha256
# - /srv/pillar
#
pillar_roots:
{%- if pillar['branches'] is defined -%}
{%- if pillar['branches']['saltmaster'] is defined -%}
{%- for branch in pillar['branches']['saltmaster'] %}
{{branch}}:
- /srv/salt/{{branch}}/pillars
{%- endfor %}
{%- endif %}
{%- endif %}
base:
- /srv/salt/prod/pillars
prod:
- /srv/salt/prod/pillars
dev:
- /srv/salt/dev/pillars
#
#ext_pillar:
# - hiera: /etc/hiera.yaml

View file

@ -1,18 +0,0 @@
{%- set branches=salt.cmd.shell('git ls-remote https://git.actcur.com/actcur/salt.git | grep -o -P "(?<=refs/heads/).*" | grep -Pv "(^temp$)|(^history$)"').split('\n') -%}
branches:
saltmaster:
{%- for branch in branches %}
- {{branch}}
{%- endfor %}
git:
{%- for branch in branches %}
salt_{{branch}}:
repo: "ssh://gitea@git.actcur.com:5022/actcur/salt.git"
path: "/srv/salt/{{branch}}"
branch: "{{branch}}"
key: "git_actcur"
force: {{ "True" if branch == "prod" else "false" }}
email: "actcur@actcur.com"
name: "Actaeus Curabitur"
{%- endfor %}

View file

@ -1,4 +0,0 @@
/test:
file.managed:
- source: salt://test
- template: jinja

View file

@ -1,10 +1,6 @@
{%- set states = salt['cp.list_states'](saltenv) -%}
{%- if pillar['branches'] is defined -%}
{%- if pillar['branches']['saltmaster'] is defined -%}
{%- set envs = pillar['branches']['saltmaster'] -%}
{%- endif -%}
{%- endif -%}
{%- set envs = ['prod','dev'] -%}
{% for env in envs %}
{{ env }}:
'os_family:RedHat':