• Joined on 2021-11-20
ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:56 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

assigned to @fnux

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:55 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

small IPv4 enabled virtual machine with (sub)domain attached to it (1 VCPU, 1 GB RAM, 3 GB DISK)

I'll allocate am IPv6Only VM and point a domain there / configure the IPv4-to-IPv6 proxy for…

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:54 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

two users in Ungleich's Matrix server for GitLab and GitHub bots

I'll allocate them later today.

separate user in GitHub for OAuth Apps and webhook access in [cdist…

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:52 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

latest Debian Stable.

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:51 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

make following bot users: @gitlab:ungleich.ch and @github:ungleich.ch

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:50 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

lets wait a bit with GitHub.

I'll try to figure out if that OAuth App is even needed and maybe we can fly only with webhook.

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:48 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

VM is up and running, thanks @fnux.

GitHub plugin maintainer added support for webhooks without OAuth App.

GitLab plugin is bit broken atm, will do some debugging.

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:47 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

assigned to @ander and unassigned @fnux

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:46 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

github is now configured as well.

I enabled all events for GitHub. lets see how annyoing it becomes 😄

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:44 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

GitHub commit messages are annoying in chat. Ander said he can't do this anymore, can someone other do that?

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:43 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

someone with enough perms have to tune github project's webhook to only send new PR information.

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:41 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

I reduced github to PRs only.

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:40 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

thanks :)

ungleich-gitea commented on issue ungleich-public/cdist#59 2021-11-20 15:32:39 +00:00
Git(Lab|Hub) integration with #cdist:ungleich.ch

meanwhile added __apt_unattended_upgrades to the mix and calling it done.

for @nico and @fnux - there's cdist-matrix-integration:/root/README file with creds n stuff.

ungleich-gitea commented on issue ungleich-public/cdist#58 2021-11-20 15:32:36 +00:00
Compile a set of best practices for storing secrets

I handle secrets as follows: In my .cdist I created a folder secret which represents a pass repository (PASSWORD_STORE_DIR=~/.cdist/secret pass init ...).

I…

ungleich-gitea commented on issue ungleich-public/cdist#58 2021-11-20 15:32:34 +00:00
Compile a set of best practices for storing secrets

I've been thinking about this and I reckon, we leave the keys in a few places after a run:

  • /var/lib/cdist
  • Some tmp location on the local machine
  • Perhaps some tmp on the server
  • And the…
ungleich-gitea commented on issue ungleich-public/cdist#58 2021-11-20 15:32:33 +00:00
Compile a set of best practices for storing secrets

@fancsali The current situation is unsatisfactory for multiple reasons.

As far as the locations are concerned:

  • /var/lib/cdist on target
    The password will be left there on the target. The…
ungleich-gitea commented on issue ungleich-public/cdist#58 2021-11-20 15:32:32 +00:00
Compile a set of best practices for storing secrets

mentioned in merge request cdist-contrib!19

ungleich-gitea commented on issue ungleich-public/cdist#57 2021-11-20 15:32:30 +00:00
__letsencrypt_cert rewrite and subtypes, analyse phase

changed the description