diff --git a/.terraform.lock.hcl b/.terraform.lock.hcl deleted file mode 100644 index aba921d..0000000 --- a/.terraform.lock.hcl +++ /dev/null @@ -1,96 +0,0 @@ -# This file is maintained automatically by "terraform init". -# Manual edits may be lost in future updates. - -provider "registry.terraform.io/cloudflare/cloudflare" { - version = "5.8.2" - constraints = "5.8.2" - hashes = [ - "h1:q9p622Nl/BMW9QUlnGIgFaYF7O94u7bfif48OQ0H9HE=", - "zh:92d133a074a8a95143861960508501711a95e0b267c60dbc722eec0a68053e08", - "zh:95b1f349c59d226d9005c49b5ac61e856492f75d8be3ca30954a91512f2ebecf", - "zh:a439ebd2e21dd6a4cd782563de372dbbac9853a713ba4e90fb3d317764374c2f", - "zh:b0a2313cdb113e8ecc058052bcbadaa312a6d093820e69ed97ed96725ad5fd8f", - "zh:c14e2790827a78f0e5274ec47f56e4fff41b76db01caf915fb73d5082c75c645", - "zh:ef135fce7d3925988fa2675287788da233a1630c23652ae160a1d6c2a9e8ebce", - "zh:f01d39efcb3aa7fa8634394caad10ca68abd694d75d2c8b3875516859d8df9b4", - "zh:f03391264e01749c17ead5a8ba33a96a568490a8212424c5ae6e113ad50bfc9f", - "zh:f809ab383cca0a5f83072981c64208cbd7fa67e986a86ee02dd2c82333221e32", - ] -} - -provider "registry.terraform.io/digitalocean/digitalocean" { - version = "2.62.0" - constraints = "2.62.0" - hashes = [ - "h1:MPWqSuVPLh6SNduEpKYZHOXDkW4CCtfEOcZMSjKrGnA=", - "zh:1004bd408d8982471a7b0971fb2c47ccb3e9b8b3261422a6c8942151e6624713", - "zh:173059dd17ab6cb471dd45ee0e2a01db9c2e7d31ac30e33eb3b6269cfca68bbb", - "zh:209e8092f3cfcb28406df19386064e31ab89152dc70555db2e252dc1ea9e5703", - "zh:2c45405951b64ca3606d4360463eee4745af361520f9a8e28b5e6e784010dc4b", - "zh:3b07459b33e56d2cfe2429dc499eb33e83969f75847dcab9a65b8de8cdefebcc", - "zh:486277719db85e0062a7a0014bfd0c9a2eda0c2955d9c77020a35f004bc4025f", - "zh:7487b77f0e0d33ca460f27cf8eeae08cce50bb4d64a693601cd76ca865d3eb78", - "zh:7ac4818386b45253b2e3f8b2794fb0a0837878a37bf03ace4e7a6c7f69345abc", - "zh:9a8ad3875867cb707ab50bf0c10fe23abdf95740f0fd48ee8575586aaf9e9817", - "zh:9b39578e77688b367f5f99ae4227cf76edb598263937983652b0e7052fad6b65", - "zh:a72723121d4548f17cfba7cc14d2cf9cc3ce066c1c81121ceac7dee42eeb84ee", - "zh:af2cf2b807af245c4259cd4e9980fe6633e9a3703e114b4997f8ee8a56188674", - "zh:b547d28e1e2de2c03ffde90eeb2d301331520b890c219e84aa876263ebf6e4fd", - "zh:baa2e3c085de1154fdef4922bc6c27aa62f0dba60535ec80e10017909ea93e2d", - "zh:c8425a8cfcba3ee408d9b75586f02f5c9af9c9d01817227731078662720e932f", - "zh:dfdfb75ff50d79de30164873c3977dce376ffc09ce5610aeb581f885b3f8b942", - ] -} - -provider "registry.terraform.io/hashicorp/null" { - version = "3.2.4" - constraints = "3.2.4" - hashes = [ - "h1:wTNrZnwQdOOT/TW9pa+7GgJeFK2OvTvDmx78VmUmZXM=", - "zh:59f6b52ab4ff35739647f9509ee6d93d7c032985d9f8c6237d1f8a59471bbbe2", - "zh:78d5eefdd9e494defcb3c68d282b8f96630502cac21d1ea161f53cfe9bb483b3", - "zh:795c897119ff082133150121d39ff26cb5f89a730a2c8c26f3a9c1abf81a9c43", - "zh:7b9c7b16f118fbc2b05a983817b8ce2f86df125857966ad356353baf4bff5c0a", - "zh:85e33ab43e0e1726e5f97a874b8e24820b6565ff8076523cc2922ba671492991", - "zh:9d32ac3619cfc93eb3c4f423492a8e0f79db05fec58e449dee9b2d5873d5f69f", - "zh:9e15c3c9dd8e0d1e3731841d44c34571b6c97f5b95e8296a45318b94e5287a6e", - "zh:b4c2ab35d1b7696c30b64bf2c0f3a62329107bd1a9121ce70683dec58af19615", - "zh:c43723e8cc65bcdf5e0c92581dcbbdcbdcf18b8d2037406a5f2033b1e22de442", - "zh:ceb5495d9c31bfb299d246ab333f08c7fb0d67a4f82681fbf47f2a21c3e11ab5", - "zh:e171026b3659305c558d9804062762d168f50ba02b88b231d20ec99578a6233f", - "zh:ed0fe2acdb61330b01841fa790be00ec6beaac91d41f311fb8254f74eb6a711f", - ] -} - -provider "registry.terraform.io/hashicorp/time" { - version = "0.13.1" - constraints = "0.13.1" - hashes = [ - "h1:P9h9GNlrWPECzIvIFjHOhF+HVzpxk0eCcdy1G0fWSHw=", - "zh:02cb9aab1002f0f2a94a4f85acec8893297dc75915f7404c165983f720a54b74", - "zh:04429b2b31a492d19e5ecf999b116d396dac0b24bba0d0fb19ecaefe193fdb8f", - "zh:26f8e51bb7c275c404ba6028c1b530312066009194db721a8427a7bc5cdbc83a", - "zh:772ff8dbdbef968651ab3ae76d04afd355c32f8a868d03244db3f8496e462690", - "zh:78d5eefdd9e494defcb3c68d282b8f96630502cac21d1ea161f53cfe9bb483b3", - "zh:898db5d2b6bd6ca5457dccb52eedbc7c5b1a71e4a4658381bcbb38cedbbda328", - "zh:8de913bf09a3fa7bedc29fec18c47c571d0c7a3d0644322c46f3aa648cf30cd8", - "zh:9402102c86a87bdfe7e501ffbb9c685c32bbcefcfcf897fd7d53df414c36877b", - "zh:b18b9bb1726bb8cfbefc0a29cf3657c82578001f514bcf4c079839b6776c47f0", - "zh:b9d31fdc4faecb909d7c5ce41d2479dd0536862a963df434be4b16e8e4edc94d", - "zh:c951e9f39cca3446c060bd63933ebb89cedde9523904813973fbc3d11863ba75", - "zh:e5b773c0d07e962291be0e9b413c7a22c044b8c7b58c76e8aa91d1659990dfb5", - ] -} - -provider "registry.terraform.io/poseidon/ct" { - version = "0.13.0" - constraints = "0.13.0" - hashes = [ - "h1:sTtlmMjbYiIuaad/23wVrOCSlihKaurcf2668M3ZWio=", - "zh:24d86adcba92ad0f13870d5e0d217c395aa90ff1e9234fe0c9b7c6eb65abb3a8", - "zh:317eeadf92d220fe546be624a9002190edeb623ac76ae7f6a93abd9fe1be65fd", - "zh:361dbff802ccbd94b87c9d77c0d9db9bdf4d5d408f8cf05e4dae203e60b310ca", - "zh:3b25cb8a0327886aa30c273561ecea3315cc4d729677cd6528ed1339486475da", - "zh:63455a68fee4ba0c9b131eb7e267eb17707184c55a5feb9e2bad2d9de5889d6a", - ] -} diff --git a/COPYING b/COPYING new file mode 100644 index 0000000..be3f7b2 --- /dev/null +++ b/COPYING @@ -0,0 +1,661 @@ + GNU AFFERO GENERAL PUBLIC LICENSE + Version 3, 19 November 2007 + + Copyright (C) 2007 Free Software Foundation, Inc. + Everyone is permitted to copy and distribute verbatim copies + of this license document, but changing it is not allowed. + + Preamble + + The GNU Affero General Public License is a free, copyleft license for +software and other kinds of works, specifically designed to ensure +cooperation with the community in the case of network server software. + + The licenses for most software and other practical works are designed +to take away your freedom to share and change the works. By contrast, +our General Public Licenses are intended to guarantee your freedom to +share and change all versions of a program--to make sure it remains free +software for all its users. + + When we speak of free software, we are referring to freedom, not +price. Our General Public Licenses are designed to make sure that you +have the freedom to distribute copies of free software (and charge for +them if you wish), that you receive source code or can get it if you +want it, that you can change the software or use pieces of it in new +free programs, and that you know you can do these things. + + Developers that use our General Public Licenses protect your rights +with two steps: (1) assert copyright on the software, and (2) offer +you this License which gives you legal permission to copy, distribute +and/or modify the software. + + A secondary benefit of defending all users' freedom is that +improvements made in alternate versions of the program, if they +receive widespread use, become available for other developers to +incorporate. Many developers of free software are heartened and +encouraged by the resulting cooperation. However, in the case of +software used on network servers, this result may fail to come about. +The GNU General Public License permits making a modified version and +letting the public access it on a server without ever releasing its +source code to the public. + + The GNU Affero General Public License is designed specifically to +ensure that, in such cases, the modified source code becomes available +to the community. It requires the operator of a network server to +provide the source code of the modified version running there to the +users of that server. Therefore, public use of a modified version, on +a publicly accessible server, gives the public access to the source +code of the modified version. + + An older license, called the Affero General Public License and +published by Affero, was designed to accomplish similar goals. This is +a different license, not a version of the Affero GPL, but Affero has +released a new version of the Affero GPL which permits relicensing under +this license. + + The precise terms and conditions for copying, distribution and +modification follow. + + TERMS AND CONDITIONS + + 0. Definitions. + + "This License" refers to version 3 of the GNU Affero General Public License. + + "Copyright" also means copyright-like laws that apply to other kinds of +works, such as semiconductor masks. + + "The Program" refers to any copyrightable work licensed under this +License. Each licensee is addressed as "you". "Licensees" and +"recipients" may be individuals or organizations. + + To "modify" a work means to copy from or adapt all or part of the work +in a fashion requiring copyright permission, other than the making of an +exact copy. The resulting work is called a "modified version" of the +earlier work or a work "based on" the earlier work. + + A "covered work" means either the unmodified Program or a work based +on the Program. + + To "propagate" a work means to do anything with it that, without +permission, would make you directly or secondarily liable for +infringement under applicable copyright law, except executing it on a +computer or modifying a private copy. Propagation includes copying, +distribution (with or without modification), making available to the +public, and in some countries other activities as well. + + To "convey" a work means any kind of propagation that enables other +parties to make or receive copies. Mere interaction with a user through +a computer network, with no transfer of a copy, is not conveying. + + An interactive user interface displays "Appropriate Legal Notices" +to the extent that it includes a convenient and prominently visible +feature that (1) displays an appropriate copyright notice, and (2) +tells the user that there is no warranty for the work (except to the +extent that warranties are provided), that licensees may convey the +work under this License, and how to view a copy of this License. If +the interface presents a list of user commands or options, such as a +menu, a prominent item in the list meets this criterion. + + 1. Source Code. + + The "source code" for a work means the preferred form of the work +for making modifications to it. "Object code" means any non-source +form of a work. + + A "Standard Interface" means an interface that either is an official +standard defined by a recognized standards body, or, in the case of +interfaces specified for a particular programming language, one that +is widely used among developers working in that language. + + The "System Libraries" of an executable work include anything, other +than the work as a whole, that (a) is included in the normal form of +packaging a Major Component, but which is not part of that Major +Component, and (b) serves only to enable use of the work with that +Major Component, or to implement a Standard Interface for which an +implementation is available to the public in source code form. A +"Major Component", in this context, means a major essential component +(kernel, window system, and so on) of the specific operating system +(if any) on which the executable work runs, or a compiler used to +produce the work, or an object code interpreter used to run it. + + The "Corresponding Source" for a work in object code form means all +the source code needed to generate, install, and (for an executable +work) run the object code and to modify the work, including scripts to +control those activities. However, it does not include the work's +System Libraries, or general-purpose tools or generally available free +programs which are used unmodified in performing those activities but +which are not part of the work. For example, Corresponding Source +includes interface definition files associated with source files for +the work, and the source code for shared libraries and dynamically +linked subprograms that the work is specifically designed to require, +such as by intimate data communication or control flow between those +subprograms and other parts of the work. + + The Corresponding Source need not include anything that users +can regenerate automatically from other parts of the Corresponding +Source. + + The Corresponding Source for a work in source code form is that +same work. + + 2. Basic Permissions. + + All rights granted under this License are granted for the term of +copyright on the Program, and are irrevocable provided the stated +conditions are met. This License explicitly affirms your unlimited +permission to run the unmodified Program. The output from running a +covered work is covered by this License only if the output, given its +content, constitutes a covered work. This License acknowledges your +rights of fair use or other equivalent, as provided by copyright law. + + You may make, run and propagate covered works that you do not +convey, without conditions so long as your license otherwise remains +in force. You may convey covered works to others for the sole purpose +of having them make modifications exclusively for you, or provide you +with facilities for running those works, provided that you comply with +the terms of this License in conveying all material for which you do +not control copyright. Those thus making or running the covered works +for you must do so exclusively on your behalf, under your direction +and control, on terms that prohibit them from making any copies of +your copyrighted material outside their relationship with you. + + Conveying under any other circumstances is permitted solely under +the conditions stated below. Sublicensing is not allowed; section 10 +makes it unnecessary. + + 3. Protecting Users' Legal Rights From Anti-Circumvention Law. + + No covered work shall be deemed part of an effective technological +measure under any applicable law fulfilling obligations under article +11 of the WIPO copyright treaty adopted on 20 December 1996, or +similar laws prohibiting or restricting circumvention of such +measures. + + When you convey a covered work, you waive any legal power to forbid +circumvention of technological measures to the extent such circumvention +is effected by exercising rights under this License with respect to +the covered work, and you disclaim any intention to limit operation or +modification of the work as a means of enforcing, against the work's +users, your or third parties' legal rights to forbid circumvention of +technological measures. + + 4. Conveying Verbatim Copies. + + You may convey verbatim copies of the Program's source code as you +receive it, in any medium, provided that you conspicuously and +appropriately publish on each copy an appropriate copyright notice; +keep intact all notices stating that this License and any +non-permissive terms added in accord with section 7 apply to the code; +keep intact all notices of the absence of any warranty; and give all +recipients a copy of this License along with the Program. + + You may charge any price or no price for each copy that you convey, +and you may offer support or warranty protection for a fee. + + 5. Conveying Modified Source Versions. + + You may convey a work based on the Program, or the modifications to +produce it from the Program, in the form of source code under the +terms of section 4, provided that you also meet all of these conditions: + + a) The work must carry prominent notices stating that you modified + it, and giving a relevant date. + + b) The work must carry prominent notices stating that it is + released under this License and any conditions added under section + 7. This requirement modifies the requirement in section 4 to + "keep intact all notices". + + c) You must license the entire work, as a whole, under this + License to anyone who comes into