AZ-Intec-GmbH/AZ-NIX-SERVERS
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: AtroPIM deployment config for AZ-PRM-1 (AZ-NIX-ava.2)

Browse Source 
- port registry: atrocore = 3058
- oci-container atrocore: Gitea-registry image, 127.0.0.1:3058:80,
  web network, static ip 10.89.0.16, db alias to host pg, env-file
  from agenix, named volume for instance data, registry login via
  token secret
- agenix secrets: atrocore-env (ATRO_DB_*) + atrocore-registry-token,
  age-encrypted to AZ-PRM-1 + user, non-interactive creation
- host postgres 17: idempotent atrocore-db-init oneshot (psql peer,
  secret only at runtime), pg_hba 10.89.0.0/24 scram-sha-256,
  atrocore in 03:10 backup list
- traefik: pim.l.az-gruppe.com -> localhost:3058 (ionos, websecure)
This commit is contained in:
m3ta-chiron
2026-08-17 13:45:21 +02:00
parent 705702abee
commit f1481dc256
8 changed files with 115 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
secrets.nix
+2
View File
@@ -11,6 +11,8 @@ let
users = [sascha.koenig];
systems = [AZ-CLD-1 AZ-LT-NIX AZ-PRM-1];
in {
"secrets/atrocore-env.age".publicKeys = [AZ-PRM-1] ++ users;
"secrets/atrocore-registry-token.age".publicKeys = [AZ-PRM-1] ++ users;
"secrets/azion-env.age".publicKeys = systems ++ users;
"secrets/server.crt.age".publicKeys = systems ++ users;
"secrets/server.key.age".publicKeys = systems ++ users;