Define S1 reef rollout handoff
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 3s

This commit is contained in:
codex 2026-07-25 15:13:41 +02:00
parent 992e42a232
commit e176738fad
13 changed files with 256 additions and 39 deletions

View file

@ -1,8 +1,18 @@
# RailianceHosts
# railiance-infra
**Tagline:** Git-driven automation for secure, self-reliant servers.
RailianceHosts is an open-source control repo that provisions and manages servers on Hosteurope and Hetzner Cloud entirely from Git. It combines **Terraform** for lifecycle management, **cloud-init** for first-boot configuration, and **Ansible** for convergence. All secrets live in-repo encrypted with **SOPS** and are unlocked with your single **age** master key (which you keep in your password manager). The minimal server registry in `inventory/servers.yaml` is the source of truth.
`railiance-infra` is the canonical S1 ownership repo for the Railiance
infrastructure substrate. It provisions and manages servers on HostEurope and
Hetzner Cloud entirely from Git. It combines **Terraform** for lifecycle
management, **cloud-init** for first-boot configuration, and **Ansible** for
convergence. All secrets live in-repo encrypted with **SOPS** and are unlocked
with your single **age** master key (which you keep in your password manager).
The minimal server registry in `inventory/servers.yaml` is the source of truth.
Future `reef-*` repos will model purpose-bound substrate boundaries such as
`reef-railiance01` or `reef-ops-workstations`, but the source-backed S1
inventory, hardening baseline, and OS convergence facts stay here.
## Quickstart
@ -19,13 +29,14 @@ RailianceHosts is an open-source control repo that provisions and manages server
First, clone this repository to your workstation:
```bash
git clone https://<your-gitea-host>/coulomb/railliance-hosts.git
git clone https://<your-gitea-host>/coulomb/railiance-infra.git
cd railiance-infra
```
## 📦 1. Prerequisites
To use RailianceHosts, make sure you have the following tools installed on your workstation:
To use `railiance-infra`, make sure you have the following tools installed on
your workstation:
- **Git** → for version control
- **age** → for key management and encryption ([Install guide](docs/age-keys.md))
@ -95,11 +106,9 @@ TL;DR
## 💻 5. Convergence
After provisioning a server with Terraform, RailianceHosts uses [Ansible](https://docs.ansible.com/) to **converge** hosts into a secure, baseline state.
After provisioning a server with Terraform, `railiance-infra` uses
[Ansible](https://docs.ansible.com/) to **converge** hosts into a secure,
baseline state.
This includes admin user setup, SSH hardening, firewall rules, essential tooling, and secret handling.
📖 See the full guide here: [Convergence Documentation](docs/convergence.md)
xxx