tibor.sh / infrastructure
[READ-ONLY] Mirror of https://github.com/tiborpilz/infrastructure. Personal Infrastructure managed via terraform & k8s
0
Fork 0

Configure Feed

Select the types of activity you want to include in your feed.

HCL 63.4%
Nix 20.5%
Shell 5.4%
Smarty 5.2%
Go Template 2.2%
Other 3.2%
258 46 0

Clone this repository

https://tangled.org/tibor.sh/infrastructure https://tangled.org/did:plc:bnw5wdbehqh2otwayntrublf
git@tangled.org:tibor.sh/infrastructure git@tangled.org:did:plc:bnw5wdbehqh2otwayntrublf

For self-hosted knots, clone URLs may differ based on your setup.


Download tar.gz Download .zip
README.md

Infrastructure#

IaC repo for my personal Infrastructure.

Uses both Hetzner Cloud and Proxmox VMs to provision a Talos k8s Cluster with ArgoCD.

Additionally includes applications for ArgoCD to deploy.

State encryption#

State and plan files are encrypted client-side (terragrunt/root.hcl). The passphrase comes from state_passphrase in terragrunt/secrets.enc.yaml or TF_STATE_PASSPHRASE. To migrate existing unencrypted state: apply once per unit, then set state_encryption_migration = false. Losing the passphrase means losing the state.