sfos/bootstrap/README.md

Bootstrap

Stand up a single or multi-machine sfos cluster.

Quick start

1. Edit main.tf and point the compute_provider module's source at the compute provider you want to use, e.g. source = "./compute_providers/hetzner"
2. Edit .env and plug in values for your compute provider.
3. Run tofu apply to create compute resource(s).
4. Run sfos-init to initialize the system with your nix configs.

Configure

Image registries

ghcr.io

1. Create a GitHub classic PAT with permissions (https://github.com/settings/tokens) [X] repo [x] write:packages
2. Encode the token in Docker's JSON format: echo <YOUR PERSONAL ACCESS TOKEN> | docker login ghcr.io -u <GITHUB USERNAME>--password-stdin
3. cd ../secrets
4. Encrypt Docker's JSON file as a secret cat /var/run/user/$(id -u)/containers/auth.json | EDITOR="cp /dev/stdin" agenix -e docker_ghcr_auth_config_json.age -i <YOUR SSH PRIVATE KEY PATH>