mirror of
https://github.com/RWejlgaard/pez-infra.git
synced 2026-05-06 04:14:43 +00:00
Stale A records removed: - chimera.pez.sh → 13.43.223.167 (AWS IP reassigned, now serving unrelated site) - gopher.pez.sh → 83.94.248.182 (unreachable on all ports) - 0o9lix.ecp-dev.pez.sh → 0.0.0.0 (placeholder, never valid) Stale TXT verification records removed: - protonmail-verification (mail is self-hosted now, not ProtonMail) - keybase-site-verification (Keybase is effectively dead) - MS=ms99554544 (Microsoft domain verification, no active MS services) - google-site-verification (no active Google services using this domain) - apple-domain (no longer using Apple services after GrapheneOS switch) PESO-97 |
||
|---|---|---|
| .. | ||
| .gitignore | ||
| cloudflare_account.tf | ||
| cloudflare_dns.tf | ||
| Makefile | ||
| providers.tf | ||
| README.md | ||
| secrets.enc.yaml | ||
| vars.tf | ||
Terraform
Infrastructure-as-code for cloud and edge services. Uses OpenTofu (drop-in Terraform replacement).
What's managed
- Cloudflare DNS — All
pez.shrecords (A, CNAME, MX, TXT)
CI/CD
The original GitHub Actions workflow (apply.yml) ran plan on push to master, then applied with manual approval via a prod environment gate. This workflow lived in the standalone pez-terraform repo and would need adapting for the monorepo structure (e.g., path-filtered triggers).
Provider versions
| Provider | Source | Version |
|---|---|---|
| Cloudflare | cloudflare/cloudflare |
~> 5.18 |
| OpenTofu | — | >= 1.6.0 |
Migrated from
This directory replaces the standalone pez-terraform repo.