possession of a copy. This + License will therefore apply, along with any applicable section 7 + additional terms, to the whole of the work, and all its parts, + regardless of how they are packaged. This License gives no + permission to license the work in any other way, but it does not + invalidate such permission if you have separately received it. + + d) If the work has interactive user interfaces, each must display + Appropriate Legal Notices; however, if the Program has interactive + interfaces that do not display Appropriate Legal Notices, your + work need not make them do so. + + A compilation of a covered work with other separate and independent +works, which are not by their nature extensions of the covered work, +and which are not combined with it such as to form a larger program, +in or on a volume of a storage or distribution medium, is called an +"aggregate" if the compilation and its resulting copyright are not +used to limit the access or legal rights of the compilation's users +beyond what the individual works permit. Inclusion of a covered work +in an aggregate does not cause this License to apply to the other +parts of the aggregate. + + 6. Conveying Non-Source Forms. + + You may convey a covered work in object code form under the terms +of sections 4 and 5, provided that you also convey the +machine-readable Corresponding Source under the terms of this License, +in one of these ways: + + a) Convey the object code in, or embodied in, a physical product + (including a physical distribution medium), accompanied by the + Corresponding Source fixed on a durable physical medium + customarily used for software interchange. + + b) Convey the object code in, or embodied in, a physical product + (including a physical distribution medium), accompanied by a + written offer, valid for at least three years and valid for as + long as you offer spare parts or customer support for that product + model, to give anyone who possesses the object code either (1) a + copy of the Corresponding Source for all the software in the + product that is covered by this License, on a durable physical + medium customarily used for software interchange, for a price no + more than your reasonable cost of physically performing this + conveying of source, or (2) access to copy the + Corresponding Source from a network server at no charge. + + c) Convey individual copies of the object code with a copy of the + written offer to provide the Corresponding Source. This + alternative is allowed only occasionally and noncommercially, and + only if you received the object code with such an offer, in accord + with subsection 6b. + + d) Convey the object code by offering access from a designated + place (gratis or for a charge), and offer equivalent access to the + Corresponding Source in the same way through the same place at no + further charge. You need not require recipients to copy the + Corresponding Source along with the object code. If the place to + copy the object code is a network server, the Corresponding Source + may be on a different server (operated by you or a third party) + that supports equivalent copying facilities, provided you maintain + clear directions next to the object code saying where to find the + Corresponding Source. Regardless of what server hosts the + Corresponding Source, you remain obligated to ensure that it is + available for as long as needed to satisfy these requirements. + + e) Convey the object code using peer-to-peer transmission, provided + you inform other peers where the object code and Corresponding + Source of the work are being offered to the general public at no + charge under subsection 6d. + + A separable portion of the object code, whose source code is excluded +from the Corresponding Source as a System Library, need not be +included in conveying the object code work. + + A "User Product" is either (1) a "consumer product", which means any +tangible personal property which is normally used for personal, family, +or household purposes, or (2) anything designed or sold for incorporation +into a dwelling. In determining whether a product is a consumer product, +doubtful cases shall be resolved in favor of coverage. For a particular +product received by a particular user, "normally used" refers to a +typical or common use of that class of product, regardless of the status +of the particular user or of the way in which the particular user +actually uses, or expects or is expected to use, the product. A product +is a consumer product regardless of whether the product has substantial +commercial, industrial or non-consumer uses, unless such uses represent +the only significant mode of use of the product. + + "Installation Information" for a User Product means any methods, +procedures, authorization keys, or other information required to install +and execute modified versions of a covered work in that User Product from +a modified version of its Corresponding Source. The information must +suffice to ensure that the continued functioning of the modified object +code is in no case prevented or interfered with solely because +modification has been made. + + If you convey an object code work under this section in, or with, or +specifically for use in, a User Product, and the conveying occurs as +part of a transaction in which the right of possession and use of the +User Product is transferred to the recipient in perpetuity or for a +fixed term (regardless of how the transaction is characterized), the +Corresponding Source conveyed under this section must be accompanied +by the Installation Information. But this requirement does not apply +if neither you nor any third party retains the ability to install +modified object code on the User Product (for example, the work has +been installed in ROM). + + The requirement to provide Installation Information does not include a +requirement to continue to provide support service, warranty, or updates +for a work that has been modified or installed by the recipient, or for +the User Product in which it has been modified or installed. Access to a +network may be denied when the modification itself materially and +adversely affects the operation of the network or violates the rules and +protocols for communication across the network. + + Corresponding Source conveyed, and Installation Information provided, +in accord with this section must be in a format that is publicly +documented (and with an implementation available to the public in +source code form), and must require no special password or key for +unpacking, reading or copying. + + 7. Additional Terms. + + "Additional permissions" are terms that supplement the terms of this +License by making exceptions from one or more of its conditions. +Additional permissions that are applicable to the entire Program shall +be treated as though they were included in this License, to the extent +that they are valid under applicable law. If additional permissions +apply only to part of the Program, that part may be used separately +under those permissions, but the entire Program remains governed by +this License without regard to the additional permissions. + + When you convey a copy of a covered work, you may at your option +remove any additional permissions from that copy, or from any part of +it. (Additional permissions may be written to require their own +removal in certain cases when you modify the work.) You may place +additional permissions on material, added by you to a covered work, +for which you have or can give appropriate copyright permission. + + Notwithstanding any other provision of this License, for material you +add to a covered work, you may (if authorized by the copyright holders of +that material) supplement the terms of this License with terms: + + a) Disclaiming warranty or limiting liability differently from the + terms of sections 15 and 16 of this License; or + + b) Requiring preservation of specified reasonable legal notices or + author attributions in that material or in the Appropriate Legal + Notices displayed by works containing it; or + + c) Prohibiting misrepresentation of the origin of that material, or + requiring that modified versions of such material be marked in + reasonable ways as different from the original version; or + + d) Limiting the use for publicity purposes of names of licensors or + authors of the material; or + + e) Declining to grant rights under trademark law for use of some + trade names, trademarks, or service marks; or + + f) Requiring indemnification of licensors and authors of that + material by anyone who conveys the material (or modified versions of + it) with contractual assumptions of liability to the recipient, for + any liability that these contractual assumptions directly impose on + those licensors and authors. + + All other non-permissive additional terms are considered "further +restrictions" within the meaning of section 10. If the Program as you +received it, or any part of it, contains a notice stating that it is +governed by this License along with a term that is a further +restriction, you may remove that term. If a license document contains +a further restriction but permits relicensing or conveying under this +License, you may add to a covered work material governed by the terms +of that license document, provided that the further restriction does +not survive such relicensing or conveying. + + If you add terms to a covered work in accord with this section, you +must place, in the relevant source files, a statement of the +additional terms that apply to those files, or a notice indicating +where to find the applicable terms. + + Additional terms, permissive or non-permissive, may be stated in the +form of a separately written license, or stated as exceptions; +the above requirements apply either way. + + 8. Termination. + + You may not propagate or modify a covered work except as expressly +provided under this License. Any attempt otherwise to propagate or +modify it is void, and will automatically terminate your rights under +this License (including any patent licenses granted under the third +paragraph of section 11). + + However, if you cease all violation of this License, then your +license from a particular copyright holder is reinstated (a) +provisionally, unless and until the copyright holder explicitly and +finally terminates your license, and (b) permanently, if the copyright +holder fails to notify you of the violation by some reasonable means +prior to 60 days after the cessation. + + Moreover, your license from a particular copyright holder is +reinstated permanently if the copyright holder notifies you of the +violation by some reasonable means, this is the first time you have +received notice of violation of this License (for any work) from that +copyright holder, and you cure the violation prior to 30 days after +your receipt of the notice. + + Termination of your rights under this section does not terminate the +licenses of parties who have received copies or rights from you under +this License. If your rights have been terminated and not permanently +reinstated, you do not qualify to receive new licenses for the same +material under section 10. + + 9. Acceptance Not Required for Having Copies. + + You are not required to accept this License in order to receive or +run a copy of the Program. Ancillary propagation of a covered work +occurring solely as a consequence of using peer-to-peer transmission +to receive a copy likewise does not require acceptance. However, +nothing other than this License grants you permission to propagate or +modify any covered work. These actions infringe copyright if you do +not accept this License. Therefore, by modifying or propagating a +covered work, you indicate your acceptance of this License to do so. + + 10. Automatic Licensing of Downstream Recipients. + + Each time you convey a covered work, the recipient automatically +receives a license from the original licensors, to run, modify and +propagate that work, subject to this License. You are not responsible +for enforcing compliance by third parties with this License. + + An "entity transaction" is a transaction transferring control of an +organization, or substantially all assets of one, or subdividing an +organization, or merging organizations. If propagation of a covered +work results from an entity transaction, each party to that +transaction who receives a copy of the work also receives whatever +licenses to the work the party's predecessor in interest had or could +give under the previous paragraph, plus a right to possession of the +Corresponding Source of the work from the predecessor in interest, if +the predecessor has it or can get it with reasonable efforts. + + You may not impose any further restrictions on the exercise of the +rights granted or affirmed under this License. For example, you may +not impose a license fee, royalty, or other charge for exercise of +rights granted under this License, and you may not initiate litigation +(including a cross-claim or counterclaim in a lawsuit) alleging that +any patent claim is infringed by making, using, selling, offering for +sale, or importing the Program or any portion of it. + + 11. Patents. + + A "contributor" is a copyright holder who authorizes use under this +License of the Program or a work on which the Program is based. The +work thus licensed is called the contributor's "contributor version". + + A contributor's "essential patent claims" are all patent claims +owned or controlled by the contributor, whether already acquired or +hereafter acquired, that would be infringed by some manner, permitted +by this License, of making, using, or selling its contributor version, +but do not include claims that would be infringed only as a +consequence of further modification of the contributor version. For +purposes of this definition, "control" includes the right to grant +patent sublicenses in a manner consistent with the requirements of +this License. + + Each contributor grants you a non-exclusive, worldwide, royalty-free +patent license under the contributor's essential patent claims, to +make, use, sell, offer for sale, import and otherwise run, modify and +propagate the contents of its contributor version. + + In the following three paragraphs, a "patent license" is any express +agreement or commitment, however denominated, not to enforce a patent +(such as an express permission to practice a patent or covenant not to +sue for patent infringement). To "grant" such a patent license to a +party means to make such an agreement or commitment not to enforce a +patent against the party. + + If you convey a covered work, knowingly relying on a patent license, +and the Corresponding Source of the work is not available for anyone +to copy, free of charge and under the terms of this License, through a +publicly available network server or other readily accessible means, +then you must either (1) cause the Corresponding Source to be so +available, or (2) arrange to deprive yourself of the benefit of the +patent license for this particular work, or (3) arrange, in a manner +consistent with the requirements of this License, to extend the patent +license to downstream recipients. "Knowingly relying" means you have +actual knowledge that, but for the patent license, your conveying the +covered work in a country, or your recipient's use of the covered work +in a country, would infringe one or more identifiable patents in that +country that you have reason to believe are valid. + + If, pursuant to or in connection with a single transaction or +arrangement, you convey, or propagate by procuring conveyance of, a +covered work, and grant a patent license to some of the parties +receiving the covered work authorizing them to use, propagate, modify +or convey a specific copy of the covered work, then the patent license +you grant is automatically extended to all recipients of the covered +work and works based on it. + + A patent license is "discriminatory" if it does not include within +the scope of its coverage, prohibits the exercise of, or is +conditioned on the non-exercise of one or more of the rights that are +specifically granted under this License. You may not convey a covered +work if you are a party to an arrangement with a third party that is +in the business of distributing software, under which you make payment +to the third party based on the extent of your activity of conveying +the work, and under which the third party grants, to any of the +parties who would receive the covered work from you, a discriminatory +patent license (a) in connection with copies of the covered work +conveyed by you (or copies made from those copies), or (b) primarily +for and in connection with specific products or compilations that +contain the covered work, unless you entered into that arrangement, +or that patent license was granted, prior to 28 March 2007. + + Nothing in this License shall be construed as excluding or limiting +any implied license or other defenses to infringement that may +otherwise be available to you under applicable patent law. + + 12. No Surrender of Others' Freedom. + + If conditions are imposed on you (whether by court order, agreement or +otherwise) that contradict the conditions of this License, they do not +excuse you from the conditions of this License. If you cannot convey a +covered work so as to satisfy simultaneously your obligations under this +License and any other pertinent obligations, then as a consequence you may +not convey it at all. For example, if you agree to terms that obligate you +to collect a royalty for further conveying from those to whom you convey +the Program, the only way you could satisfy both those terms and this +License would be to refrain entirely from conveying the Program. + + 13. Remote Network Interaction; Use with the GNU General Public License. + + Notwithstanding any other provision of this License, if you modify the +Program, your modified version must prominently offer all users +interacting with it remotely through a computer network (if your version +supports such interaction) an opportunity to receive the Corresponding +Source of your version by providing access to the Corresponding Source +from a network server at no charge, through some standard or customary +means of facilitating copying of software. This Corresponding Source +shall include the Corresponding Source for any work covered by version 3 +of the GNU General Public License that is incorporated pursuant to the +following paragraph. + + Notwithstanding any other provision of this License, you have +permission to link or combine any covered work with a work licensed +under version 3 of the GNU General Public License into a single +combined work, and to convey the resulting work. The terms of this +License will continue to apply to the part which is the covered work, +but the work with which it is combined will remain governed by version +3 of the GNU General Public License. + + 14. Revised Versions of this License. + + The Free Software Foundation may publish revised and/or new versions of +the GNU Affero General Public License from time to time. Such new versions +will be similar in spirit to the present version, but may differ in detail to +address new problems or concerns. + + Each version is given a distinguishing version number. If the +Program specifies that a certain numbered version of the GNU Affero General +Public License "or any later version" applies to it, you have the +option of following the terms and conditions either of that numbered +version or of any later version published by the Free Software +Foundation. If the Program does not specify a version number of the +GNU Affero General Public License, you may choose any version ever published +by the Free Software Foundation. + + If the Program specifies that a proxy can decide which future +versions of the GNU Affero General Public License can be used, that proxy's +public statement of acceptance of a version permanently authorizes you +to choose that version for the Program. + + Later license versions may give you additional or different +permissions. However, no additional obligations are imposed on any +author or copyright holder as a result of your choosing to follow a +later version. + + 15. Disclaimer of Warranty. + + THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY +APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT +HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY +OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, +THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR +PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM +IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF +ALL NECESSARY SERVICING, REPAIR OR CORRECTION. + + 16. Limitation of Liability. + + IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING +WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS +THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY +GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE +USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF +DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD +PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), +EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF +SUCH DAMAGES. + + 17. Interpretation of Sections 15 and 16. + + If the disclaimer of warranty and limitation of liability provided +above cannot be given local legal effect according to their terms, +reviewing courts shall apply local law that most closely approximates +an absolute waiver of all civil liability in connection with the +Program, unless a warranty or assumption of liability accompanies a +copy of the Program in return for a fee. + + END OF TERMS AND CONDITIONS + + How to Apply These Terms to Your New Programs + + If you develop a new program, and you want it to be of the greatest +possible use to the public, the best way to achieve this is to make it +free software which everyone can redistribute and change under these terms. + + To do so, attach the following notices to the program. It is safest +to attach them to the start of each source file to most effectively +state the exclusion of warranty; and each file should have at least +the "copyright" line and a pointer to where the full notice is found. + + + Copyright (C) + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU Affero General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU Affero General Public License for more details. + + You should have received a copy of the GNU Affero General Public License + along with this program. If not, see . + +Also add information on how to contact you by electronic and paper mail. + + If your software can interact with users remotely through a computer +network, you should also make sure that it provides a way for users to +get its source. For example, if your program is a web application, its +interface could display a "Source" link that leads users to an archive +of the code. There are many ways you could offer source, and different +solutions will be better for different programs; see section 13 for the +specific requirements. + + You should also get your employer (if you work as a programmer) or school, +if any, to sign a "copyright disclaimer" for the program, if necessary. +For more information on this, and how to apply and follow the GNU AGPL, see +. diff --git a/Makefile b/Makefile index 4aaf80e..0793489 100644 --- a/Makefile +++ b/Makefile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + TERRAFORM_ENV := production config_dir := ./config/ diff --git a/all-apps/Makefile b/all-apps/Makefile index 85ca201..056ec08 100644 --- a/all-apps/Makefile +++ b/all-apps/Makefile @@ -1,2 +1,18 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + run: sudo docker-compose -f docker-compose.yaml $(find . -mindepth 2 -maxdepth 2 -type f -name docker-compose.yaml -exec echo -f {} \;) up diff --git a/all-apps/app.service b/all-apps/app.service index fd4a850..a2549b8 100644 --- a/all-apps/app.service +++ b/all-apps/app.service @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + [Unit] Description=Main App After=restic-restore.service diff --git a/all-apps/authelia/4/Caddyfile b/all-apps/authelia/4/Caddyfile index af89d41..7965d23 100644 --- a/all-apps/authelia/4/Caddyfile +++ b/all-apps/authelia/4/Caddyfile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + {$authelia_SUBDOMAIN}.{$ROOT_DOMAIN} { import maintenance_intercept diff --git a/all-apps/authelia/4/Makefile b/all-apps/authelia/4/Makefile index 19a868e..6faac37 100644 --- a/all-apps/authelia/4/Makefile +++ b/all-apps/authelia/4/Makefile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + IMAGE_DEPS := $(IMAGE_DEPS) \ app/authelia/postgres_db \ app/authelia/postgres_user \ diff --git a/all-apps/authelia/4/authelia-config/configuration.yml.tmpl b/all-apps/authelia/4/authelia-config/configuration.yml.tmpl index 2ff999b..80cb9fe 100644 --- a/all-apps/authelia/4/authelia-config/configuration.yml.tmpl +++ b/all-apps/authelia/4/authelia-config/configuration.yml.tmpl @@ -1,4 +1,19 @@ --- +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . ############################################################### # Authelia configuration # ############################################################### diff --git a/all-apps/authelia/4/docker-compose.yaml b/all-apps/authelia/4/docker-compose.yaml index 5cc36ab..e3b93fd 100644 --- a/all-apps/authelia/4/docker-compose.yaml +++ b/all-apps/authelia/4/docker-compose.yaml @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + secrets: authelia_postgres_db: file: ./authelia/postgres_db diff --git a/all-apps/authelia/4/make-authelia-config.sh b/all-apps/authelia/4/make-authelia-config.sh index 49af443..b535878 100755 --- a/all-apps/authelia/4/make-authelia-config.sh +++ b/all-apps/authelia/4/make-authelia-config.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e set -a # export everything in the config for later use by envsubst diff --git a/all-apps/dozzle/20/Caddyfile b/all-apps/dozzle/20/Caddyfile index 98f7294..a14c0db 100644 --- a/all-apps/dozzle/20/Caddyfile +++ b/all-apps/dozzle/20/Caddyfile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + {$dozzle_SUBDOMAIN}.{$ROOT_DOMAIN} { forward_auth authelia:9091 { uri /api/authz/forward-auth diff --git a/all-apps/dozzle/20/docker-compose.yaml b/all-apps/dozzle/20/docker-compose.yaml index c277692..08d6553 100644 --- a/all-apps/dozzle/20/docker-compose.yaml +++ b/all-apps/dozzle/20/docker-compose.yaml @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + services: dozzle: container_name: dozzle diff --git a/all-apps/ghost/6/Caddyfile b/all-apps/ghost/6/Caddyfile index efc6f43..10b86b4 100644 --- a/all-apps/ghost/6/Caddyfile +++ b/all-apps/ghost/6/Caddyfile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + {$ghost_SUBDOMAIN}.{$ROOT_DOMAIN} { import maintenance_intercept reverse_proxy http://ghost:2368 diff --git a/all-apps/ghost/6/Makefile b/all-apps/ghost/6/Makefile index 96e20b6..5d99066 100644 --- a/all-apps/ghost/6/Makefile +++ b/all-apps/ghost/6/Makefile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + IMAGE_DEPS := $(IMAGE_DEPS) \ app/ghost/.compose-env diff --git a/all-apps/ghost/6/make-ghost-env.sh b/all-apps/ghost/6/make-ghost-env.sh index cbc91f4..21f7da4 100755 --- a/all-apps/ghost/6/make-ghost-env.sh +++ b/all-apps/ghost/6/make-ghost-env.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e . $1 # source the apps.config file with then env vars diff --git a/all-apps/instance-control/b0.0.1/Caddyfile b/all-apps/instance-control/b0.0.1/Caddyfile index e3c3369..9239d0c 100644 --- a/all-apps/instance-control/b0.0.1/Caddyfile +++ b/all-apps/instance-control/b0.0.1/Caddyfile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + {$instance_control_SUBDOMAIN}.{$ROOT_DOMAIN} { reverse_proxy http://instance_control:9000 } diff --git a/all-apps/instance-control/b0.0.1/Makefile b/all-apps/instance-control/b0.0.1/Makefile index 7698e30..5b40c09 100644 --- a/all-apps/instance-control/b0.0.1/Makefile +++ b/all-apps/instance-control/b0.0.1/Makefile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + IMAGE_DEPS := $(IMAGE_DEPS) \ app/instance-control/webhook_secret \ app/instance-control/hooks/hooks.json diff --git a/all-apps/instance-control/b0.0.1/docker-compose.yaml b/all-apps/instance-control/b0.0.1/docker-compose.yaml index 10d670f..b00af82 100644 --- a/all-apps/instance-control/b0.0.1/docker-compose.yaml +++ b/all-apps/instance-control/b0.0.1/docker-compose.yaml @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + version: '3' secrets: diff --git a/all-apps/instance-control/b0.0.1/hooks/queue-restic-snapshot-no-restart.sh b/all-apps/instance-control/b0.0.1/hooks/queue-restic-snapshot-no-restart.sh index 9391119..d316c25 100755 --- a/all-apps/instance-control/b0.0.1/hooks/queue-restic-snapshot-no-restart.sh +++ b/all-apps/instance-control/b0.0.1/hooks/queue-restic-snapshot-no-restart.sh @@ -1,5 +1,21 @@ #!/bin/sh +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + # TODO the systemd unit should actually do this # touch /maintenance/maintenance.on # rm /maintenance/maintenance.on diff --git a/all-apps/instance-control/b0.0.1/hooks/queue-restic-snapshot.sh b/all-apps/instance-control/b0.0.1/hooks/queue-restic-snapshot.sh index 9409ecc..368f462 100755 --- a/all-apps/instance-control/b0.0.1/hooks/queue-restic-snapshot.sh +++ b/all-apps/instance-control/b0.0.1/hooks/queue-restic-snapshot.sh @@ -1,5 +1,21 @@ #!/bin/sh +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + # TODO the systemd unit should actually do this # touch /maintenance/maintenance.on # rm /maintenance/maintenance.on diff --git a/all-apps/instance-control/b0.0.1/hooks/restic-snapshot-status.sh b/all-apps/instance-control/b0.0.1/hooks/restic-snapshot-status.sh index b74b017..fa820b9 100755 --- a/all-apps/instance-control/b0.0.1/hooks/restic-snapshot-status.sh +++ b/all-apps/instance-control/b0.0.1/hooks/restic-snapshot-status.sh @@ -1,5 +1,21 @@ #!/bin/sh +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e # TODO read 'version' arg from request and make sure it diff --git a/all-apps/instance-control/b0.0.1/make-instance-control-config.sh b/all-apps/instance-control/b0.0.1/make-instance-control-config.sh index e069b4f..f0bf290 100755 --- a/all-apps/instance-control/b0.0.1/make-instance-control-config.sh +++ b/all-apps/instance-control/b0.0.1/make-instance-control-config.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e set -a # export everything in the config for later use by envsubst diff --git a/all-apps/lldap/0.6.3/Caddyfile b/all-apps/lldap/0.6.3/Caddyfile index 40ddf9b..598b0dd 100644 --- a/all-apps/lldap/0.6.3/Caddyfile +++ b/all-apps/lldap/0.6.3/Caddyfile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + {$lldap_SUBDOMAIN}.