Define S1 reef rollout handoff
This commit is contained in:
parent
992e42a232
commit
e176738fad
13 changed files with 256 additions and 39 deletions
27
README.md
27
README.md
|
|
@ -1,8 +1,18 @@
|
|||
# RailianceHosts
|
||||
# railiance-infra
|
||||
|
||||
**Tagline:** Git-driven automation for secure, self-reliant servers.
|
||||
|
||||
RailianceHosts is an open-source control repo that provisions and manages servers on Hosteurope and Hetzner Cloud entirely from Git. It combines **Terraform** for lifecycle management, **cloud-init** for first-boot configuration, and **Ansible** for convergence. All secrets live in-repo encrypted with **SOPS** and are unlocked with your single **age** master key (which you keep in your password manager). The minimal server registry in `inventory/servers.yaml` is the source of truth.
|
||||
`railiance-infra` is the canonical S1 ownership repo for the Railiance
|
||||
infrastructure substrate. It provisions and manages servers on HostEurope and
|
||||
Hetzner Cloud entirely from Git. It combines **Terraform** for lifecycle
|
||||
management, **cloud-init** for first-boot configuration, and **Ansible** for
|
||||
convergence. All secrets live in-repo encrypted with **SOPS** and are unlocked
|
||||
with your single **age** master key (which you keep in your password manager).
|
||||
The minimal server registry in `inventory/servers.yaml` is the source of truth.
|
||||
|
||||
Future `reef-*` repos will model purpose-bound substrate boundaries such as
|
||||
`reef-railiance01` or `reef-ops-workstations`, but the source-backed S1
|
||||
inventory, hardening baseline, and OS convergence facts stay here.
|
||||
|
||||
## Quickstart
|
||||
|
||||
|
|
@ -19,13 +29,14 @@ RailianceHosts is an open-source control repo that provisions and manages server
|
|||
First, clone this repository to your workstation:
|
||||
|
||||
```bash
|
||||
git clone https://<your-gitea-host>/coulomb/railliance-hosts.git
|
||||
git clone https://<your-gitea-host>/coulomb/railiance-infra.git
|
||||
cd railiance-infra
|
||||
```
|
||||
|
||||
## 📦 1. Prerequisites
|
||||
|
||||
To use RailianceHosts, make sure you have the following tools installed on your workstation:
|
||||
To use `railiance-infra`, make sure you have the following tools installed on
|
||||
your workstation:
|
||||
|
||||
- **Git** → for version control
|
||||
- **age** → for key management and encryption ([Install guide](docs/age-keys.md))
|
||||
|
|
@ -95,11 +106,9 @@ TL;DR
|
|||
|
||||
## 💻 5. Convergence
|
||||
|
||||
After provisioning a server with Terraform, RailianceHosts uses [Ansible](https://docs.ansible.com/) to **converge** hosts into a secure, baseline state.
|
||||
After provisioning a server with Terraform, `railiance-infra` uses
|
||||
[Ansible](https://docs.ansible.com/) to **converge** hosts into a secure,
|
||||
baseline state.
|
||||
This includes admin user setup, SSH hardening, firewall rules, essential tooling, and secret handling.
|
||||
|
||||
📖 See the full guide here: [Convergence Documentation](docs/convergence.md)
|
||||
|
||||
|
||||
xxx
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue