psc/vcard4reseller
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: psc:4d0146d6c28812bb0e482a892422791490d1205d
Branches Tags
psc:master
..
compare: psc:b316d0baf8df8f0a555eebb1d9bcbc88369b038d
Branches Tags
psc:master

No commits in common. "4d0146d6c28812bb0e482a892422791490d1205d" and "b316d0baf8df8f0a555eebb1d9bcbc88369b038d" have entirely different histories.
4d0146d6c2 ... b316d0baf8

3 changed files with 25 additions and 15 deletions
Show Stats Expand all files Collapse all files

2
deploy/terraform/cloud-init-app.yaml.tftpl
View File

@ -59,8 +59,6 @@ write_files:
sleep 20 sleep 20
if [ "$RUN_MIGRATIONS" = "true" ]; then if [ "$RUN_MIGRATIONS" = "true" ]; then
$COMPOSE exec -T php php bin/console doctrine:migrations:migrate --no-interaction || true $COMPOSE exec -T php php bin/console doctrine:migrations:migrate --no-interaction || true
# Erst-Befüllung (idempotent: überspringt, wenn admin@vcard4reseller.de existiert)
$COMPOSE exec -T php php bin/console app:seed || true
fi fi
$COMPOSE exec -T php php bin/console cache:clear || true $COMPOSE exec -T php php bin/console cache:clear || true
runcmd: runcmd:

28
deploy/terraform/dns.tf
View File

@ -1,28 +1,32 @@
# DNS über die Hetzner Cloud DNS API (manage_dns = true) — gleicher Cloud-Token, # Optional: DNS-Records über die Hetzner DNS API anlegen (manage_dns = true).
# DNS ist inzwischen in die Cloud-API integriert. Die Zone muss bereits in # Voraussetzung: Zone liegt bei Hetzner DNS, separater DNS-API-Token.
# Hetzner DNS existieren (Lookup per Name).
data "hcloud_zone" "zone" { data "hetznerdns_zone" "zone" {
count = var.manage_dns ? 1 : 0 count = var.manage_dns ? 1 : 0
name = var.dns_zone_name name = var.dns_zone_name
} }
# Portal-Domain (Apex "@" wenn domain == zone, sonst Subdomain-Teil) → Caddy locals {
resource "hcloud_zone_rrset" "portal" { # Relativer Record-Name: "@" wenn Portal == Zone, sonst der Subdomain-Teil
portal_record_name = var.domain == var.dns_zone_name ? "@" : replace(var.domain, ".${var.dns_zone_name}", "")
}
# Portal-Domain → Caddy
resource "hetznerdns_record" "portal" {
count = var.manage_dns ? 1 : 0 count = var.manage_dns ? 1 : 0
zone = data.hcloud_zone.zone[0].id zone_id = data.hetznerdns_zone.zone[0].id
name = var.domain == var.dns_zone_name ? "@" : replace(var.domain, ".${var.dns_zone_name}", "") name = local.portal_record_name
type = "A" type = "A"
value = hcloud_server.caddy.ipv4_address
ttl = 300 ttl = 300
records = [{ value = hcloud_server.caddy.ipv4_address }]
} }
# Wildcard für Firmen-Subdomains (KONZEPT §11) → Caddy (On-Demand-TLS) # Wildcard für Firmen-Subdomains (KONZEPT §11) → Caddy (On-Demand-TLS)
resource "hcloud_zone_rrset" "wildcard" { resource "hetznerdns_record" "wildcard" {
count = var.manage_dns ? 1 : 0 count = var.manage_dns ? 1 : 0
zone = data.hcloud_zone.zone[0].id zone_id = data.hetznerdns_zone.zone[0].id
name = "*" name = "*"
type = "A" type = "A"
value = hcloud_server.caddy.ipv4_address
ttl = 300 ttl = 300
records = [{ value = hcloud_server.caddy.ipv4_address }]
} }

10
deploy/terraform/versions.tf
View File

@ -3,7 +3,11 @@ terraform {
required_providers { required_providers {
hcloud = { hcloud = {
source = "hetznercloud/hcloud" source = "hetznercloud/hcloud"
version = "~> 1.64" # >= 1.64 für integriertes DNS (hcloud_zone_rrset) version = "~> 1.48"
}
hetznerdns = {
source = "germanbrew/hetznerdns"
version = "~> 3.0"
} }
} }
} }
@ -11,3 +15,7 @@ terraform {
provider "hcloud" { provider "hcloud" {
token = var.hcloud_token token = var.hcloud_token
} }
provider "hetznerdns" {
api_token = var.hetzner_dns_token
}