Archive Legacy Setup And Add Ansible Control Plane

2026-07-08 12:47:37 +03:00
parent 841d56380b
commit 4bafa7d09e
203 changed files with 1663 additions and 11 deletions
@@ -0,0 +1,28 @@
+name: Deploy cloud-pc
+
+on:
+  workflow_dispatch:
+    inputs:
+      stack:
+        description: "Stack to deploy (leave empty to reconcile all)"
+        required: false
+  push:
+    paths:
+      - ".gitea/workflows/deploy-cloud-pc.yml"
+      - "cloud-pc/**"
+      - "scripts/deploy.sh"
+  schedule:
+    - cron: "0 4 * * *"
+
+jobs:
+  deploy:
+    runs-on: cloud-pc
+    steps:
+      - name: Sync repo
+        run: |
+          git config --global --replace-all safe.directory /opt/services
+          git -C /opt/services pull origin main --ff-only
+          chown -R 1000:100 /opt/services
+
+      - name: Deploy stacks
+        run: /opt/services/scripts/deploy.sh cloud-pc "${{ inputs.stack }}"
@@ -0,0 +1,28 @@
+name: Deploy mini-pc
+
+on:
+  workflow_dispatch:
+    inputs:
+      stack:
+        description: "Stack to deploy (leave empty to reconcile all)"
+        required: false
+  push:
+    paths:
+      - ".gitea/workflows/deploy-mini-pc.yml"
+      - "mini-pc/**"
+      - "scripts/deploy.sh"
+  schedule:
+    - cron: "0 4 * * *"
+
+jobs:
+  deploy:
+    runs-on: mini-pc
+    steps:
+      - name: Sync repo
+        run: |
+          git config --global --replace-all safe.directory /opt/services
+          git -C /opt/services pull origin main --ff-only
+          chown -R 1000:100 /opt/services
+
+      - name: Deploy stacks
+        run: /opt/services/scripts/deploy.sh mini-pc "${{ inputs.stack }}"
@@ -0,0 +1,28 @@
+name: Deploy ru-vps
+
+on:
+    workflow_dispatch:
+        inputs:
+            stack:
+                description: "Stack to deploy (leave empty to reconcile all)"
+                required: false
+
+    push:
+        paths:
+            - ".gitea/workflows/deploy-ru-vps.yml"
+            - "ru-vps/**"
+    schedule:
+        - cron: "0 4 * * *"
+
+jobs:
+    deploy:
+        runs-on: ru-vps
+        steps:
+            - name: Sync repo
+              run: |
+                  git config --global --replace-all safe.directory /opt/services
+                  git -C /opt/services pull origin main --ff-only
+                  chown -R 1000:100 /opt/services
+
+            - name: Deploy stacks
+              run: /opt/services/scripts/deploy.sh ru-vps "${{ inputs.stack }}"
@@ -0,0 +1,33 @@
+name: NixOS switch cloud-pc
+
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - ".gitea/workflows/nixos-switch-cloud-pc.yml"
+      - "nixos/flake.nix"
+      - "nixos/flake.lock"
+      - "nixos/modules/**"
+      - "nixos/hosts/cloud-pc/**"
+
+jobs:
+  switch:
+    runs-on: cloud-pc
+    steps:
+      - name: Sync repo
+        run: |
+          git config --global --replace-all safe.directory /opt/services
+          git -C /opt/services pull origin main --ff-only
+          chown -R 1000:100 /opt/services
+
+      - name: Switch NixOS generation
+        env:
+          NIXOS_DEPLOY_KEY: ${{ secrets.NIXOS_DEPLOY_KEY }}
+        run: |
+          KEY=$(mktemp)
+          echo "$NIXOS_DEPLOY_KEY" > "$KEY"
+          chmod 600 "$KEY"
+          trap "rm -f $KEY" EXIT
+          ssh -i "$KEY" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null \
+            ada@192.168.1.5 \
+            "sudo /run/current-system/sw/bin/nixos-rebuild switch --flake /opt/services/nixos#cloud-pc"
@@ -0,0 +1,33 @@
+name: NixOS switch mini-pc
+
+on:
+  workflow_dispatch:
+  push:
+    paths:
+      - ".gitea/workflows/nixos-switch-mini-pc.yml"
+      - "nixos/flake.nix"
+      - "nixos/flake.lock"
+      - "nixos/modules/**"
+      - "nixos/hosts/mini-pc/**"
+
+jobs:
+  switch:
+    runs-on: mini-pc
+    steps:
+      - name: Sync repo
+        run: |
+          git config --global --replace-all safe.directory /opt/services
+          git -C /opt/services pull origin main --ff-only
+          chown -R 1000:100 /opt/services
+
+      - name: Switch NixOS generation
+        env:
+          NIXOS_DEPLOY_KEY: ${{ secrets.NIXOS_DEPLOY_KEY }}
+        run: |
+          KEY=$(mktemp)
+          echo "$NIXOS_DEPLOY_KEY" > "$KEY"
+          chmod 600 "$KEY"
+          trap "rm -f $KEY" EXIT
+          ssh -i "$KEY" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null \
+            ada@192.168.1.10 \
+            "sudo /run/current-system/sw/bin/nixos-rebuild switch --flake /opt/services/nixos#mini-pc"