Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

As an operator, I can provision a boostrap VPN server via pipeline #14

Closed
chrisjsimpson opened this issue Oct 12, 2024 · 0 comments · Fixed by #15
Closed

As an operator, I can provision a boostrap VPN server via pipeline #14

chrisjsimpson opened this issue Oct 12, 2024 · 0 comments · Fixed by #15

Comments

@chrisjsimpson
Copy link
Contributor

Problem: Step one of "re-deploy VPN server/client from scratch" is to provision a vps server (ubuntu) whilst trivial, that process is not automated.

Solution: Lean on high-availability server creation script to automate the creation of bootstrap VPS server for VPN purpose.
chrisjsimpson added a commit that referenced this issue Oct 12, 2024
@chrisjsimpson
wip #14 naming vpn_clients -> vpn_servers
2933554
chrisjsimpson added a commit that referenced this issue Oct 12, 2024
@chrisjsimpson
wip #14 create/rebuild vpn server
fed4612
chrisjsimpson added a commit that referenced this issue Oct 12, 2024
@chrisjsimpson
#14 added localhost.yml group_vars
f213dd1
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
wip #14 deploy-vpn-server.yml improve
b50245f
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
wip Fix #14 automatically rebuild vpn servers
ff6c15b
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
Ref #14 use checkout v4
3dec629
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 ensure ansible-galaxy collection install --requirements-file ./sr…
f594b9a 
…c/vpn/requirements.yml
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 update manual readme steps
4e07fa8
@chrisjsimpson chrisjsimpson mentioned this issue Oct 19, 2024
Merged
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
wip #14 naming vpn_clients -> vpn_servers
8e786f4
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
wip #14 create/rebuild vpn server
598ddc4
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 added localhost.yml group_vars
4d7534d
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
wip #14 deploy-vpn-server.yml improve
533ea93
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
wip Fix #14 automatically rebuild vpn servers
e9b43e4
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
Ref #14 use checkout v4
2b7bbdf
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 ensure ansible-galaxy collection install --requirements-file ./sr…
482616b 
…c/vpn/requirements.yml
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 update manual readme steps
915f513
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
Ref #14 remove dead code PSONO_SECRET_ID
9d291b9
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 masking inputs.ansible_vault_password
c04b873
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
Ref #14 masking inputs.ansible_vault_password
d0a6391
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 masking inputs
0a8ec83 
actions/runner#643
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
Ref #14 masking inputs
2cff40e 
actions/runner#643
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 debug ansible vault
378db4d
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 reinstate use of trap to rm ansible TMPFILE@Q
23d936e
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 add missing pip install -r
02a918a
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 remove uneeded vpn_servers from inventory.ini since dynamic inven…
6b8ec0e 
…tory

removed step "Replace first changeme with vpn_server_ipv4_address and second changeme with root" for same reason
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 force install of hcloud ansible collection
11c9ccd
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
Ref #14 force install of hcloud ansible collection
699614f
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 debug tmate always
d38498c
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 Template ssh_private_key_server_bootstrap
6797e35
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 disable host_key_checking during boostrap
f4aac9e
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
Ref #14 disable host_key_checking during boostrap
46a20de
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 delegate correctly Template ssh_private_key_server_bootstrap to t…
3d08b99 
…he runner
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 template early Template ssh_private_key_server_bootstrap
ffeef2c
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 place ssh_private_key_server_bootstrap and server_bootstrap_publi…
9e8884c 
…c_ssh_key in localhost groupvars
chrisjsimpson added a commit that referenced this issue Oct 19, 2024
@chrisjsimpson
#14 correct delegate from 127.0.01 -> localhost
78f58ee
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
#14 don't gather facts on vpn_servers before keys places & put ansibl…
ec8503c 
…e_ssh_private_key_file in all group_vars
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
#14 added missing templates/ssh/ssh_private_key_server_bootstrap.j2
7bc6960
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
Ref #14 added missing templates/ssh/ssh_private_key_server_bootstrap.j2
b62e10c
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
#14 ensure ~/ssh dir exists on local/runner host
634f135
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
Ref #14 ensure ~/ssh dir exists on local/runner host
6e9a45a
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
Ref #14 ensure ~/ssh dir exists on local/runner host
febc1c7
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
#14 ensure mode 600 for ansible_ssh_private_key_file
fd9201b
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
#14 Update deploy-vpn-server.yml debug
40b7410
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
#14 bump runner to ubuntu-24.04 Update deploy-vpn-server.yml
6480239
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
#14 update server_bootstrap_private_ssh_key
2613498
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
Ref #14 update server_bootstrap_private_ssh_key
e2db4d5
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
#14 move tmate to last Update deploy-vpn-server.yml
503eb63
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
#14 Update deploy-vpn-server.yml job name build -> deploy-vpn-server
398b275
chrisjsimpson added a commit that referenced this issue Oct 20, 2024
@chrisjsimpson
#14 only tmate if Update deploy-vpn-server.yml fails
46b33ca
chrisjsimpson added a commit that referenced this issue Oct 21, 2024
@chrisjsimpson
#14 generate-user-vpn-config pip3 install -r src/vpn/requirements.txt
6f03ec8
chrisjsimpson added a commit that referenced this issue Oct 21, 2024
@chrisjsimpson
#14 add-vpn-user force collections-path
72b4562
chrisjsimpson added a commit that referenced this issue Oct 21, 2024
@chrisjsimpson
#14 ansibleise Add-vpn-user
4974f00
chrisjsimpson added a commit that referenced this issue Oct 21, 2024
@chrisjsimpson
#14 correct ansible-playbook --extra_vars -> --extra-vars
e47c76b 
#14 place keys to bootstrap add-vpn user runner
chrisjsimpson added a commit that referenced this issue Oct 22, 2024
@chrisjsimpson
#14 deploy VPN server every 2 hrs deploy-vpn-server.yml
901ea15
@chrisjsimpson chrisjsimpson mentioned this issue Oct 24, 2024
Closed
@chrisjsimpson chrisjsimpson changed the title As an operator, I can provision a bootrap VPN server via pipeline As an operator, I can provision a boostrap VPN server via pipeline Oct 24, 2024
chrisjsimpson added a commit that referenced this issue Oct 25, 2024
@chrisjsimpson
#16 after rebuilding VPN, always rotate & publish user wireguard vpn …
dbadd43 
…entries #14
chrisjsimpson added a commit that referenced this issue Oct 27, 2024
@chrisjsimpson
Update deploy-vpn-server.yml concurrency 1 prevent concurrent runs #14 …
b7e2729 
…#16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

#14 as an operator I can provision a bootrap vpn server via pipeline KarmaComputing/server-bootstrap
1 participant
@chrisjsimpson