- A ceremonial stone set at the corner of a building.
- By extension, that which is prominent, fundamental, noteworthy, or central.
via: wiktionary
runs a production ci/cd environment for us (and you?).
it is built to serve magic pages and apis.
we also use it for the Artificial Museum.
tested on ubuntu.
expected server packages: systemd, apt, ssh, and bash.
grundsteinlegung.sh is a bash script and gets sent to the server via ssh, all other dependencies get installed automagically.
might work on other linuxes, if systemd and apt exist there.
expects docker and nodejs to be installed on your computer.
adds grundstein user(s)
nodejs, git, makepasswd, curl, certbot
generates letsencrypt certificates using certbot and certbot-dns-digitalocean
sets up grundstein systemd.service files and starts and enables the services.
uses systemd and journalctl for log management.
npm i -g grundsteingrundstein needs a configuration to work.
the easiest way to get started is to perform a grundsteinlegung.
git clone git://github.com/grundstein/legung ./cloud.domain.name
cd cloud.domain.name
npm install
# add a digitalocean api token to .secrets/digitalocean.ini
# to generate letsencrypt certificates.
# at the moment, this also requires you to use the digitalocean nameservers for your domain!
# start dev server
npm start
# deploy to your own server (after editing /grundstein-config.mjs to add your ip)
npm run prod
we use a digitalocean floating ip, this allows us to setup a separate pod, prepare it, and then just reassign the ip address to the new version.
by leaving a number of old pods alive, we can also rollback easily.
all of this without touching dns.
-
create pods through digitalocean api
-
name them by git hash
-
keep 3 versions alive at all times
-
add functionality to allow custom cloud apis
first release
- fix systemd docker container handling
- update dependencies
...