diff options
| author | Egor Tensin <egor@tensin.name> | 2026-04-06 21:39:36 +0200 |
|---|---|---|
| committer | Egor Tensin <egor@tensin.name> | 2026-04-06 21:39:39 +0200 |
| commit | 1c9de2a2a18dce38229ea14552e44c8ee777fc0b (patch) | |
| tree | 48263e5a95a1b5b0469d6af2198b50a94fb25892 | |
| parent | workflows/infra: add the LIMIT input (diff) | |
| download | maintenance-1c9de2a2a18dce38229ea14552e44c8ee777fc0b.tar.gz maintenance-1c9de2a2a18dce38229ea14552e44c8ee777fc0b.zip | |
workflows/infra: set up WireGuard
Since I now check for open ports on my hosts.
| -rw-r--r-- | .github/workflows/infra.yml | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/.github/workflows/infra.yml b/.github/workflows/infra.yml index 4fd55a4..bbe1d4e 100644 --- a/.github/workflows/infra.yml +++ b/.github/workflows/infra.yml @@ -25,6 +25,15 @@ jobs: DIGITALOCEAN_TOKEN: '${{ secrets.DIGITALOCEAN_TOKEN }}' YC_SERVICE_ACCOUNT_KEY_FILE: '${{ secrets.YC_SERVICE_ACCOUNT_KEY_FILE }}' steps: + - name: Set up WireGuard + uses: egor-tensin/setup-wireguard@v1 + with: + endpoint: '${{ secrets.WG_ENDPOINT }}' + endpoint_public_key: '${{ secrets.WG_ENDPOINT_PUBLIC }}' + ips: '${{ secrets.WG_IPS }}' + allowed_ips: '${{ secrets.WG_ALLOWED_IPS }}' + private_key: '${{ secrets.WG_PRIVATE }}' + preshared_key: '${{ secrets.WG_PRESHARED }}' - name: Set up Terraform uses: hashicorp/setup-terraform@v4 - name: Configure SSH |