Skip to content

Latest commit

 

History

History
51 lines (35 loc) · 1.72 KB

README.md

File metadata and controls

51 lines (35 loc) · 1.72 KB
Raw

Totakoko Infrastructure

This project contains the compose-deploy infrastructure running totakoko.com.

Everything runs on a single Online dedicated server.

Security

The goal of this repository is to manage all services with git and be as open-source as possible. Secrets like passwords are not publicly visible and are only defined in the CI system.

If you discover a vulnerability in this repository, please send an email at [email protected].

CI Variables

These environment variables have been defined in the CI system:

  • SSH_HOST
  • SSH_PORT
  • SSH_FINGERPRINT_BASE64
  • SSH_PRIVATE_KEY_BASE64
  • cd_gitlab__DB_PASS
  • cd_gitlab_gitlab_SMTP_USER
  • cd_gitlab_gitlab_SMTP_PASS
  • cd_gitlab_gitlab_GITLAB_SECRETS_DB_KEY_BASE
  • cd_gitlab_gitlab_GITLAB_SECRETS_SECRET_KEY_BASE
  • cd_gitlab_gitlab_GITLAB_SECRETS_OTP_KEY_BASE
  • cd_mealplanner_couchdb_COUCHDB_PASSWORD
  • cd_mealplanner_couchdb_COUCHDB_USER
  • cd_mealplanner_server_MP_COUCHDB_PASSWORD
  • cd_mealplanner_server_MP_COUCHDB_USER
  • cd_netdata__BASIC_AUTH
  • cd_nextcloud_db_MYSQL_PASSWORD
  • cd_nextcloud_db_MYSQL_ROOT_PASSWORD
  • cd_nextcloud_nextcloud_MYSQL_PASSWORD
  • cd_nextcloud_nextcloud_NEXTCLOUD_ADMIN_PASSWORD
  • cd_wekan_wekan_MAIL_FROM
  • cd_wekan_wekan_MAIL_URL

Additional settings

  • SSH port was changed from 22 to 2222, so that it does not conflict with GitLab.
  • Docker login with registry.totakoko.com

Nextcloud configuration

Since a change in Nextcloud 17, the configuration 'overwriteprotocol' => 'https' must be added into /srv/data/nextcloud/app/config/config.php. (see issue)