M.V. Hutz
04ca230bee
## Summary - Adds a private runner server on the Hetzner private network (no public IP) - NAT through the gitea server for outbound internet access via `hcloud_network_route` and iptables forwarding rules - Runner connects to gitea over HTTPS on the private network with TLS verification disabled - Includes Taskfile commands for runner deployment and SSH access ## Test plan - [x] Runner registers with gitea instance - [x] Private network connectivity verified - [ ] Run a test workflow to confirm end-to-end CI 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: #6 Co-authored-by: M.V. Hutz <git@maximhutz.me> Co-committed-by: M.V. Hutz <git@maximhutz.me>
46 lines
1.0 KiB
HCL
46 lines
1.0 KiB
HCL
locals {
|
|
datacenter = "hel1-dc2"
|
|
server_type = "cx23"
|
|
server_image = "debian-12"
|
|
|
|
domain = "maximhutz.com"
|
|
subdomain = "git"
|
|
|
|
network_zone = "eu-central"
|
|
network_cidr = "10.0.0.0/16"
|
|
subnet_cidr = "10.0.1.0/24"
|
|
server_ip = "10.0.1.2"
|
|
runner_ip = "10.0.1.3"
|
|
}
|
|
|
|
# ---------------------------------------------------------------------------- #
|
|
|
|
variable "hcloud_token" {
|
|
sensitive = true
|
|
description = "The hCloud token used to access Hetzner resources."
|
|
type = string
|
|
}
|
|
|
|
variable "public_ssh_key_path" {
|
|
description = "The location of the public key used to access the repository server."
|
|
type = string
|
|
}
|
|
|
|
variable "aws_region" {
|
|
description = "The region of the AWS account."
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "aws_access_key" {
|
|
description = "The access key of the account."
|
|
type = string
|
|
sensitive = true
|
|
}
|
|
|
|
variable "aws_secret_key" {
|
|
description = "The secret key of the account."
|
|
type = string
|
|
sensitive = true
|
|
}
|