additional server steps
This commit is contained in:
+7
-2
@@ -4,6 +4,11 @@
|
|||||||
- [x] Implement SOPS for secret management
|
- [x] Implement SOPS for secret management
|
||||||
- [x] Lock down machine IP addresses, passed in through flake as param.
|
- [x] Lock down machine IP addresses, passed in through flake as param.
|
||||||
- [x] Set up port forwarding to server from router
|
- [x] Set up port forwarding to server from router
|
||||||
- [ ] Set up NGINX reverse proxy (or ingress controller for k8s?)
|
- [x] Set up NGINX reverse proxy (or ingress controller for k8s?)
|
||||||
- [x] Buy Domain Name
|
- [x] Buy Domain Name
|
||||||
- [x] Use "LetsEncrypt" for Server Cert (Enable HTTPS)
|
- [x] Use ACME for Server Cert (Enable HTTPS)
|
||||||
|
- [ ] Bootsrap private ssh key to sysAdmin user to allow local cloning of repo
|
||||||
|
- [ ] Add auto repo cloning to bootstrap
|
||||||
|
- [ ] Make build path location of automated repo cloning
|
||||||
|
- [ ] Define "services" directory to declare each service separately
|
||||||
|
- [ ] Add list of services to each hostname to define what they'll host (look into adding top layer reverse proxy if it's needed for multiple machines hosting separate services accross one domain name)
|
||||||
|
|||||||
Reference in New Issue
Block a user