Sergei Poljanski
e5322cbac2
hcloud replaces a server when user_data, image or ssh_keys change, and cloud-init only runs at first boot anyway. An edit to cloud-init, like adding a user, would therefore plan the destruction of a production machine. Ignore changes to those three attributes and set prevent_destroy on both servers, so cloud-init describes a rebuild and nothing else. Add user zerrtika to cloud-init to match the servers; the user was created on them by playbook 04. Assisted-by: Claude:fable-5-2
87 lines
2 KiB
HCL
87 lines
2 KiB
HCL
# Ops Server (2 vCPU, 4GB RAM)
|
|
resource "hcloud_server" "ops" {
|
|
name = "asxpio-ops"
|
|
image = "debian-13"
|
|
location = "hel1"
|
|
server_type = "cx23"
|
|
|
|
ssh_keys = [
|
|
hcloud_ssh_key.asxpi.id,
|
|
hcloud_ssh_key.deploy.id
|
|
]
|
|
|
|
backups = false
|
|
|
|
public_net {
|
|
ipv4_enabled = true
|
|
ipv6_enabled = true
|
|
}
|
|
|
|
network {
|
|
network_id = hcloud_network.main.id
|
|
ip = "10.10.0.10"
|
|
}
|
|
|
|
firewall_ids = [hcloud_firewall.ops_fw.id]
|
|
|
|
labels = {
|
|
role = "ops"
|
|
env = "production"
|
|
managed_by = "terraform"
|
|
project = "asxpio"
|
|
}
|
|
|
|
# Cloud-init for automated server setup
|
|
user_data = file("${path.module}/cloud-init/ops.yaml")
|
|
# cloud-init only runs at first boot, and hcloud replaces the server
|
|
# when user_data, image or ssh_keys change. Never let an edit to those
|
|
# destroy a running machine: changes there apply to a rebuild only.
|
|
lifecycle {
|
|
ignore_changes = [user_data, image, ssh_keys]
|
|
prevent_destroy = true
|
|
}
|
|
}
|
|
|
|
# Services Server - CX43 (8 vCPU, 16GB RAM)
|
|
resource "hcloud_server" "services" {
|
|
name = "asxpio-services"
|
|
image = "debian-13"
|
|
location = "hel1"
|
|
server_type = "cx43"
|
|
|
|
ssh_keys = [
|
|
hcloud_ssh_key.asxpi.id,
|
|
hcloud_ssh_key.deploy.id
|
|
]
|
|
|
|
backups = false
|
|
|
|
public_net {
|
|
ipv4_enabled = true
|
|
ipv6_enabled = true
|
|
}
|
|
|
|
network {
|
|
network_id = hcloud_network.main.id
|
|
ip = "10.10.0.20"
|
|
}
|
|
|
|
firewall_ids = [hcloud_firewall.services_fw.id]
|
|
|
|
labels = {
|
|
role = "services"
|
|
env = "production"
|
|
managed_by = "terraform"
|
|
project = "asxpio"
|
|
}
|
|
|
|
# Cloud-init for automated server setup
|
|
user_data = file("${path.module}/cloud-init/services.yaml")
|
|
# cloud-init only runs at first boot, and hcloud replaces the server
|
|
# when user_data, image or ssh_keys change. Never let an edit to those
|
|
# destroy a running machine: changes there apply to a rebuild only.
|
|
lifecycle {
|
|
ignore_changes = [user_data, image, ssh_keys]
|
|
prevent_destroy = true
|
|
}
|
|
}
|