Restructure: move infra packages to root level
This commit is contained in:
67
README.md
Normal file
67
README.md
Normal file
@@ -0,0 +1,67 @@
|
||||
# Iron Legion Infra Backup — 20260614-1920
|
||||
## What's Included
|
||||
|
||||
| Folder | Purpose |
|
||||
|---|---|
|
||||
| `terraform-pve/` | LXC provisioning (Tailscale subnet routers) |
|
||||
| `terraform-pve-vm/` | VM migration (Artemis/Jarvis/Friday) |
|
||||
| `ansible-push/` | Fleet automation playbooks (includes wolfstack role) |
|
||||
| `wolfstack-keepalived/` | WolfStack VIP deploy scripts + configs |
|
||||
|
||||
## What's Excluded
|
||||
|
||||
- `.git/` history (not needed — this is a working copy)
|
||||
- `.terraform/` provider caches (regenerate via `terraform init`)
|
||||
- `__pycache__`, `venv`, `.venv`
|
||||
- **Identity files** — synced to TriliumNext (Project: A.R.T.E.M.I.S.), not included here
|
||||
|
||||
## Restore Procedure
|
||||
|
||||
### 1. Install dependencies
|
||||
|
||||
```bash
|
||||
# Terraform
|
||||
wget -qO- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
|
||||
echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
|
||||
sudo apt update && sudo apt install terraform
|
||||
|
||||
# Ansible
|
||||
pip install ansible
|
||||
|
||||
# SSH key (must obtain separately)
|
||||
# Place fleet private key at ~/.ssh/artemis_key (mode 600)
|
||||
```
|
||||
|
||||
### 2. Init Terraform
|
||||
|
||||
```bash
|
||||
cd terraform-pve/terraform
|
||||
terraform init
|
||||
# State must be re-imported or recreated — .tfstate NOT included
|
||||
```
|
||||
|
||||
### 3. Run Ansible
|
||||
|
||||
```bash
|
||||
cd ansible-push
|
||||
ansible-playbook -i inventory.yml playbooks/main.yml
|
||||
```
|
||||
|
||||
## Credentials
|
||||
|
||||
- Fleet credentials: `~/.hermes/credentials/fleet.env`
|
||||
- SSH key: `~/.ssh/artemis_key`
|
||||
- Tailscale auth key: `fleet.env` → `TS_AUTH_KEY_LXC_ALL`
|
||||
- Proxmox API token: `terraform-pve/terraform/terraform.auto.tfvars` (or fleet.env)
|
||||
|
||||
> **These are NOT in this tarball.** They must be provisioned separately.
|
||||
|
||||
## Notes
|
||||
|
||||
- Gitea repo (pull-deploy): `git@gitea.nb.bobbysh.me:Iron-Legion/ansible-pull-deploy.git`
|
||||
- Gitea repo (terraform-pve): `git@gitea.nb.bobbysh.me:Iron-Legion/terraform-pve.git`
|
||||
- Tailscale admin console: `https://login.tailscale.com/admin`
|
||||
- Proxmox nodes: MK33 (192.168.7.33), MK50 (192.168.50.41)
|
||||
|
||||
---
|
||||
Generated by Artemis on 20260614-1920
|
||||
Reference in New Issue
Block a user