ryan/lunarfront-infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add DOKS, managed postgres/redis, WAF rules, external-dns
Some checks failed
Terraform / terraform (push) Failing after 32s
Details
Test / test (push) Successful in 1s
Details

Browse Source
This commit is contained in:
Ryan Moon
2026-04-02 17:25:13 -05:00
parent 155ef0345e
commit 3471374cb6
9 changed files with 195 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
terraform/main.tf
View File

@@ -112,11 +112,11 @@ resource "digitalocean_firewall" "gitea" {
source_addresses = ["0.0.0.0/0", "::/0"]
}
# Gitea SSH for git push/pull — your IP only
# Gitea SSH for git push/pull — open until Gitea is migrated to DOKS
inbound_rule {
protocol = "tcp"
port_range = "2222"
source_addresses = ["${var.admin_ip}/32"]
source_addresses = ["0.0.0.0/0", "::/0"]
}
outbound_rule {
@@ -138,7 +138,7 @@ resource "cloudflare_record" "gitea" {
zone_id = data.cloudflare_zone.main.id
name = "git"
type = "A"
value = digitalocean_droplet.gitea.ipv4_address
content = digitalocean_droplet.gitea.ipv4_address
proxied = true
ttl = 1
}
@@ -147,7 +147,7 @@ resource "cloudflare_record" "vaultwarden" {
zone_id = data.cloudflare_zone.main.id
name = "vault"
type = "A"
value = digitalocean_droplet.gitea.ipv4_address
content = digitalocean_droplet.gitea.ipv4_address
proxied = true
ttl = 1
}
@@ -157,7 +157,7 @@ resource "cloudflare_record" "git_ssh" {
zone_id = data.cloudflare_zone.main.id
name = "git-ssh"
type = "A"
value = digitalocean_droplet.gitea.ipv4_address
content = digitalocean_droplet.gitea.ipv4_address
proxied = false
ttl = 3600
}
@@ -167,7 +167,7 @@ resource "cloudflare_record" "registry" {
zone_id = data.cloudflare_zone.main.id
name = "registry"
type = "A"
value = digitalocean_droplet.gitea.ipv4_address
content = digitalocean_droplet.gitea.ipv4_address
proxied = false
ttl = 3600
}