asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Infrastructure as Code of asxp.io https://asxp.io
16 commits 2 branches 0 tags 333 KiB
  • Python 44.6%
  • Jinja 29.1%
  • HCL 26.3%
Find a file
Sergei Poljanski a79b110259 forgejo-runner: match the live runner and pin the nix image 
The role had drifted from what runs on asxpio-services: capacity 4,
a bridge network per workflow so service containers start, the Docker
socket automounted into jobs, and a nix-latest label backed by a
persistent nix-store volume.

That volume caused a CI outage on 2026-10-18. nixos/nix:latest moved on,
and since the image's /bin/sh and /etc/nix/nix.conf link into /nix/store,
the old volume left them dangling. Pin the image through
forgejo_runner_nix_version and name the volume after it, so a bump is
deliberate and always gets a store seeded from its own image.

Assisted-by: Claude:opus-5-5
2026-10-18 09:48:14 +04:00
ansible forgejo-runner: match the live runner and pin the nix image 2026-10-18 09:48:14 +04:00
terraform new ssh pub key 2025-11-09 11:58:51 +02:00
.gitignore add wg: sanya 2026-04-05 19:17:18 +03:00
README.md todo 2025-11-13 23:36:13 +02:00

README.md

asxp.io Infrastructure

Infrastructure as Code for asxp.io servers managed via Terraform, Ansible, and Forgejo CI/CD.

Servers

Server Type vCPU RAM Services
asxpio-ops CX22 2 4GB traefik, forgejo, grafana, prometheus, loki, static_sites
asxpio-services CX43 8 16GB forgejo_runner, immich, minecraft, valheim, factorio, prosody, coturn

Directory Structure

  • terraform/ - Cloud infrastructure provisioning (Hetzner Cloud)
  • ansible/ - Server bootstrap and configuration management
  • services/ - Docker Compose files for container orchestration
  • .forgejo/workflows/ - CI/CD pipeline automation (planned)

Migration TODO

Phase 0: Preparation

  • Terraform infrastructure code
  • Ansible inventory and playbooks
  • Create S3 buckets (hel1-primary, fsn1-secondary)
  • Provision servers via Terraform
  • Backup all services from bare metal

Phase 1: Core Infrastructure

  • Deploy WireGuard VPN on ops-server
  • Deploy Traefik reverse proxy
  • Deploy monitoring stack (Grafana, Prometheus, Loki)

Phase 2: Git & CI/CD

  • Migrate Forgejo from bare metal
  • Deploy Forgejo Runner on services-server

Phase 3: Media & Storage

  • Upload Immich photos to S3 (135GB)
  • Migrate Immich to services-server
  • [/] Configure S3 geo-replication (hel1 → fsn1) (Turn on service)

Phase 4: Gaming Services

  • Migrate Minecraft (20GB local + 80GB S3 backups)
  • Migrate Valheim (9.5GB)
  • Migrate Factorio (31MB)

Phase 5: Communication

  • Migrate Prosody XMPP
  • Migrate Turnserver

Phase 6: Final Services

  • Migrate static sites (asxp.io, czsk.it)
  • Configure automated backups to S3
  • DNS cutover and validation
  • Decommission bare metal (after 30 days)

Later

  • Setup Terraform to manage DNS