{$ROOT_DOMAIN} { import maintenance_intercept reverse_proxy http://lldap:17170 diff --git a/all-apps/lldap/0.6.3/Makefile b/all-apps/lldap/0.6.3/Makefile index 02247b9..ae8e72c 100644 --- a/all-apps/lldap/0.6.3/Makefile +++ b/all-apps/lldap/0.6.3/Makefile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + IMAGE_DEPS := $(IMAGE_DEPS) \ app/lldap/postgres_db \ app/lldap/postgres_user \ diff --git a/all-apps/lldap/0.6.3/docker-compose.yaml b/all-apps/lldap/0.6.3/docker-compose.yaml index cd760f4..4500a04 100644 --- a/all-apps/lldap/0.6.3/docker-compose.yaml +++ b/all-apps/lldap/0.6.3/docker-compose.yaml @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + secrets: lldap_postgres_db: file: ./lldap/postgres_db diff --git a/all-apps/lldap/0.6.3/make-lldap-config.sh b/all-apps/lldap/0.6.3/make-lldap-config.sh index 2228e34..5ff443f 100755 --- a/all-apps/lldap/0.6.3/make-lldap-config.sh +++ b/all-apps/lldap/0.6.3/make-lldap-config.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e set -a # export everything in the config for later use by envsubst diff --git a/all-apps/nassella/b0.0.1/Caddyfile b/all-apps/nassella/b0.0.1/Caddyfile index 55d5732..77236fd 100644 --- a/all-apps/nassella/b0.0.1/Caddyfile +++ b/all-apps/nassella/b0.0.1/Caddyfile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + {$nassella_SUBDOMAIN}.{$ROOT_DOMAIN} { import maintenance_intercept diff --git a/all-apps/nassella/b0.0.1/Makefile b/all-apps/nassella/b0.0.1/Makefile index 3108f04..90d5776 100644 --- a/all-apps/nassella/b0.0.1/Makefile +++ b/all-apps/nassella/b0.0.1/Makefile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + IMAGE_DEPS := $(IMAGE_DEPS) \ app/nassella/postgres_db \ app/nassella/postgres_user \ diff --git a/all-apps/nassella/b0.0.1/docker-compose.yaml b/all-apps/nassella/b0.0.1/docker-compose.yaml index 51b1476..5988a81 100644 --- a/all-apps/nassella/b0.0.1/docker-compose.yaml +++ b/all-apps/nassella/b0.0.1/docker-compose.yaml @@ -1,4 +1,18 @@ -version: '3' +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . secrets: nassella_postgres_db: diff --git a/all-apps/nassella/b0.0.1/make-nassella-authelia-config.sh b/all-apps/nassella/b0.0.1/make-nassella-authelia-config.sh index 009bf50..8f274cb 100755 --- a/all-apps/nassella/b0.0.1/make-nassella-authelia-config.sh +++ b/all-apps/nassella/b0.0.1/make-nassella-authelia-config.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e set -a # export everything in the config for later use by envsubst diff --git a/all-apps/nassella/b0.0.1/make-nassella-lldap-config.sh b/all-apps/nassella/b0.0.1/make-nassella-lldap-config.sh index ac77a7a..d827f0c 100755 --- a/all-apps/nassella/b0.0.1/make-nassella-lldap-config.sh +++ b/all-apps/nassella/b0.0.1/make-nassella-lldap-config.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e set -a # export everything in the config for later use by envsubst diff --git a/all-apps/nextcloud/34/Caddyfile b/all-apps/nextcloud/34/Caddyfile index 88039f6..2193ae6 100644 --- a/all-apps/nextcloud/34/Caddyfile +++ b/all-apps/nextcloud/34/Caddyfile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + {$nextcloud_SUBDOMAIN}.{$ROOT_DOMAIN} { import maintenance_intercept reverse_proxy http://nextcloud:80 diff --git a/all-apps/nextcloud/34/Makefile b/all-apps/nextcloud/34/Makefile index 4891056..0a44143 100644 --- a/all-apps/nextcloud/34/Makefile +++ b/all-apps/nextcloud/34/Makefile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + IMAGE_DEPS := $(IMAGE_DEPS) \ app/nextcloud/nextcloud_admin_user \ app/nextcloud/nextcloud_admin_password \ diff --git a/all-apps/nextcloud/34/docker-compose.yaml b/all-apps/nextcloud/34/docker-compose.yaml index ecb5155..cb63a64 100644 --- a/all-apps/nextcloud/34/docker-compose.yaml +++ b/all-apps/nextcloud/34/docker-compose.yaml @@ -1,4 +1,18 @@ -version: '3' +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . secrets: nextcloud_postgres_db: diff --git a/all-apps/nextcloud/34/make-nextcloud-env.sh b/all-apps/nextcloud/34/make-nextcloud-env.sh index df41e6a..d726ad4 100755 --- a/all-apps/nextcloud/34/make-nextcloud-env.sh +++ b/all-apps/nextcloud/34/make-nextcloud-env.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e . $1 # source the apps.config file with then env vars diff --git a/all-apps/restic-snapshot.service b/all-apps/restic-snapshot.service index 0ce3069..033248b 100644 --- a/all-apps/restic-snapshot.service +++ b/all-apps/restic-snapshot.service @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + [Unit] Description=Restic Snapshotter After=app.service diff --git a/all-apps/wg-easy/15/Caddyfile b/all-apps/wg-easy/15/Caddyfile index 71f87ee..55a760c 100644 --- a/all-apps/wg-easy/15/Caddyfile +++ b/all-apps/wg-easy/15/Caddyfile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + {$wg_easy_SUBDOMAIN}.{$ROOT_DOMAIN} { reverse_proxy http://wg-easy:80 } diff --git a/all-apps/wordpress/8.4/Caddyfile b/all-apps/wordpress/8.4/Caddyfile index 5eed37e..2918eab 100644 --- a/all-apps/wordpress/8.4/Caddyfile +++ b/all-apps/wordpress/8.4/Caddyfile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + {$wordpress_SUBDOMAIN}.{$ROOT_DOMAIN} { reverse_proxy http://wordpress_caddy:80 } diff --git a/all-apps/wordpress/8.4/Caddyfile-internal b/all-apps/wordpress/8.4/Caddyfile-internal index a50add2..342548c 100644 --- a/all-apps/wordpress/8.4/Caddyfile-internal +++ b/all-apps/wordpress/8.4/Caddyfile-internal @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + :80 { root * /var/www/html diff --git a/all-apps/wordpress/8.4/Makefile b/all-apps/wordpress/8.4/Makefile index 90b5e9b..d1e2fbc 100644 --- a/all-apps/wordpress/8.4/Makefile +++ b/all-apps/wordpress/8.4/Makefile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + IMAGE_DEPS := $(IMAGE_DEPS) \ app/wordpress/wordpress_db_password \ app/wordpress/wordpress_db_root_password diff --git a/all-apps/wordpress/8.4/init.sh b/all-apps/wordpress/8.4/init.sh index c2c95b1..b9c78c0 100644 --- a/all-apps/wordpress/8.4/init.sh +++ b/all-apps/wordpress/8.4/init.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e echo "Waiting for db..." diff --git a/cl.yaml b/cl.yaml index 9335f3e..50dfcea 100644 --- a/cl.yaml +++ b/cl.yaml @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + variant: flatcar version: 1.1.0 passwd: diff --git a/copy-apps.sh b/copy-apps.sh index 34db34a..1b28502 100755 --- a/copy-apps.sh +++ b/copy-apps.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + # this script copys over the docker configs # for in-use apps diff --git a/init-restic.sh b/init-restic.sh index 418f974..371d1ca 100755 --- a/init-restic.sh +++ b/init-restic.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + . $1 # source the apps.config file with the env vars # if we are on a dev machine try to use docker diff --git a/make-caddyfile-env.sh b/make-caddyfile-env.sh index 1c34864..e9ad0f9 100755 --- a/make-caddyfile-env.sh +++ b/make-caddyfile-env.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + # this script generates the load-balancer # config for the Caddy server. diff --git a/make-generated.sh b/make-generated.sh index d08b050..33d8e67 100755 --- a/make-generated.sh +++ b/make-generated.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + # this script generates the shared values for the # terraform config (domain & subdomain variables) diff --git a/make-restic-generated.sh b/make-restic-generated.sh index 2de8212..4084a0c 100755 --- a/make-restic-generated.sh +++ b/make-restic-generated.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e . $1 # source the apps.config file with then env vars diff --git a/make-restic-password.sh b/make-restic-password.sh index 917dc61..08dfc90 100755 --- a/make-restic-password.sh +++ b/make-restic-password.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e . $1 # source the apps.config file with then env vars diff --git a/make-top-level-docker-compose.sh b/make-top-level-docker-compose.sh index 87ccd45..fad1a60 100755 --- a/make-top-level-docker-compose.sh +++ b/make-top-level-docker-compose.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e . $1 # source the apps.config file with then env vars diff --git a/restic-restore.sh b/restic-restore.sh index 227bce9..49347e7 100644 --- a/restic-restore.sh +++ b/restic-restore.sh @@ -1,4 +1,21 @@ #!/bin/bash + +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + MARKER=/var/lib/firstboot.done if [ ! -f "$MARKER" ] && [ -n "$RESTIC_SNAPSHOT_ID" ]; then diff --git a/restic-snapshot.sh b/restic-snapshot.sh index 3b4fc70..8b14662 100644 --- a/restic-snapshot.sh +++ b/restic-snapshot.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + # curl -X POST -H "Content-Type: application/json" -d '{"path":"/","tag":"test3","request_id":"1","version":0}' http://127.0.0.1:9000/hooks/queue-restic-snapshot pipe="/tmp/restic/snapshot_trigger_pipe" diff --git a/restic-snapshots.sh b/restic-snapshots.sh index 9c256aa..5b9dad1 100755 --- a/restic-snapshots.sh +++ b/restic-snapshots.sh @@ -1,5 +1,21 @@ #!/bin/bash +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + set -e . $1 # source the apps.config file with then env vars diff --git a/src/Makefile b/src/Makefile index 2d00f3d..88e49bc 100644 --- a/src/Makefile +++ b/src/Makefile @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + dockerall: docker buildx build --platform linux/amd64,linux/arm64 -t nassella/b0.0.1 . diff --git a/src/compose.yaml b/src/compose.yaml index 2fc3ad0..2676b03 100644 --- a/src/compose.yaml +++ b/src/compose.yaml @@ -1,3 +1,19 @@ +# Copyright 2025-2026 Thomas Hintz + +# This file is part of Nassella. + +# Nassella is free software: you can redistribute it and/or modify it under the +# terms of the GNU Affero General Public License as published by the Free +# Software Foundation, either version 3 of the License, or (at your option) any +# later version. + +# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +# You should have received a copy of the GNU Affero General Public License +# along with Nassella. If not, see . + services: db: image: postgres diff --git a/src/db-clean.sql b/src/db-clean.sql index 1daa123..cf5734d 100644 --- a/src/db-clean.sql +++ b/src/db-clean.sql @@ -1,3 +1,19 @@ +-- Copyright 2025-2026 Thomas Hintz + +-- This file is part of Nassella. + +-- Nassella is free software: you can redistribute it and/or modify it under the +-- terms of the GNU Affero General Public License as published by the Free +-- Software Foundation, either version 3 of the License, or (at your option) any +-- later version. + +-- Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +-- WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +-- FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +-- You should have received a copy of the GNU Affero General Public License +-- along with Nassella. If not, see . + drop index user_terraform_state_user_id_instance_id_idx; drop table user_terraform_state; diff --git a/src/db-init.sql b/src/db-init.sql index faddf73..5f23a4b 100644 --- a/src/db-init.sql +++ b/src/db-init.sql @@ -1,3 +1,19 @@ +-- Copyright 2025-2026 Thomas Hintz + +-- This file is part of Nassella. + +-- Nassella is free software: you can redistribute it and/or modify it under the +-- terms of the GNU Affero General Public License as published by the Free +-- Software Foundation, either version 3 of the License, or (at your option) any +-- later version. + +-- Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +-- WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +-- FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +-- You should have received a copy of the GNU Affero General Public License +-- along with Nassella. If not, see . + create table users( user_id bigserial primary key, email varchar(255) not null, diff --git a/src/db.scm b/src/db.scm index ec6df3d..fac779c 100644 --- a/src/db.scm +++ b/src/db.scm @@ -1,5 +1,21 @@ +;; Copyright 2025-2026 Thomas Hintz + +;; This file is part of Nassella. + +;; Nassella is free software: you can redistribute it and/or modify it under the +;; terms of the GNU Affero General Public License as published by the Free +;; Software Foundation, either version 3 of the License, or (at your option) any +;; later version. + +;; Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +;; WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +;; FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +;; You should have received a copy of the GNU Affero General Public License +;; along with Nassella. If not, see . + (module nassella-db - (;; parameters + ( ;; parameters connection-spec ;;functions @@ -26,727 +42,727 @@ get-dashboard ) -(import scheme - (chicken base) - (chicken blob) - (chicken file) - (chicken string) - (chicken port) - (chicken io) - (chicken sort) - postgresql - sql-null - srfi-1 - srfi-13 - (openssl cipher) - (openssl random) - crypto-tools - spiffy) + (import scheme + (chicken base) + (chicken blob) + (chicken file) + (chicken string) + (chicken port) + (chicken io) + (chicken sort) + postgresql + sql-null + srfi-1 + srfi-13 + (openssl cipher) + (openssl random) + crypto-tools + spiffy) -(define connection-spec - (make-parameter - (cond-expand - (dev - '((dbname . "nassella") (user . "nassella") (password . "password") - (host . "127.0.0.1"))) - (else - (let ((pw (string-trim-right (with-input-from-file "/run/secrets/nassella_postgres_password" read-string)))) ;; remove newline - `((dbname . "nassella") (user . "nassella") (password . ,pw) - (host . "nassella_db"))))))) + (define connection-spec + (make-parameter + (cond-expand + (dev + '((dbname . "nassella") (user . "nassella") (password . "password") + (host . "127.0.0.1"))) + (else + (let ((pw (string-trim-right (with-input-from-file "/run/secrets/nassella_postgres_password" read-string)))) ;; remove newline + `((dbname . "nassella") (user . "nassella") (password . ,pw) + (host . "nassella_db"))))))) -(define db-connection (make-parameter #f)) + (define db-connection (make-parameter #f)) -(define (with-db proc) - (if (db-connection) - (begin (db-connection) - (proc (db-connection))) - (let ((conn #f)) - (dynamic-wind - (lambda () - (set! conn (connect (connection-spec)))) - (lambda () (proc conn)) - (lambda () - (when (and (connection? conn) (connected? conn)) - (disconnect conn))))))) + (define (with-db proc) + (if (db-connection) + (begin (db-connection) + (proc (db-connection))) + (let ((conn #f)) + (dynamic-wind + (lambda () + (set! conn (connect (connection-spec)))) + (lambda () (proc conn)) + (lambda () + (when (and (connection? conn) (connected? conn)) + (disconnect conn))))))) -(define (with-db/transaction proc) - (with-db - (lambda (conn) - (with-transaction conn - (lambda () (proc conn)))))) + (define (with-db/transaction proc) + (with-db + (lambda (conn) + (with-transaction conn + (lambda () (proc conn)))))) -;; (with-db (lambda (db) (row-values (query db "select * from users;")))) + ;; (with-db (lambda (db) (row-values (query db "select * from users;")))) -(define aes-256-gcm (cipher-by-name "aes-256-gcm")) -(define tag-length 16) + (define aes-256-gcm (cipher-by-name "aes-256-gcm")) + (define tag-length 16) -(define (generate-param accessor) - (random-bytes (accessor aes-256-gcm))) + (define (generate-param accessor) + (random-bytes (accessor aes-256-gcm))) -(define (generate-key) (generate-param cipher-key-length)) -(define (generate-iv) (generate-param cipher-iv-length)) + (define (generate-key) (generate-param cipher-key-length)) + (define (generate-iv) (generate-param cipher-iv-length)) -(define (encrypt message key iv #!optional auth-data) - (string-encrypt-and-digest aes-256-gcm message key iv - tag-length: tag-length - auth-data: auth-data)) + (define (encrypt message key iv #!optional auth-data) + (string-encrypt-and-digest aes-256-gcm message key iv + tag-length: tag-length + auth-data: auth-data)) -(define (decrypt message tag key iv #!optional auth-data) - (string-decrypt-and-verify aes-256-gcm message tag key iv - auth-data: