Ability to bootstrap a production-ready faasd with TLS support

[mehyedes]

Currently it is possible to provision a faasd installation on digitalocean using terraform by following the steps in Terraform for DigitalOcean.
The idea is to extend this to provision a production-ready faasd installation by adding TLS support out of the box.

Expected Behaviour

A faasd installation with TLS support is provisioned when applying the terraform plan.

Current Behaviour

No TLS support for the provisioned droplet

Possible Solution

• Use Caddy for automatic TLS certificates' provisioning
• Automate DNS record creation when domain is managed by digitalocean?

[mehyedes]

@alexellis As we discussed, this is not about how long it takes to have the setup ready. But the goal is to be able to get to a production-ready faasd installation with TLS support as easily as possible.

[mehyedes]

I have created this gist: https://gist.github.com/mehyedes/23e40c6426ac6c7bf28cca9d07036746

Maybe we could integrate it into the faasd repo.

[alexellis]

Hi @mehyedes thanks for working on this 👍

Is there anything around timing / retries or rate-limits that apply here?

Re the gist - yes, please send a PR, should we use the docs sub-folder maybe and also include the gist I built for Terraform + DO?

Could you change "CA_EMAIL" to letsencrypt_email or similar?

[mehyedes]

Hi @alexellis
Looks like there is no such thing available with the tf DO provider: https://github.com/terraform-providers/terraform-provider-digitalocean/issues/235
I have also received some valuable input from @Waterdrips , so I will update the configuration and then create a PR.

[mehyedes]

PR Created: #70