mirror of
https://github.com/RWejlgaard/pez-infra.git
synced 2026-07-04 15:46:16 +00:00
Updates the requirements on and [pagerduty/pagerduty](https://github.com/PagerDuty/terraform-provider-pagerduty) to permit the latest version. Updates `pagerduty/pagerduty` to 3.32.4 - [Release notes](https://github.com/PagerDuty/terraform-provider-pagerduty/releases) - [Changelog](https://github.com/PagerDuty/terraform-provider-pagerduty/blob/master/CHANGELOG.md) - [Commits](https://github.com/PagerDuty/terraform-provider-pagerduty/compare/v2.2.0...v3.32.4) Updates `pagerduty/pagerduty` to 3.32.4 - [Release notes](https://github.com/PagerDuty/terraform-provider-pagerduty/releases) - [Changelog](https://github.com/PagerDuty/terraform-provider-pagerduty/blob/master/CHANGELOG.md) - [Commits](https://github.com/PagerDuty/terraform-provider-pagerduty/compare/v2.2.0...v3.32.4) --- updated-dependencies: - dependency-name: pagerduty/pagerduty dependency-version: 3.32.4 dependency-type: direct:production dependency-group: terraform - dependency-name: pagerduty/pagerduty dependency-version: 3.32.4 dependency-type: direct:production dependency-group: terraform ... Signed-off-by: dependabot[bot] <support@github.com> |
||
|---|---|---|
| .. | ||
| grafana | ||
| hetzner | ||
| pagerduty | ||
| .gitignore | ||
| main.tf | ||
| Makefile | ||
| providers.tf | ||
| README.md | ||
| secrets.enc.yaml | ||
| vars.tf | ||
Terraform
Infrastructure-as-code for cloud and edge services. Uses OpenTofu (drop-in Terraform replacement).
What's managed
- Hetzner Cloud — Two servers (
nuremberg-a,helsinki-a), firewalls, and DNS forpez.sh - Grafana Cloud — Stack, dashboards, synthetic monitoring checks, alert rules, Fleet collectors and pipelines
- PagerDuty — Service, escalation policy, and Grafana integration
Secrets
Secrets are stored encrypted in secrets.enc.yaml via SOPS and decrypted at plan/apply time into secrets.yaml. The Makefile handles decryption automatically.
Required secret keys: hetzner_token, grafana_cloud_access_policy, grafana_synthetic_monitoring_access_token, grafana_fleet_management_auth, grafana_service_account_token, pagerduty_token, plex_token, backblaze_key_id.
State
State is stored in a Backblaze B2 bucket (pez-infra-tfstate) using an S3-compatible backend. Credentials are read from AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY environment variables.
Usage
make init # initialize providers and backend
make plan # preview changes
make apply # apply changes
make fmt # format all .tf files
Provider versions
| Provider | Source | Version |
|---|---|---|
| Hetzner Cloud | hetznercloud/hcloud |
~> 1.45 |
| Grafana | grafana/grafana |
~> 4.35 |
| PagerDuty | pagerduty/pagerduty |
~> 2.2 |
| OpenTofu | — | >= 1.6.0 |