diff options
| -rw-r--r-- | .github/dependabot.yml | 6 | ||||
| -rw-r--r-- | .github/workflows/infra-metal.yml | 51 | ||||
| -rw-r--r-- | .github/workflows/infra.yml | 65 | ||||
| -rw-r--r-- | .github/workflows/main.yml | 10 |
4 files changed, 0 insertions, 132 deletions
diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index ca79ca5..0000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,6 +0,0 @@ -version: 2 -updates: - - package-ecosystem: github-actions - directory: / - schedule: - interval: weekly diff --git a/.github/workflows/infra-metal.yml b/.github/workflows/infra-metal.yml deleted file mode 100644 index 2be8f3e..0000000 --- a/.github/workflows/infra-metal.yml +++ /dev/null @@ -1,51 +0,0 @@ -name: infra-metal - -on: - workflow_call: - inputs: - limit: - description: 'Ansible hosts' - type: string - default: all - required: false - workflow_dispatch: - inputs: - limit: - description: 'Ansible hosts' - type: string - default: all - required: false - -jobs: - maintenance: - runs-on: ubuntu-latest - steps: - - name: Set up WireGuard - uses: egor-tensin/setup-wireguard@v1 - with: - endpoint: '${{ secrets.WG_ENDPOINT }}' - endpoint_public_key: '${{ secrets.WG_ENDPOINT_PUBLIC }}' - ips: '${{ secrets.WG_IPS }}' - allowed_ips: '${{ secrets.WG_ALLOWED_IPS }}' - private_key: '${{ secrets.WG_PRIVATE }}' - preshared_key: '${{ secrets.WG_PRESHARED }}' - - name: Configure SSH - run: | - mkdir -p ~/.ssh - cat > ~/.ssh/config <<'EOF' - StrictHostKeyChecking no - EOF - - name: Set up ssh-agent - uses: webfactory/ssh-agent@v0.10.0 - with: - ssh-private-key: '${{ secrets.SSH_KEY }}' - - name: Checkout - run: | - git clone -q ssh://git@bitbucket.org/egor-tensin/infra-metal.git - - name: Configure git - run: | - git config --global user.name 'Egor Tensin' - git config --global user.email 'egor@tensin.name' - - name: Run maintenance - run: | - make -C infra-metal maintenance 'LIMIT=${{ inputs.limit }}' diff --git a/.github/workflows/infra.yml b/.github/workflows/infra.yml deleted file mode 100644 index 1a67bca..0000000 --- a/.github/workflows/infra.yml +++ /dev/null @@ -1,65 +0,0 @@ -name: infra - -on: - workflow_call: - inputs: - limit: - description: 'Ansible hosts' - type: string - default: all - required: false - workflow_dispatch: - inputs: - limit: - description: 'Ansible hosts' - type: string - default: all - required: false - -jobs: - maintenance: - runs-on: ubuntu-latest - env: - AWS_ACCESS_KEY_ID: '${{ secrets.AWS_ACCESS_KEY_ID }}' - AWS_SECRET_ACCESS_KEY: '${{ secrets.AWS_SECRET_ACCESS_KEY }}' - DIGITALOCEAN_TOKEN: '${{ secrets.DIGITALOCEAN_TOKEN }}' - YC_SERVICE_ACCOUNT_KEY_FILE: '${{ secrets.YC_SERVICE_ACCOUNT_KEY_FILE }}' - steps: - - name: Set up Terraform - uses: hashicorp/setup-terraform@v4 - - name: Configure SSH - run: | - mkdir -p ~/.ssh - cat > ~/.ssh/config <<'EOF' - StrictHostKeyChecking no - EOF - - name: Set up ssh-agent - uses: webfactory/ssh-agent@v0.10.0 - with: - ssh-private-key: '${{ secrets.SSH_KEY }}' - - name: Checkout - run: | - git clone -q ssh://git@bitbucket.org/egor-tensin/infra.git - - name: Configure git - run: | - git config --global user.name 'Egor Tensin' - git config --global user.email 'egor@tensin.name' - - name: Run maintenance - run: | - make -C infra maintenance 'LIMIT=${{ inputs.limit }}' - - name: Set up WireGuard - uses: egor-tensin/setup-wireguard@v1 - with: - endpoint: '${{ secrets.WG_ENDPOINT }}' - endpoint_public_key: '${{ secrets.WG_ENDPOINT_PUBLIC }}' - ips: '${{ secrets.WG_IPS }}' - allowed_ips: '${{ secrets.WG_ALLOWED_IPS }}' - private_key: '${{ secrets.WG_PRIVATE }}' - preshared_key: '${{ secrets.WG_PRESHARED }}' - - name: Install dependencies - run: | - sudo apt-get update - sudo DEBIAN_FRONTEND=noninteractive apt-get install -yq --no-install-recommends nmap - - name: Check ports - run: | - sudo ./infra/utils/check_ports.py diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml deleted file mode 100644 index 9729765..0000000 --- a/.github/workflows/main.yml +++ /dev/null @@ -1,10 +0,0 @@ -name: Maintenance - -on: - - workflow_dispatch - -jobs: - - infra: - secrets: inherit - uses: ./.github/workflows/infra.yml |