68 lines
2.1 KiB
Markdown
68 lines
2.1 KiB
Markdown
# Iron Legion Infra Backup — 20260614-1920
|
|
## What's Included
|
|
|
|
| Folder | Purpose |
|
|
|---|---|
|
|
| `terraform-pve/` | LXC provisioning (Tailscale subnet routers) |
|
|
| `terraform-pve-vm/` | VM migration (Artemis/Jarvis/Friday) |
|
|
| `ansible-push/` | Fleet automation playbooks (includes wolfstack role) |
|
|
| `wolfstack-keepalived/` | WolfStack VIP deploy scripts + configs |
|
|
|
|
## What's Excluded
|
|
|
|
- `.git/` history (not needed — this is a working copy)
|
|
- `.terraform/` provider caches (regenerate via `terraform init`)
|
|
- `__pycache__`, `venv`, `.venv`
|
|
- **Identity files** — synced to TriliumNext (Project: A.R.T.E.M.I.S.), not included here
|
|
|
|
## Restore Procedure
|
|
|
|
### 1. Install dependencies
|
|
|
|
```bash
|
|
# Terraform
|
|
wget -qO- https://apt.releases.hashicorp.com/gpg | sudo gpg --dearmor -o /usr/share/keyrings/hashicorp-archive-keyring.gpg
|
|
echo "deb [signed-by=/usr/share/keyrings/hashicorp-archive-keyring.gpg] https://apt.releases.hashicorp.com $(lsb_release -cs) main" | sudo tee /etc/apt/sources.list.d/hashicorp.list
|
|
sudo apt update && sudo apt install terraform
|
|
|
|
# Ansible
|
|
pip install ansible
|
|
|
|
# SSH key (must obtain separately)
|
|
# Place fleet private key at ~/.ssh/artemis_key (mode 600)
|
|
```
|
|
|
|
### 2. Init Terraform
|
|
|
|
```bash
|
|
cd terraform-pve/terraform
|
|
terraform init
|
|
# State must be re-imported or recreated — .tfstate NOT included
|
|
```
|
|
|
|
### 3. Run Ansible
|
|
|
|
```bash
|
|
cd ansible-push
|
|
ansible-playbook -i inventory.yml playbooks/main.yml
|
|
```
|
|
|
|
## Credentials
|
|
|
|
- Fleet credentials: `~/.hermes/credentials/fleet.env`
|
|
- SSH key: `~/.ssh/artemis_key`
|
|
- Tailscale auth key: `fleet.env` → `TS_AUTH_KEY_LXC_ALL`
|
|
- Proxmox API token: `terraform-pve/terraform/terraform.auto.tfvars` (or fleet.env)
|
|
|
|
> **These are NOT in this tarball.** They must be provisioned separately.
|
|
|
|
## Notes
|
|
|
|
- Gitea repo (pull-deploy): `git@gitea.nb.bobbysh.me:Iron-Legion/ansible-pull-deploy.git`
|
|
- Gitea repo (terraform-pve): `git@gitea.nb.bobbysh.me:Iron-Legion/terraform-pve.git`
|
|
- Tailscale admin console: `https://login.tailscale.com/admin`
|
|
- Proxmox nodes: MK33 (192.168.7.33), MK50 (192.168.50.41)
|
|
|
|
---
|
|
Generated by Artemis on 20260614-1920
|