web/git
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: ansible vault

Browse Source
This commit is contained in:
Maxim Hutz
2025-09-04 22:08:00 -04:00
parent d094a1b26b
commit ed972509ce
5 changed files with 35 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
Taskfile.yml
View File

@@ -1,21 +1,24 @@
version: 3
includes:
tf: { taskfile: terraform, dir: terraform }
# includes:
# tf: { taskfile: terraform, dir: terraform }
# tasks:
# dev:
# - docker compose -f compose.dev.yml rm -fsv
# - docker compose -f compose.dev.yml up --build --force-recreate --no-deps
# deploy:fast: ansible-playbook playbooks/fast.yml
# deploy:slow: ansible-playbook playbooks/slow.yml
# deploy:restore: ansible-playbook playbooks/restore.yml -e "restore_bucket={{.BUCKET}} restore_key={{.KEY}}"
# enter:
# cmd: aws ssm start-session --target $INSTANCE_ID
# env:
# INSTANCE_ID: { sh: jq -r .instance_id.value < config/infrastructure.secret.json }
# AWS_REGION: { sh: jq -r .aws_region < config/ansible.secret.json }
# AWS_ACCESS_KEY_ID: { sh: jq -r .aws_access_key < config/ansible.secret.json }
# AWS_SECRET_ACCESS_KEY: { sh: jq -r .aws_secret_key < config/ansible.secret.json }
tasks:
dev:
- docker compose -f compose.dev.yml rm -fsv
- docker compose -f compose.dev.yml up --build --force-recreate --no-deps
deploy:fast: ansible-playbook playbooks/fast.yml
deploy:slow: ansible-playbook playbooks/slow.yml
deploy:restore: ansible-playbook playbooks/restore.yml -e "restore_bucket={{.BUCKET}} restore_key={{.KEY}}"
enter:
cmd: aws ssm start-session --target $INSTANCE_ID
env:
INSTANCE_ID: { sh: jq -r .instance_id.value < config/infrastructure.secret.json }
AWS_REGION: { sh: jq -r .aws_region < config/ansible.secret.json }
AWS_ACCESS_KEY_ID: { sh: jq -r .aws_access_key < config/ansible.secret.json }
AWS_SECRET_ACCESS_KEY: { sh: jq -r .aws_secret_key < config/ansible.secret.json }
vault:edit: ansible-vault edit vault.yml