auth-data)) + (define (decrypt message tag key iv #!optional auth-data) + (string-decrypt-and-verify aes-256-gcm message tag key iv + auth-data: auth-data)) -(define *root-key-file* "root-key") -(define (generate-root-key) (generate-key)) -(define (save-root-key) - (with-output-to-file *root-key-file* (lambda () (write (blob->hexstring/uppercase (generate-root-key)))))) -(define (load-root-key) - (hexstring->blob (with-input-from-file *root-key-file* read))) + (define *root-key-file* "root-key") + (define (generate-root-key) (generate-key)) + (define (save-root-key) + (with-output-to-file *root-key-file* (lambda () (write (blob->hexstring/uppercase (generate-root-key)))))) + (define (load-root-key) + (hexstring->blob (with-input-from-file *root-key-file* read))) -(define *root-key-iv* (hexstring->blob "1EBBCF6B50C68593C559EF93")) -(define (ensure-root-key) - (when (not (file-exists? *root-key-file*)) - (save-root-key)) - (load-root-key)) -(define *root-key-key* (ensure-root-key)) + (define *root-key-iv* (hexstring->blob "1EBBCF6B50C68593C559EF93")) + (define (ensure-root-key) + (when (not (file-exists? *root-key-file*)) + (save-root-key)) + (load-root-key)) + (define *root-key-key* (ensure-root-key)) -(define (get-user-key-and-iv conn user-id) - (row-alist (query conn "select username, key_key, key_iv from users where user_id=$1;" user-id))) + (define (get-user-key-and-iv conn user-id) + (row-alist (query conn "select username, key_key, key_iv from users where user_id=$1;" user-id))) -(define (get-decrypted-user-key-and-iv conn user-id) - (let* ((auth-user-id-and-user-key-and-iv (get-user-key-and-iv conn user-id)) - (raw-user-key-and-tag (alist-ref 'key_key auth-user-id-and-user-key-and-iv)) - (raw-user-key (hexstring->blob (string-drop-right raw-user-key-and-tag (* tag-length 2)))) - (raw-user-tag (hexstring->blob (string-take-right raw-user-key-and-tag (* tag-length 2)))) - (user-key (decrypt (blob->string raw-user-key) (blob->string raw-user-tag) *root-key-key* *root-key-iv* - (string->blob (alist-ref 'username auth-user-id-and-user-key-and-iv)))) - (user-iv (alist-ref 'key_iv auth-user-id-and-user-key-and-iv)) - (auth-user-id (alist-ref 'username auth-user-id-and-user-key-and-iv))) - (values (hexstring->blob user-key) (hexstring->blob user-iv) auth-user-id))) + (define (get-decrypted-user-key-and-iv conn user-id) + (let* ((auth-user-id-and-user-key-and-iv (get-user-key-and-iv conn user-id)) + (raw-user-key-and-tag (alist-ref 'key_key auth-user-id-and-user-key-and-iv)) + (raw-user-key (hexstring->blob (string-drop-right raw-user-key-and-tag (* tag-length 2)))) + (raw-user-tag (hexstring->blob (string-take-right raw-user-key-and-tag (* tag-length 2)))) + (user-key (decrypt (blob->string raw-user-key) (blob->string raw-user-tag) *root-key-key* *root-key-iv* + (string->blob (alist-ref 'username auth-user-id-and-user-key-and-iv)))) + (user-iv (alist-ref 'key_iv auth-user-id-and-user-key-and-iv)) + (auth-user-id (alist-ref 'username auth-user-id-and-user-key-and-iv))) + (values (hexstring->blob user-key) (hexstring->blob user-iv) auth-user-id))) -(define (user-encrypt message user-key user-iv user-id) - (encrypt message user-key user-iv (string->blob (->string user-id)))) + (define (user-encrypt message user-key user-iv user-id) + (encrypt message user-key user-iv (string->blob (->string user-id)))) -(define (user-encrypt-for-db message user-key user-iv user-id) - (receive (message tag) - (user-encrypt message user-key user-iv user-id) - (string-append (blob->hexstring/uppercase (string->blob message)) - (blob->hexstring/uppercase (string->blob tag))))) + (define (user-encrypt-for-db message user-key user-iv user-id) + (receive (message tag) + (user-encrypt message user-key user-iv user-id) + (string-append (blob->hexstring/uppercase (string->blob message)) + (blob->hexstring/uppercase (string->blob tag))))) -(define (user-decrypt message tag user-key user-iv user-id) - (decrypt message tag user-key user-iv (string->blob (->string user-id)))) + (define (user-decrypt message tag user-key user-iv user-id) + (decrypt message tag user-key user-iv (string->blob (->string user-id)))) -(define (user-decrypt-from-db message-and-tag user-key user-iv user-id) - (let ((raw-message (hexstring->blob (string-drop-right message-and-tag (* tag-length 2)))) - (raw-tag (hexstring->blob (string-take-right message-and-tag (* tag-length 2))))) - (user-decrypt (blob->string raw-message) (blob->string raw-tag) user-key user-iv user-id))) + (define (user-decrypt-from-db message-and-tag user-key user-iv user-id) + (let ((raw-message (hexstring->blob (string-drop-right message-and-tag (* tag-length 2)))) + (raw-tag (hexstring->blob (string-take-right message-and-tag (* tag-length 2))))) + (user-decrypt (blob->string raw-message) (blob->string raw-tag) user-key user-iv user-id))) -(define (create-user conn email username) - (let ((user-key (blob->hexstring/uppercase (generate-key))) - (user-iv (blob->hexstring/uppercase (generate-iv)))) - (receive (enc-user-key tag) - (encrypt user-key *root-key-key* *root-key-iv* (string->blob username)) - (let ((user-id + (define (create-user conn email username) + (let ((user-key (blob->hexstring/uppercase (generate-key))) + (user-iv (blob->hexstring/uppercase (generate-iv)))) + (receive (enc-user-key tag) + (encrypt user-key *root-key-key* *root-key-iv* (string->blob username)) + (let ((user-id + (value-at + (query conn + "insert into users(email, username, key_key, key_iv) values ($1, $2, $3, $4) +returning users.user_id;" + email username + (string-append (blob->hexstring/uppercase (string->blob enc-user-key)) + (blob->hexstring/uppercase (string->blob tag))) + user-iv)))) + user-id)))) + + (define (delete-user conn user-id) + (query conn "delete from users where user_id=$1;" user-id)) + + (define (get-user-id-by-username conn username) + (let ((res (query conn "select user_id from users where username=$1;" username))) + (if (> (row-count res) 0) + (value-at res) + #f))) + + ;; We also encrypt the ssh pub key not to hide it but to make it + ;; more difficult for someone to tamper with it which could allow + ;; an attacker to poison an instance with an ssh key that they have + ;; access to + (define (create-instance conn user-id ssh-key-priv ssh-key-pub restic-password) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (let ((instance-id (value-at (query conn - "insert into users(email, username, key_key, key_iv) values ($1, $2, $3, $4) -returning users.user_id;" - email username - (string-append (blob->hexstring/uppercase (string->blob enc-user-key)) - (blob->hexstring/uppercase (string->blob tag))) - user-iv)))) - user-id)))) + "insert into instances(user_id, ssh_key_priv_enc, ssh_key_pub_enc, restic_password_enc) values ($1, $2, $3, $4) returning instances.instance_id;" + user-id + (user-encrypt-for-db ssh-key-priv user-key user-iv user-id) + (user-encrypt-for-db ssh-key-pub user-key user-iv user-id) + (user-encrypt-for-db restic-password user-key user-iv user-id))))) + (query conn "insert into user_service_configs(user_id, instance_id) values ($1, $2);" user-id instance-id) + (query conn "insert into user_selected_apps(user_id, instance_id) values ($1, $2);" user-id instance-id) + (query conn "insert into user_app_configs(user_id, instance_id) values ($1, $2);" user-id instance-id) + (query conn "insert into user_terraform_state(user_id, instance_id) values ($1, $2);" user-id instance-id) + instance-id))) -(define (delete-user conn user-id) - (query conn "delete from users where user_id=$1;" user-id)) + (define (destroy-instance conn instance-id) + (query conn "delete from instances where instance_id=$1;" instance-id)) -(define (get-user-id-by-username conn username) - (let ((res (query conn "select user_id from users where username=$1;" username))) - (if (> (row-count res) 0) - (value-at res) - #f))) + (define (get-instance-ssh-priv-key conn user-id instance-id) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (user-decrypt-from-db + (value-at (query conn "select ssh_key_priv_enc from instances where user_id=$1 and instance_id=$2;" + user-id instance-id)) + user-key user-iv user-id))) -;; We also encrypt the ssh pub key not to hide it but to make it -;; more difficult for someone to tamper with it which could allow -;; an attacker to poison an instance with an ssh key that they have -;; access to -(define (create-instance conn user-id ssh-key-priv ssh-key-pub restic-password) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) - (let ((instance-id - (value-at - (query conn - "insert into instances(user_id, ssh_key_priv_enc, ssh_key_pub_enc, restic_password_enc) values ($1, $2, $3, $4) returning instances.instance_id;" - user-id - (user-encrypt-for-db ssh-key-priv user-key user-iv user-id) - (user-encrypt-for-db ssh-key-pub user-key user-iv user-id) - (user-encrypt-for-db restic-password user-key user-iv user-id))))) - (query conn "insert into user_service_configs(user_id, instance_id) values ($1, $2);" user-id instance-id) - (query conn "insert into user_selected_apps(user_id, instance_id) values ($1, $2);" user-id instance-id) - (query conn "insert into user_app_configs(user_id, instance_id) values ($1, $2);" user-id instance-id) - (query conn "insert into user_terraform_state(user_id, instance_id) values ($1, $2);" user-id instance-id) - instance-id))) + (define (get-instance-ssh-pub-key conn user-id instance-id) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (user-decrypt-from-db + (value-at (query conn "select ssh_key_pub_enc from instances where user_id=$1 and instance_id=$2;" + user-id instance-id)) + user-key user-iv user-id))) -(define (destroy-instance conn instance-id) - (query conn "delete from instances where instance_id=$1;" instance-id)) + (define (update-instance-ssh-pub-key conn user-id instance-id ssh-pub-key) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (query conn "update instances set ssh_key_pub_enc=$3 where user_id=$1 and instance_id=$2;" + user-id instance-id + (user-encrypt-for-db ssh-pub-key user-key user-iv user-id)))) -(define (get-instance-ssh-priv-key conn user-id instance-id) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) - (user-decrypt-from-db - (value-at (query conn "select ssh_key_priv_enc from instances where user_id=$1 and instance_id=$2;" - user-id instance-id)) - user-key user-iv user-id))) + (define (get-instance-restic-password conn user-id instance-id) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (user-decrypt-from-db + (value-at (query conn "select restic_password_enc from instances where user_id=$1 and instance_id=$2;" + user-id instance-id)) + user-key user-iv user-id))) -(define (get-instance-ssh-pub-key conn user-id instance-id) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) - (user-decrypt-from-db - (value-at (query conn "select ssh_key_pub_enc from instances where user_id=$1 and instance_id=$2;" - user-id instance-id)) - user-key user-iv user-id))) + (define (get-user-instances conn user-id) + (column-values (query conn "select instance_id from instances where user_id=$1;" user-id))) -(define (update-instance-ssh-pub-key conn user-id instance-id ssh-pub-key) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) - (query conn "update instances set ssh_key_pub_enc=$3 where user_id=$1 and instance_id=$2;" - user-id instance-id - (user-encrypt-for-db ssh-pub-key user-key user-iv user-id)))) + (define *user-service-configs-column-map* + '((cloudflare-api-token . ("cloudflare_api_token_enc" #t)) + (cloudflare-account-id . ("cloudflare_account_id_enc" #t)) + (cloudflare-zone-id . ("cloudflare_zone_id_enc" #t)) + (digitalocean-api-token . ("digitalocean_api_token_enc" #t)) + (digitalocean-region . ("digitalocean_region" #f)) + (digitalocean-size . ("digitalocean_size" #f)) + (digitalocean-volume-size . ("digitalocean_volume_size" #f)) + (backblaze-application-key . ("backblaze_application_key_enc" #t)) + (backblaze-key-id . ("backblaze_key_id_enc" #t)) + (backblaze-bucket-url . ("backblaze_bucket_url_enc" #t)))) -(define (get-instance-restic-password conn user-id instance-id) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) - (user-decrypt-from-db - (value-at (query conn "select restic_password_enc from instances where user_id=$1 and instance_id=$2;" - user-id instance-id)) - user-key user-iv user-id))) + (define *user-service-configs-reverse-column-map* + (map (lambda (config) + `(,(string->symbol (cadr config)) . (,(car config) ,(caddr config)))) + *user-service-configs-column-map*)) -(define (get-user-instances conn user-id) - (column-values (query conn "select instance_id from instances where user_id=$1;" user-id))) + (define (update-user-service-config conn user-id instance-id update-alist) + (let ((valid-keys (map car *user-service-configs-column-map*))) + (for-each (lambda (update) + (if (not (memq (car update) valid-keys)) + (error (string-append "Not a valid update key: " (->string (car update)))))) + update-alist)) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (query* conn + (string-append + "update user_service_configs set " + (string-intersperse + (map-in-order (lambda (update i) + (conc (car (alist-ref (car update) *user-service-configs-column-map*)) + "=$" i)) + update-alist + (iota (length update-alist) 3)) + ", ") + " where user_id=$1 and instance_id=$2;") + `(,user-id + ,instance-id + ,@(map-in-order (lambda (update) + (if (cadr (alist-ref (car update) *user-service-configs-column-map*)) + (user-encrypt-for-db (cdr update) user-key user-iv user-id) + (cdr update))) + update-alist))))) -(define *user-service-configs-column-map* - '((cloudflare-api-token . ("cloudflare_api_token_enc" #t)) - (cloudflare-account-id . ("cloudflare_account_id_enc" #t)) - (cloudflare-zone-id . ("cloudflare_zone_id_enc" #t)) - (digitalocean-api-token . ("digitalocean_api_token_enc" #t)) - (digitalocean-region . ("digitalocean_region" #f)) - (digitalocean-size . ("digitalocean_size" #f)) - (digitalocean-volume-size . ("digitalocean_volume_size" #f)) - (backblaze-application-key . ("backblaze_application_key_enc" #t)) - (backblaze-key-id . ("backblaze_key_id_enc" #t)) - (backblaze-bucket-url . ("backblaze_bucket_url_enc" #t)))) + (define (get-user-service-config conn user-id instance-id) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (let ((res (row-alist + (query conn + (string-append + "select " + (string-intersperse + (map-in-order (lambda (update) + (car (alist-ref (car update) *user-service-configs-column-map*))) + *user-service-configs-column-map*) + ", ") + " from user_service_configs where user_id=$1 and instance_id=$2;") + user-id instance-id)))) + (map (lambda (item) + (let* ((key (car item)) + (value (cdr item)) + (config (alist-ref key *user-service-configs-reverse-column-map*))) + `(,(car config) . ,(if (sql-null? value) + "" + (if (cadr config) + (user-decrypt-from-db value user-key user-iv user-id) + value))))) + res)))) -(define *user-service-configs-reverse-column-map* - (map (lambda (config) - `(,(string->symbol (cadr config)) . (,(car config) ,(caddr config)))) - *user-service-configs-column-map*)) + (define *user-selected-apps-column-map* + '((wg-easy . "wg_easy_version") + (nextcloud . "nextcloud_version") + (ghost . "ghost_version") + (nassella . "nassella_version") + (log-viewer . "log_viewer_version") + (instance-control . "instance_control_version") + )) -(define (update-user-service-config conn user-id instance-id update-alist) - (let ((valid-keys (map car *user-service-configs-column-map*))) - (for-each (lambda (update) - (if (not (memq (car update) valid-keys)) - (error (string-append "Not a valid update key: " (->string (car update)))))) - update-alist)) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) + (define *user-selected-apps-reverse-column-map* + (map (lambda (config) + `(,(string->symbol (cdr config)) . ,(car config))) + *user-selected-apps-column-map*)) + + (define (update-user-selected-apps conn user-id instance-id app-alist) + (query conn "delete from user_selected_apps where instance_id=$1 and user_id=$2" instance-id user-id) + (for-each (lambda (app-version) + (query conn "insert into user_selected_apps (app_id, installed_version, user_id, instance_id) +select apps.id, $2, $3, $4 from apps where apps.app_name=$1;" + (symbol->string (car app-version)) (cdr app-version) user-id instance-id)) + app-alist)) + + (define (get-user-selected-apps conn user-id instance-id) + (row-map* + (lambda (name version) + (cons (string->symbol name) version)) + (query conn "select apps.app_name, usa.installed_version from user_selected_apps usa +join apps on apps.id = usa.app_id +where usa.user_id=$1 and usa.instance_id=$2;" + user-id instance-id))) + + (define (update-user-app-config conn user-id instance-id config) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (query conn + "update user_app_configs set config_enc=$1 where user_id=$2 and instance_id=$3;" + (user-encrypt-for-db + (with-output-to-string + (lambda () + (write config))) + user-key user-iv user-id) + user-id instance-id))) + + (define (update-root-domain conn user-id instance-id root-domain) + (query conn + "update user_app_configs set root_domain=$1 where user_id=$2 and instance_id=$3;" + root-domain + user-id + instance-id)) + + (define (get-user-app-config conn user-id instance-id) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (let ((res (row-alist (query conn + "select root_domain, config_enc from user_app_configs where user_id=$1 and instance_id=$2;" + user-id instance-id)))) + `((root-domain . ,(if (sql-null? (alist-ref 'root_domain res)) + #f + (alist-ref 'root_domain res))) + (config . ,(if (sql-null? (alist-ref 'config_enc res)) + '() + (with-input-from-string + (user-decrypt-from-db (alist-ref 'config_enc res) user-key user-iv user-id) + read))))))) + + (define *deployment-status* + '((queued . "queued") + (in-progress . "in-progress") + (complete . "complete") + (failed . "failed"))) + (define (create-deployment conn user-id instance-id) + (value-at + (query conn + "insert into deployments(user_id, instance_id, started) values($1, $2, now()) returning deployments.id;" + user-id instance-id))) + (define (update-deployment-in-progress conn deployment-id pid) + (query conn + "update deployments set status=$1, pid=$2 where id=$3;" + (alist-ref 'in-progress *deployment-status*) pid deployment-id)) + + (define (update-deployment-status conn user-id deployment-id status log) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (query conn "update deployments set status=$1, log_enc=$2, finished=now() where id=$3;" + (alist-ref status *deployment-status*) + (user-encrypt-for-db log user-key user-iv user-id) + deployment-id))) + + (define (get-deployment-status conn deployment-id) + (value-at (query conn "select status from deployments where id=$1;" deployment-id))) + + (define (get-most-recent-deployment-status conn user-id instance-id) + (let ((res (query conn "select status from deployments where user_id=$1 and instance_id=$2 order by id DESC limit 1;" user-id instance-id))) + (if (> (row-count res) 0) + (value-at res) + #f))) + + (define *deployments-column-map* + '((generate-configs . "generate_configs") + (custom-image . "terraform_custom_image") + (machine-create . "terraform_machine_create") + (machine-destroy . "terraform_machine_destroy") + (ip-create . "terraform_ip_create") + (ip-destroy . "terraform_ip_destroy") + (volume-create . "terraform_volume_create") + (volume-destroy . "terraform_volume_destroy") + (instance-backup . "instance_backup") + (status . "status") + (id . "id") + (instance-id . "instance_id"))) + + (define *deployments-reverse-column-map* + (map (lambda (config) + `(,(string->symbol (cdr config)) . ,(car config))) + *deployments-column-map*)) + + (define (update-deployment-progress conn deployment-id progress-alist) + (let ((valid-keys (map car *deployments-column-map*))) + (for-each (lambda (progress) + (if (not (memq (car progress) valid-keys)) + (error (string-append "Not a valid progress key: " (->string (car progress)))))) + progress-alist)) (query* conn (string-append - "update user_service_configs set " + "update deployments set " (string-intersperse - (map-in-order (lambda (update i) - (conc (car (alist-ref (car update) *user-service-configs-column-map*)) + (map-in-order (lambda (progress i) + (conc (alist-ref (car progress) *deployments-column-map*) "=$" i)) - update-alist - (iota (length update-alist) 3)) + progress-alist + (iota (length progress-alist) 2)) ", ") - " where user_id=$1 and instance_id=$2;") - `(,user-id - ,instance-id - ,@(map-in-order (lambda (update) - (if (cadr (alist-ref (car update) *user-service-configs-column-map*)) - (user-encrypt-for-db (cdr update) user-key user-iv user-id) - (cdr update))) - update-alist))))) + " where id=$1;") + (cons deployment-id + (map-in-order (lambda (progress) (alist-ref (cdr progress) *deployment-status*)) progress-alist)))) -(define (get-user-service-config conn user-id instance-id) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) + (define (get-deployment-progress conn deployment-id) (let ((res (row-alist (query conn (string-append "select " (string-intersperse - (map-in-order (lambda (update) - (car (alist-ref (car update) *user-service-configs-column-map*))) - *user-service-configs-column-map*) + (map-in-order cdr *deployments-column-map*) ", ") - " from user_service_configs where user_id=$1 and instance_id=$2;") + " from deployments where id=$1;") + deployment-id)))) + (map (lambda (item) + (let* ((key (car item)) + (value (cdr item)) + (config (alist-ref key *deployments-reverse-column-map*))) + `(,config . ,(if (sql-null? value) + #f + (string->symbol value))))) + res))) + + (define (get-most-recent-deployment-progress conn user-id instance-id) + (let ((res (row-alist + (query conn + (string-append + "select " + (string-intersperse + (map-in-order cdr *deployments-column-map*) + ", ") + " from deployments where user_id=$1 and instance_id=$2 order by id DESC limit 1;") user-id instance-id)))) (map (lambda (item) (let* ((key (car item)) (value (cdr item)) - (config (alist-ref key *user-service-configs-reverse-column-map*))) - `(,(car config) . ,(if (sql-null? value) - "" - (if (cadr config) - (user-decrypt-from-db value user-key user-iv user-id) - value))))) - res)))) + (config (alist-ref key *deployments-reverse-column-map*))) + `(,config . ,(if (sql-null? value) + #f + (if (string? value) + (string->symbol value) + value))))) + res))) -(define *user-selected-apps-column-map* - '((wg-easy . "wg_easy_version") - (nextcloud . "nextcloud_version") - (ghost . "ghost_version") - (nassella . "nassella_version") - (log-viewer . "log_viewer_version") - (instance-control . "instance_control_version") - )) - -(define *user-selected-apps-reverse-column-map* - (map (lambda (config) - `(,(string->symbol (cdr config)) . ,(car config))) - *user-selected-apps-column-map*)) - -(define (update-user-selected-apps conn user-id instance-id app-alist) - (query conn "delete from user_selected_apps where instance_id=$1 and user_id=$2" instance-id user-id) - (for-each (lambda (app-version) - (query conn "insert into user_selected_apps (app_id, installed_version, user_id, instance_id) -select apps.id, $2, $3, $4 from apps where apps.app_name=$1;" - (symbol->string (car app-version)) (cdr app-version) user-id instance-id)) - app-alist)) - -(define (get-user-selected-apps conn user-id instance-id) - (row-map* - (lambda (name version) - (cons (string->symbol name) version)) - (query conn "select apps.app_name, usa.installed_version from user_selected_apps usa -join apps on apps.id = usa.app_id -where usa.user_id=$1 and usa.instance_id=$2;" - user-id instance-id))) - -(define (update-user-app-config conn user-id instance-id config) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) - (query conn - "update user_app_configs set config_enc=$1 where user_id=$2 and instance_id=$3;" - (user-encrypt-for-db - (with-output-to-string - (lambda () - (write config))) - user-key user-iv user-id) - user-id instance-id))) - -(define (update-root-domain conn user-id instance-id root-domain) - (query conn - "update user_app_configs set root_domain=$1 where user_id=$2 and instance_id=$3;" - root-domain - user-id - instance-id)) - -(define (get-user-app-config conn user-id instance-id) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) - (let ((res (row-alist (query conn - "select root_domain, config_enc from user_app_configs where user_id=$1 and instance_id=$2;" - user-id instance-id)))) - `((root-domain . ,(if (sql-null? (alist-ref 'root_domain res)) - #f - (alist-ref 'root_domain res))) - (config . ,(if (sql-null? (alist-ref 'config_enc res)) - '() - (with-input-from-string - (user-decrypt-from-db (alist-ref 'config_enc res) user-key user-iv user-id) - read))))))) - -(define *deployment-status* - '((queued . "queued") - (in-progress . "in-progress") - (complete . "complete") - (failed . "failed"))) -(define (create-deployment conn user-id instance-id) - (value-at - (query conn - "insert into deployments(user_id, instance_id, started) values($1, $2, now()) returning deployments.id;" - user-id instance-id))) -(define (update-deployment-in-progress conn deployment-id pid) - (query conn - "update deployments set status=$1, pid=$2 where id=$3;" - (alist-ref 'in-progress *deployment-status*) pid deployment-id)) - -(define (update-deployment-status conn user-id deployment-id status log) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) - (query conn "update deployments set status=$1, log_enc=$2, finished=now() where id=$3;" - (alist-ref status *deployment-status*) - (user-encrypt-for-db log user-key user-iv user-id) - deployment-id))) - -(define (get-deployment-status conn deployment-id) - (value-at (query conn "select status from deployments where id=$1;" deployment-id))) - -(define (get-most-recent-deployment-status conn user-id instance-id) - (let ((res (query conn "select status from deployments where user_id=$1 and instance_id=$2 order by id DESC limit 1;" user-id instance-id))) - (if (> (row-count res) 0) - (value-at res) - #f))) - -(define *deployments-column-map* - '((generate-configs . "generate_configs") - (custom-image . "terraform_custom_image") - (machine-create . "terraform_machine_create") - (machine-destroy . "terraform_machine_destroy") - (ip-create . "terraform_ip_create") - (ip-destroy . "terraform_ip_destroy") - (volume-create . "terraform_volume_create") - (volume-destroy . "terraform_volume_destroy") - (instance-backup . "instance_backup") - (status . "status") - (id . "id") - (instance-id . "instance_id"))) - -(define *deployments-reverse-column-map* - (map (lambda (config) - `(,(string->symbol (cdr config)) . ,(car config))) - *deployments-column-map*)) - -(define (update-deployment-progress conn deployment-id progress-alist) - (let ((valid-keys (map car *deployments-column-map*))) - (for-each (lambda (progress) - (if (not (memq (car progress) valid-keys)) - (error (string-append "Not a valid progress key: " (->string (car progress)))))) - progress-alist)) - (query* conn - (string-append - "update deployments set " - (string-intersperse - (map-in-order (lambda (progress i) - (conc (alist-ref (car progress) *deployments-column-map*) - "=$" i)) - progress-alist - (iota (length progress-alist) 2)) - ", ") - " where id=$1;") - (cons deployment-id - (map-in-order (lambda (progress) (alist-ref (cdr progress) *deployment-status*)) progress-alist)))) - -(define (get-deployment-progress conn deployment-id) - (let ((res (row-alist - (query conn - (string-append - "select " - (string-intersperse - (map-in-order cdr *deployments-column-map*) - ", ") - " from deployments where id=$1;") - deployment-id)))) - (map (lambda (item) - (let* ((key (car item)) - (value (cdr item)) - (config (alist-ref key *deployments-reverse-column-map*))) - `(,config . ,(if (sql-null? value) - #f - (string->symbol value))))) - res))) - -(define (get-most-recent-deployment-progress conn user-id instance-id) - (let ((res (row-alist - (query conn - (string-append - "select " - (string-intersperse - (map-in-order cdr *deployments-column-map*) - ", ") - " from deployments where user_id=$1 and instance_id=$2 order by id DESC limit 1;") - user-id instance-id)))) - (map (lambda (item) - (let* ((key (car item)) - (value (cdr item)) - (config (alist-ref key *deployments-reverse-column-map*))) - `(,config . ,(if (sql-null? value) - #f - (if (string? value) - (string->symbol value) - value))))) - res))) - -(define (get-dashboard conn user-id) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) - (let ((res - (query conn - (string-append - "select " - (string-intersperse - (map-in-order (lambda (d) (string-append "d." (cdr d))) *deployments-column-map*) - ", ") - ", uac.root_domain, uac.config_enc, uac.instance_id " - "from instances as i " - "join (select instance_id, max(id) as id from deployments group by instance_id) d2 " - "on d2.instance_id = i.instance_id " - "join deployments d on d.id = d2.id " - "join user_app_configs uac on uac.user_id = d.user_id and uac.instance_id = d.instance_id " - "where i.user_id=$1;") - user-id)) - (instance-apps - (row-fold* - (lambda (app-name installed-version instance-id lookup) - (alist-update instance-id - `(((app-name . ,(string->symbol app-name)) - (installed-version . ,installed-version)) - ,@(alist-ref instance-id lookup eqv? '())) - lookup)) - '() - (query - conn - "select apps.app_name, usa.installed_version, usa.instance_id from user_selected_apps usa + (define (get-dashboard conn user-id) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (let ((res + (query conn + (string-append + "select " + (string-intersperse + (map-in-order (lambda (d) (string-append "d." (cdr d))) *deployments-column-map*) + ", ") + ", uac.root_domain, uac.config_enc, uac.instance_id " + "from instances as i " + "join (select instance_id, max(id) as id from deployments group by instance_id) d2 " + "on d2.instance_id = i.instance_id " + "join deployments d on d.id = d2.id " + "join user_app_configs uac on uac.user_id = d.user_id and uac.instance_id = d.instance_id " + "where i.user_id=$1;") + user-id)) + (instance-apps + (row-fold* + (lambda (app-name installed-version instance-id lookup) + (alist-update instance-id + `(((app-name . ,(string->symbol app-name)) + (installed-version . ,installed-version)) + ,@(alist-ref instance-id lookup eqv? '())) + lookup)) + '() + (query + conn + "select apps.app_name, usa.installed_version, usa.instance_id from user_selected_apps usa join apps on apps.id=usa.app_id where user_id=$1;" - user-id)))) - (map - (lambda (instance) - (cons `(apps . ,(alist-ref (alist-ref 'instance-id instance) instance-apps)) - instance)) - (map - (lambda (row-num) - (map (lambda (item) - (let* ((key (car item)) - (value (cdr item)) - (config (alist-ref key `((root_domain . root-domain) - (config_enc . config) - (instance_id . instance-id) - ;; (wg_easy_version . wg-easy) - ;; (nextcloud_version . nextcloud) - ;; (ghost_version . ghost) - ;; (nassella_version . nassella) - ;; (log_viewer_version . log-viewer) - ;; (instance_control_version . instance-control) - ,@*deployments-reverse-column-map*)))) - `(,config . ,(if (sql-null? value) - #f - (if (and (string? value) (member config *deployments-column-map*)) - (string->symbol value) - (if (eq? key 'config_enc) - (with-input-from-string - (user-decrypt-from-db value user-key user-iv user-id) - read) - value)))))) - (row-alist res row-num))) - (iota (row-count res))))))) + user-id)))) + (map + (lambda (instance) + (cons `(apps . ,(alist-ref (alist-ref 'instance-id instance) instance-apps)) + instance)) + (map + (lambda (row-num) + (map (lambda (item) + (let* ((key (car item)) + (value (cdr item)) + (config (alist-ref key `((root_domain . root-domain) + (config_enc . config) + (instance_id . instance-id) + ;; (wg_easy_version . wg-easy) + ;; (nextcloud_version . nextcloud) + ;; (ghost_version . ghost) + ;; (nassella_version . nassella) + ;; (log_viewer_version . log-viewer) + ;; (instance_control_version . instance-control) + ,@*deployments-reverse-column-map*)))) + `(,config . ,(if (sql-null? value) + #f + (if (and (string? value) (member config *deployments-column-map*)) + (string->symbol value) + (if (eq? key 'config_enc) + (with-input-from-string + (user-decrypt-from-db value user-key user-iv user-id) + read) + value)))))) + (row-alist res row-num))) + (iota (row-count res))))))) -(define (update-user-terraform-state conn user-id instance-id state backup) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) - (query conn - "update user_terraform_state set state_enc=$1, state_backup_enc=$2 where user_id=$3 and instance_id=$4;" - (user-encrypt-for-db state user-key user-iv user-id) - (user-encrypt-for-db backup user-key user-iv user-id) - user-id - instance-id))) + (define (update-user-terraform-state conn user-id instance-id state backup) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (query conn + "update user_terraform_state set state_enc=$1, state_backup_enc=$2 where user_id=$3 and instance_id=$4;" + (user-encrypt-for-db state user-key user-iv user-id) + (user-encrypt-for-db backup user-key user-iv user-id) + user-id + instance-id))) -(define (get-user-terraform-state conn user-id instance-id) - (receive (user-key user-iv auth-user-id) - (get-decrypted-user-key-and-iv conn user-id) - (let ((res (row-alist (query conn - "select state_enc, state_backup_enc from user_terraform_state where user_id=$1 and instance_id=$2;" - user-id instance-id)))) - `((state . ,(if (or (sql-null? (alist-ref 'config_enc res)) - (sql-null? (alist-ref 'state_enc res))) - "" - (user-decrypt-from-db (alist-ref 'state_enc res) user-key user-iv user-id))) - (backup . ,(if (or (sql-null? (alist-ref 'config_enc res)) - (sql-null? (alist-ref 'state_backup_enc res))) - "" - (user-decrypt-from-db (alist-ref 'state_backup_enc res) user-key user-iv user-id))))))) + (define (get-user-terraform-state conn user-id instance-id) + (receive (user-key user-iv auth-user-id) + (get-decrypted-user-key-and-iv conn user-id) + (let ((res (row-alist (query conn + "select state_enc, state_backup_enc from user_terraform_state where user_id=$1 and instance_id=$2;" + user-id instance-id)))) + `((state . ,(if (or (sql-null? (alist-ref 'config_enc res)) + (sql-null? (alist-ref 'state_enc res))) + "" + (user-decrypt-from-db (alist-ref 'state_enc res) user-key user-iv user-id))) + (backup . ,(if (or (sql-null? (alist-ref 'config_enc res)) + (sql-null? (alist-ref 'state_backup_enc res))) + "" + (user-decrypt-from-db (alist-ref 'state_backup_enc res) user-key user-iv user-id))))))) -;; (define (instance-config-for-export conn user-id instance-id) -;; (receive (user-key user-iv auth-user-id) -;; (get-decrypted-user-key-and-iv conn user-id) -;; (let ((res (row-alist -;; (query conn -;; " -;; select -;; instances.ssh_key_priv_enc, -;; instances.ssh_key_pub_enc, -;; instances.restic_password_enc, -;; user_service_configs.cloudflare_api_token_enc, -;; user_service_configs.cloudflare_account_id_enc, -;; user_service_configs.cloudflare_zone_id_enc, -;; user_service_configs.digitalocean_api_token_enc, -;; user_service_configs.digitalocean_region, -;; user_service_configs.digitalocean_size, -;; user_service_configs.backblaze_application_key_enc, -;; user_service_configs.backblaze_key_id_enc, -;; user_service_configs.backblaze_bucket_url_enc, -;; user_selected_apps.wg_easy_version, -;; user_selected_apps.nextcloud_version, -;; user_selected_apps.nassella_version, -;; user_selected_apps.log_viewer_version, -;; user_selected_apps.ghost_version, -;; user_app_configs.root_domain, -;; user_apps_configs.config_end -;; from instances -;; join user_service_configs on user_service_configs.user_id = instances.user_id and user_service_configs.instance_id = instances.instance_id -;; join user_selected_apps on user_selected_apps.user_id = instances.user_id and user_selected_apps.instance_id = instances.instance_id -;; join user_app_configs on user_apps_configs.user_id = instances.user_id and user_app_configs.instance_id = instances.instance_id -;; where instances.user_id=$1 and instance.instance_id=$2;" -;; user-id instance-id)))) -;; `((state . ,(if (or (sql-null? (alist-ref 'config_enc res)) -;; (sql-null? (alist-ref 'state_enc res))) -;; "" -;; (user-decrypt-from-db (alist-ref 'state_enc res) user-key user-iv user-id))) -;; (backup . ,(if (or (sql-null? (alist-ref 'config_enc res)) -;; (sql-null? (alist-ref 'state_backup_enc res))) -;; "" -;; (user-decrypt-from-db (alist-ref 'state_backup_enc res) user-key user-iv user-id))))))) + ;; (define (instance-config-for-export conn user-id instance-id) + ;; (receive (user-key user-iv auth-user-id) + ;; (get-decrypted-user-key-and-iv conn user-id) + ;; (let ((res (row-alist + ;; (query conn + ;; " + ;; select + ;; instances.ssh_key_priv_enc, + ;; instances.ssh_key_pub_enc, + ;; instances.restic_password_enc, + ;; user_service_configs.cloudflare_api_token_enc, + ;; user_service_configs.cloudflare_account_id_enc, + ;; user_service_configs.cloudflare_zone_id_enc, + ;; user_service_configs.digitalocean_api_token_enc, + ;; user_service_configs.digitalocean_region, + ;; user_service_configs.digitalocean_size, + ;; user_service_configs.backblaze_application_key_enc, + ;; user_service_configs.backblaze_key_id_enc, + ;; user_service_configs.backblaze_bucket_url_enc, + ;; user_selected_apps.wg_easy_version, + ;; user_selected_apps.nextcloud_version, + ;; user_selected_apps.nassella_version, + ;; user_selected_apps.log_viewer_version, + ;; user_selected_apps.ghost_version, + ;; user_app_configs.root_domain, + ;; user_apps_configs.config_end + ;; from instances + ;; join user_service_configs on user_service_configs.user_id = instances.user_id and user_service_configs.instance_id = instances.instance_id + ;; join user_selected_apps on user_selected_apps.user_id = instances.user_id and user_selected_apps.instance_id = instances.instance_id + ;; join user_app_configs on user_apps_configs.user_id = instances.user_id and user_app_configs.instance_id = instances.instance_id + ;; where instances.user_id=$1 and instance.instance_id=$2;" + ;; user-id instance-id)))) + ;; `((state . ,(if (or (sql-null? (alist-ref 'config_enc res)) + ;; (sql-null? (alist-ref 'state_enc res))) + ;; "" + ;; (user-decrypt-from-db (alist-ref 'state_enc res) user-key user-iv user-id))) + ;; (backup . ,(if (or (sql-null? (alist-ref 'config_enc res)) + ;; (sql-null? (alist-ref 'state_backup_enc res))) + ;; "" + ;; (user-decrypt-from-db (alist-ref 'state_backup_enc res) user-key user-iv user-id))))))) -;; TODO can/should this be removed? I don't remember why I put this here -(debug-log (current-error-port)) + ;; TODO can/should this be removed? I don't remember why I put this here + (debug-log (current-error-port)) -;; An a-list of migrations. The car is the migration_id in the migrations -;; table and the cdr is name of the file containing sql for the migration. -;; The file name is appended with "-up.sql" and "-down.sql", depending on if -;; an up or down migration should be run. -;; -;; After a migration has been run, it's migration id (the car in the alist) is -;; added to the database so the migration does not get re-run. -;; -;; To create a new migration: -;; add it to the end of this list with the car being one number higher than -;; the previous migration and the cdr being the filename containing sql statements -;; to run (not including a prefix of the ID or the suffic -up.sql or -down.sql). -;; add two sql files in the "migrations" folder, one ending in -up.sql and one ending -;; in -down.sql. -;; So to for a migration called "my-migration" with id "13 create two files in the -;; migrations directory: 13-my-migration-up.sql and 13-my-migration-down.sql -;; -;; The "up" file is called to run the migration and the "down" file is called to -;; "undo" the migration. -(define *migrations* - '((0 . "adding-instance-control-app") - (1 . "adding-service-config-digitalocean-volume-size") - (2 . "adding-deployments-instance-backup") - (3 . "normalizing-apps") - (4 . "fixing-app-normalization") - (5 . "adding-wordpress-app") - (6 . "adding-lldap-app") - (7 . "adding-authelia-app"))) + ;; An a-list of migrations. The car is the migration_id in the migrations + ;; table and the cdr is name of the file containing sql for the migration. + ;; The file name is appended with "-up.sql" and "-down.sql", depending on if + ;; an up or down migration should be run. + ;; + ;; After a migration has been run, it's migration id (the car in the alist) is + ;; added to the database so the migration does not get re-run. + ;; + ;; To create a new migration: + ;; add it to the end of this list with the car being one number higher than + ;; the previous migration and the cdr being the filename containing sql statements + ;; to run (not including a prefix of the ID or the suffic -up.sql or -down.sql). + ;; add two sql files in the "migrations" folder, one ending in -up.sql and one ending + ;; in -down.sql. + ;; So to for a migration called "my-migration" with id "13 create two files in the + ;; migrations directory: 13-my-migration-up.sql and 13-my-migration-down.sql + ;; + ;; The "up" file is called to run the migration and the "down" file is called to + ;; "undo" the migration. + (define *migrations* + '((0 . "adding-instance-control-app") + (1 . "adding-service-config-digitalocean-volume-size") + (2 . "adding-deployments-instance-backup") + (3 . "normalizing-apps") + (4 . "fixing-app-normalization") + (5 . "adding-wordpress-app") + (6 . "adding-lldap-app") + (7 . "adding-authelia-app"))) -(define (run-pending-migrations conn) - (let* ((migration-ids (sort (map car *migrations*) <)) - (migration-rows (query conn "select migration_id from migrations;")) - (applied-migration-ids (if (> (row-count migration-rows) 0) - (column-values migration-rows) - '()))) - (for-each - (lambda (id) - (when (not (member id applied-migration-ids)) - (log-to (debug-log) "running migration: ~A" id) - (for-each - (lambda (statement) - (query conn (conc statement ";"))) - (string-split (with-input-from-file - (conc "migrations/" id "-" (alist-ref id *migrations*) "-up.sql") - read-string) - ";")) - (query conn "insert into migrations(migration_id) values ($1);" id))) - migration-ids))) - -(define (db-init) - (with-db/transaction - (lambda (db) - (if (value-at (query db "SELECT EXISTS (SELECT FROM pg_tables WHERE schemaname = 'public' AND tablename = 'users');")) - (begin - (log-to (debug-log) "database already initialized") - #t) - (begin - (log-to (debug-log) "tables not found in db. Creating...") + (define (run-pending-migrations conn) + (let* ((migration-ids (sort (map car *migrations*) <)) + (migration-rows (query conn "select migration_id from migrations;")) + (applied-migration-ids (if (> (row-count migration-rows) 0) + (column-values migration-rows) + '()))) + (for-each + (lambda (id) + (when (not (member id applied-migration-ids)) + (log-to (debug-log) "running migration: ~A" id) (for-each (lambda (statement) - (query db (conc statement ";"))) - (string-split (with-input-from-file "db-init.sql" read-string) ";")) - (log-to (debug-log) "table creation finished") - (log-to (debug-log) "creating test user") - (create-user db "me@example.com" "username") - (log-to (debug-log) "test user creation finished"))) - ;; originally there was no migrations table, so first add it if it doesn't exist - (if (value-at (query db "SELECT EXISTS (SELECT FROM pg_tables WHERE schemaname = 'public' AND tablename = 'migrations');")) - #t - (begin - (log-to (debug-log) "migrations table not found in db. Creating...") - (query db "create table migrations( + (query conn (conc statement ";"))) + (string-split (with-input-from-file + (conc "migrations/" id "-" (alist-ref id *migrations*) "-up.sql") + read-string) + ";")) + (query conn "insert into migrations(migration_id) values ($1);" id))) + migration-ids))) + + (define (db-init) + (with-db/transaction + (lambda (db) + (if (value-at (query db "SELECT EXISTS (SELECT FROM pg_tables WHERE schemaname = 'public' AND tablename = 'users');")) + (begin + (log-to (debug-log) "database already initialized") + #t) + (begin + (log-to (debug-log) "tables not found in db. Creating...") + (for-each + (lambda (statement) + (query db (conc statement ";"))) + (string-split (with-input-from-file "db-init.sql" read-string) ";")) + (log-to (debug-log) "table creation finished") + (log-to (debug-log) "creating test user") + (create-user db "me@example.com" "username") + (log-to (debug-log) "test user creation finished"))) + ;; originally there was no migrations table, so first add it if it doesn't exist + (if (value-at (query db "SELECT EXISTS (SELECT FROM pg_tables WHERE schemaname = 'public' AND tablename = 'migrations');")) + #t + (begin + (log-to (debug-log) "migrations table not found in db. Creating...") + (query db "create table migrations( id bigserial primary key, migration_id integer not null unique );") - (log-to (debug-log) "migrations table creation finished"))) - (run-pending-migrations db)))) + (log-to (debug-log) "migrations table creation finished"))) + (run-pending-migrations db)))) -(define (db-clean) - (with-db/transaction - (lambda (db) - (if (value-at (query db "SELECT EXISTS (SELECT FROM pg_tables WHERE schemaname = 'public' AND tablename = 'users');")) - (begin - (log-to (debug-log) "cleaning database") - (for-each - (lambda (statement) - (query db (conc statement ";"))) - (string-split (with-input-from-file "db-clean.sql" read-string) ";")) - (log-to (debug-log) "database cleaning complete")) - (begin - (log-to (debug-log) "tables not found, not cleaning") - #t))))) + (define (db-clean) + (with-db/transaction + (lambda (db) + (if (value-at (query db "SELECT EXISTS (SELECT FROM pg_tables WHERE schemaname = 'public' AND tablename = 'users');")) + (begin + (log-to (debug-log) "cleaning database") + (for-each + (lambda (statement) + (query db (conc statement ";"))) + (string-split (with-input-from-file "db-clean.sql" read-string) ";")) + (log-to (debug-log) "database cleaning complete")) + (begin + (log-to (debug-log) "tables not found, not cleaning") + #t))))) -;; (with-db/transaction (lambda (db) (get-user-deployments db 1))) -;; (with-db/transaction (lambda (db) (get-most-recent-deployment-progress db 7))) -;; (with-db/transaction (lambda (db) (get-deployment-progress db 14))) -;; (with-db/transaction (lambda (db) (update-deployment-progress db 14 '((generate-configs . complete) (custom-image . in-progress) (machine-create . queued))))) -;; (with-db/transaction -;; (lambda (db) -;; (update-user-terraform-state db 1 22 -;; (with-input-from-file "src/deploy-7/terraform.tfstate" read-string) -;; (with-input-from-file "src/deploy-7/terraform.tfstate.backup" read-string)))) -;; (with-db/transaction (lambda (db) (get-user-terraform-state db 7))) + ;; (with-db/transaction (lambda (db) (get-user-deployments db 1))) + ;; (with-db/transaction (lambda (db) (get-most-recent-deployment-progress db 7))) + ;; (with-db/transaction (lambda (db) (get-deployment-progress db 14))) + ;; (with-db/transaction (lambda (db) (update-deployment-progress db 14 '((generate-configs . complete) (custom-image . in-progress) (machine-create . queued))))) + ;; (with-db/transaction + ;; (lambda (db) + ;; (update-user-terraform-state db 1 22 + ;; (with-input-from-file "src/deploy-7/terraform.tfstate" read-string) + ;; (with-input-from-file "src/deploy-7/terraform.tfstate.backup" read-string)))) + ;; (with-db/transaction (lambda (db) (get-user-terraform-state db 7))) -;; (with-db/transaction (lambda (db) (create-deployment db 7))) -;; (with-db/transaction (lambda (db) (get-deployment-status db 1))) -;; (with-db/transaction (lambda (db) (update-deployment-in-progress db 1 123))) -;; (with-db/transaction (lambda (db) (update-deployment-status db 1 'complete))) -;; (with-db/transaction (lambda (db) (get-most-recent-deployment-status db 7))) + ;; (with-db/transaction (lambda (db) (create-deployment db 7))) + ;; (with-db/transaction (lambda (db) (get-deployment-status db 1))) + ;; (with-db/transaction (lambda (db) (update-deployment-in-progress db 1 123))) + ;; (with-db/transaction (lambda (db) (update-deployment-status db 1 'complete))) + ;; (with-db/transaction (lambda (db) (get-most-recent-deployment-status db 7))) -;; (with-db/transaction (lambda (db) (create-user db 1 "t@thintz.com" "thecombjelly"))) -;; (with-db/transaction (lambda (db) (create-instance db 2))) + ;; (with-db/transaction (lambda (db) (create-user db 1 "t@thintz.com" "thecombjelly"))) + ;; (with-db/transaction (lambda (db) (create-instance db 2))) -;; (let ((user-id 7)) -;; (with-db/transaction -;; (lambda (db) -;; (receive (user-key user-iv auth-user-id) -;; (get-decrypted-user-key-and-iv db user-id) -;; (receive (message tag) -;; (user-encrypt "hello!" user-key user-iv user-id) -;; (user-decrypt message tag user-key user-iv user-id)))))) + ;; (let ((user-id 7)) + ;; (with-db/transaction + ;; (lambda (db) + ;; (receive (user-key user-iv auth-user-id) + ;; (get-decrypted-user-key-and-iv db user-id) + ;; (receive (message tag) + ;; (user-encrypt "hello!" user-key user-iv user-id) + ;; (user-decrypt message tag user-key user-iv user-id)))))) -;; (with-db/transaction -;; (lambda (db) -;; (update-user-service-config db 7 '((cloudflare-api-token . ") -;; (digitalocean-region . "sfo3"))))) + ;; (with-db/transaction + ;; (lambda (db) + ;; (update-user-service-config db 7 '((cloudflare-api-token . ") + ;; (digitalocean-region . "sfo3"))))) -;; (with-db/transaction -;; (lambda (db) -;; (get-user-service-config db 7))) + ;; (with-db/transaction + ;; (lambda (db) + ;; (get-user-service-config db 7))) -;; (with-db/transaction -;; (lambda (db) -;; (update-user-selected-apps db 7 '((wg-easy . "0.1") -;; (nextcloud . "1.3"))))) + ;; (with-db/transaction + ;; (lambda (db) + ;; (update-user-selected-apps db 7 '((wg-easy . "0.1") + ;; (nextcloud . "1.3"))))) -;; (with-db/transaction -;; (lambda (db) -;; (get-user-selected-apps db 7))) + ;; (with-db/transaction + ;; (lambda (db) + ;; (get-user-selected-apps db 7))) -;; (with-db/transaction -;; (lambda (db) -;; (update-user-app-config db 7 "domain.com" '()))) + ;; (with-db/transaction + ;; (lambda (db) + ;; (update-user-app-config db 7 "domain.com" '()))) -;; (with-db/transaction -;; (lambda (db) -;; (get-user-app-config db 7))) + ;; (with-db/transaction + ;; (lambda (db) + ;; (get-user-app-config db 7))) -) + ) diff --git a/src/mocks.scm b/src/mocks.scm index b6b3295..bf43667 100644 --- a/src/mocks.scm +++ b/src/mocks.scm @@ -1,3 +1,19 @@ +;; Copyright 2025-2026 Thomas Hintz + +;; This file is part of Nassella. + +;; Nassella is free software: you can redistribute it and/or modify it under the +;; terms of the GNU Affero General Public License as published by the Free +;; Software Foundation, either version 3 of the License, or (at your option) any +;; later version. + +;; Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +;; WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +;; FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +;; You should have received a copy of the GNU Affero General Public License +;; along with Nassella. If not, see . + (define *digital-ocean-regions-response* '(((name . "New York 1") (slug . "nyc1") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "g-2vcpu-8gb-intel" "gd-2vcpu-8gb-intel" "s-4vcpu-16gb-amd" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "g5_5-2vcpu-8gb-intel" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m-2vcpu-16gb-intel" "m3-2vcpu-16gb" "c-4-intel" "m3-2vcpu-16gb-intel" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "c2-4vcpu-8gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb-intel" "g-4vcpu-16gb-intel" "gd-4vcpu-16gb-intel" "c5-4vcpu-8gb-intel" "so1_5-2vcpu-16gb" "s-8vcpu-32gb-amd" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "g5_5-4vcpu-16gb-intel" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m-4vcpu-32gb-intel" "m3-4vcpu-32gb" "c-8-intel" "m3-4vcpu-32gb-intel" "c2-8vcpu-16gb-intel" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb-intel" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb-intel" "g-8vcpu-32gb-intel" "gd-8vcpu-32gb-intel" "c5-8vcpu-16gb-intel" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "g5_5-8vcpu-32gb-intel" "c2-16vcpu-32gb" "m-8vcpu-64gb-intel" "m3-8vcpu-64gb" "c-16-intel" "m3-8vcpu-64gb-intel" "c2-16vcpu-32gb-intel" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb-intel" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb-intel" "g-16vcpu-64gb-intel" "gd-16vcpu-64gb-intel" "c5-16vcpu-32gb-intel" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "g6_5-16vcpu-64gb" "g5_5-16vcpu-64gb-intel" "m-16vcpu-128gb-intel" "m3-16vcpu-128gb" "c-32-intel" "m3-16vcpu-128gb-intel" "c2-32vcpu-64gb-intel" "m-24vcpu-192gb" "g-32vcpu-128gb" "so-16vcpu-128gb-intel" "so-16vcpu-128gb" "m6-16vcpu-128gb" "gd-32vcpu-128gb" "so1_5-16vcpu-128gb-intel" "m-24vcpu-192gb-intel" "g-32vcpu-128gb-intel" "m3-24vcpu-192gb" "g-40vcpu-160gb" "gd-32vcpu-128gb-intel" "c5-32vcpu-64gb-intel" "so1_5-16vcpu-128gb" "c-48-intel" "m3-24vcpu-192gb-intel" "gd-40vcpu-160gb" "c2-48vcpu-96gb-intel" "g5_5-32vcpu-128gb-intel" "so-24vcpu-192gb-intel" "so-24vcpu-192gb" "m6-24vcpu-192gb" "m-32vcpu-256gb-intel" "c-60-intel" "so1_5-24vcpu-192gb-intel" "m3-32vcpu-256gb-intel" "g-48vcpu-192gb-intel" "c2-60vcpu-120gb-intel" "gd-48vcpu-192gb-intel" "c5-48vcpu-96gb-intel" "so1_5-24vcpu-192gb" "so-32vcpu-256gb-intel" "g5_5-48vcpu-192gb-intel" "so1_5-32vcpu-256gb-intel" "c5-60vcpu-120gb-intel" "g5_5-60vcpu-240gb-intel")) ((name . "New York 2") (slug . "nyc2") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "g-2vcpu-8gb-intel" "gd-2vcpu-8gb-intel" "s-4vcpu-16gb-amd" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "g5_5-2vcpu-8gb-intel" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m-2vcpu-16gb-intel" "m3-2vcpu-16gb" "c-4-intel" "m3-2vcpu-16gb-intel" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "c2-4vcpu-8gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb-intel" "g-4vcpu-16gb-intel" "gd-4vcpu-16gb-intel" "c5-4vcpu-8gb-intel" "so1_5-2vcpu-16gb" "s-8vcpu-32gb-amd" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "g5_5-4vcpu-16gb-intel" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m-4vcpu-32gb-intel" "m3-4vcpu-32gb" "c-8-intel" "m3-4vcpu-32gb-intel" "c2-8vcpu-16gb-intel" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb-intel" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb-intel" "g-8vcpu-32gb-intel" "gd-8vcpu-32gb-intel" "c5-8vcpu-16gb-intel" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "g5_5-8vcpu-32gb-intel" "c2-16vcpu-32gb" "m-8vcpu-64gb-intel" "m3-8vcpu-64gb" "c-16-intel" "m3-8vcpu-64gb-intel" "c2-16vcpu-32gb-intel" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb-intel" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb-intel" "g-16vcpu-64gb-intel" "gd-16vcpu-64gb-intel" "c5-16vcpu-32gb-intel" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "g6_5-16vcpu-64gb" "g5_5-16vcpu-64gb-intel" "m-16vcpu-128gb-intel" "m3-16vcpu-128gb" "c-32-intel" "m3-16vcpu-128gb-intel" "c2-32vcpu-64gb-intel" "m-24vcpu-192gb" "g-32vcpu-128gb" "so-16vcpu-128gb-intel" "so-16vcpu-128gb" "m6-16vcpu-128gb" "gd-32vcpu-128gb" "so1_5-16vcpu-128gb-intel" "m-24vcpu-192gb-intel" "g-32vcpu-128gb-intel" "m3-24vcpu-192gb" "g-40vcpu-160gb" "gd-32vcpu-128gb-intel" "c5-32vcpu-64gb-intel" "so1_5-16vcpu-128gb" "m3-24vcpu-192gb-intel" "gd-40vcpu-160gb" "g5_5-32vcpu-128gb-intel" "so-24vcpu-192gb-intel" "so-24vcpu-192gb" "m6-24vcpu-192gb" "m-32vcpu-256gb-intel" "so1_5-24vcpu-192gb-intel" "m3-32vcpu-256gb-intel" "g-48vcpu-192gb-intel" "gd-48vcpu-192gb-intel" "so1_5-24vcpu-192gb" "so-32vcpu-256gb-intel" "g5_5-48vcpu-192gb-intel" "so1_5-32vcpu-256gb-intel" "gpu-h100x1-80gb" "gpu-h200x1-141gb" "gpu-h200x8-1128gb")) ((name . "Singapore 1") (slug . "sgp1") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "s-4vcpu-16gb-amd" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m3-2vcpu-16gb" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb" "s-8vcpu-32gb-amd" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m3-4vcpu-32gb" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "c2-16vcpu-32gb" "m3-8vcpu-64gb" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "c-32" "g6_5-16vcpu-64gb" "c2-32vcpu-64gb" "m3-16vcpu-128gb" "c5-32vcpu-64gb" "c-48" "m-24vcpu-192gb" "g-32vcpu-128gb" "so-16vcpu-128gb" "m6-16vcpu-128gb" "gd-32vcpu-128gb" "c2-48vcpu-96gb" "m3-24vcpu-192gb" "g-40vcpu-160gb" "so1_5-16vcpu-128gb" "m-32vcpu-256gb" "gd-40vcpu-160gb" "g6_5-32vcpu-128gb" "c5-48vcpu-96gb" "so-24vcpu-192gb" "m6-24vcpu-192gb" "m3-32vcpu-256gb" "g6_5-40vcpu-160gb" "so1_5-24vcpu-192gb" "so-32vcpu-256gb" "m6-32vcpu-256gb" "so1_5-32vcpu-256gb")) ((name . "London 1") (slug . "lon1") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "g-2vcpu-8gb-intel" "gd-2vcpu-8gb-intel" "s-4vcpu-16gb-amd" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "g5_5-2vcpu-8gb-intel" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m-2vcpu-16gb-intel" "m3-2vcpu-16gb" "c-4-intel" "m3-2vcpu-16gb-intel" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "c2-4vcpu-8gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb-intel" "g-4vcpu-16gb-intel" "gd-4vcpu-16gb-intel" "c5-4vcpu-8gb-intel" "so1_5-2vcpu-16gb" "s-8vcpu-32gb-amd" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "g5_5-4vcpu-16gb-intel" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m-4vcpu-32gb-intel" "m3-4vcpu-32gb" "c-8-intel" "m3-4vcpu-32gb-intel" "c2-8vcpu-16gb-intel" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb-intel" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb-intel" "g-8vcpu-32gb-intel" "gd-8vcpu-32gb-intel" "c5-8vcpu-16gb-intel" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "g5_5-8vcpu-32gb-intel" "c2-16vcpu-32gb" "m-8vcpu-64gb-intel" "m3-8vcpu-64gb" "c-16-intel" "m3-8vcpu-64gb-intel" "c2-16vcpu-32gb-intel" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb-intel" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb-intel" "g-16vcpu-64gb-intel" "gd-16vcpu-64gb-intel" "c5-16vcpu-32gb-intel" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "c-32" "g6_5-16vcpu-64gb" "g5_5-16vcpu-64gb-intel" "c2-32vcpu-64gb" "m-16vcpu-128gb-intel" "m3-16vcpu-128gb" "c-32-intel" "m3-16vcpu-128gb-intel" "c2-32vcpu-64gb-intel" "c5-32vcpu-64gb" "c-48" "m-24vcpu-192gb" "g-32vcpu-128gb" "so-16vcpu-128gb-intel" "so-16vcpu-128gb" "m6-16vcpu-128gb" "gd-32vcpu-128gb" "so1_5-16vcpu-128gb-intel" "c2-48vcpu-96gb" "m-24vcpu-192gb-intel" "g-32vcpu-128gb-intel" "m3-24vcpu-192gb" "g-40vcpu-160gb" "gd-32vcpu-128gb-intel" "c5-32vcpu-64gb-intel" "so1_5-16vcpu-128gb" "c-48-intel" "m3-24vcpu-192gb-intel" "m-32vcpu-256gb" "gd-40vcpu-160gb" "g6_5-32vcpu-128gb" "c2-48vcpu-96gb-intel" "g5_5-32vcpu-128gb-intel" "c5-48vcpu-96gb" "so-24vcpu-192gb-intel" "so-24vcpu-192gb" "m6-24vcpu-192gb" "m-32vcpu-256gb-intel" "c-60-intel" "m3-32vcpu-256gb" "so1_5-24vcpu-192gb-intel" "m3-32vcpu-256gb-intel" "g6_5-40vcpu-160gb" "g-48vcpu-192gb-intel" "c2-60vcpu-120gb-intel" "gd-48vcpu-192gb-intel" "c5-48vcpu-96gb-intel" "so1_5-24vcpu-192gb" "so-32vcpu-256gb-intel" "so-32vcpu-256gb" "m6-32vcpu-256gb" "g5_5-48vcpu-192gb-intel" "so1_5-32vcpu-256gb-intel" "g-60vcpu-240gb-intel" "m-48vcpu-384gb-intel" "gd-60vcpu-240gb-intel" "c5-60vcpu-120gb-intel" "so1_5-32vcpu-256gb" "m3-48vcpu-384gb-intel" "g5_5-60vcpu-240gb-intel" "so-48vcpu-384gb-intel")) ((name . "New York 3") (slug . "nyc3") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "g-2vcpu-8gb-intel" "gd-2vcpu-8gb-intel" "s-4vcpu-16gb-amd" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "g5_5-2vcpu-8gb-intel" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m-2vcpu-16gb-intel" "m3-2vcpu-16gb" "c-4-intel" "m3-2vcpu-16gb-intel" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "c2-4vcpu-8gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb-intel" "g-4vcpu-16gb-intel" "gd-4vcpu-16gb-intel" "c5-4vcpu-8gb-intel" "so1_5-2vcpu-16gb" "s-8vcpu-32gb-amd" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "g5_5-4vcpu-16gb-intel" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m-4vcpu-32gb-intel" "m3-4vcpu-32gb" "c-8-intel" "m3-4vcpu-32gb-intel" "c2-8vcpu-16gb-intel" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb-intel" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb-intel" "g-8vcpu-32gb-intel" "gd-8vcpu-32gb-intel" "c5-8vcpu-16gb-intel" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "g5_5-8vcpu-32gb-intel" "c2-16vcpu-32gb" "m-8vcpu-64gb-intel" "m3-8vcpu-64gb" "c-16-intel" "m3-8vcpu-64gb-intel" "c2-16vcpu-32gb-intel" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb-intel" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb-intel" "g-16vcpu-64gb-intel" "gd-16vcpu-64gb-intel" "c5-16vcpu-32gb-intel" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "g6_5-16vcpu-64gb" "g5_5-16vcpu-64gb-intel" "m-16vcpu-128gb-intel" "m3-16vcpu-128gb" "c-32-intel" "m3-16vcpu-128gb-intel" "c2-32vcpu-64gb-intel" "m-24vcpu-192gb" "g-32vcpu-128gb" "so-16vcpu-128gb-intel" "so-16vcpu-128gb" "m6-16vcpu-128gb" "gd-32vcpu-128gb" "so1_5-16vcpu-128gb-intel" "m-24vcpu-192gb-intel" "g-32vcpu-128gb-intel" "m3-24vcpu-192gb" "g-40vcpu-160gb" "gd-32vcpu-128gb-intel" "c5-32vcpu-64gb-intel" "so1_5-16vcpu-128gb" "c-48-intel" "m3-24vcpu-192gb-intel" "gd-40vcpu-160gb" "c2-48vcpu-96gb-intel" "g5_5-32vcpu-128gb-intel" "so-24vcpu-192gb-intel" "so-24vcpu-192gb" "m6-24vcpu-192gb" "m-32vcpu-256gb-intel" "c-60-intel" "so1_5-24vcpu-192gb-intel" "m3-32vcpu-256gb-intel" "g-48vcpu-192gb-intel" "gd-48vcpu-192gb-intel" "c5-48vcpu-96gb-intel" "so1_5-24vcpu-192gb" "so-32vcpu-256gb-intel" "g5_5-48vcpu-192gb-intel" "so1_5-32vcpu-256gb-intel" "m-48vcpu-384gb-intel" "c5-60vcpu-120gb-intel" "m3-48vcpu-384gb-intel" "g5_5-60vcpu-240gb-intel")) ((name . "Amsterdam 3") (slug . "ams3") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "s-4vcpu-16gb-amd" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m3-2vcpu-16gb" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb" "s-8vcpu-32gb-amd" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m3-4vcpu-32gb" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "c2-16vcpu-32gb" "m3-8vcpu-64gb" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "c-32" "g6_5-16vcpu-64gb" "c2-32vcpu-64gb" "m3-16vcpu-128gb" "c-48" "m-24vcpu-192gb" "g-32vcpu-128gb" "so-16vcpu-128gb" "m6-16vcpu-128gb" "gd-32vcpu-128gb" "c2-48vcpu-96gb" "m3-24vcpu-192gb" "g-40vcpu-160gb" "so1_5-16vcpu-128gb" "gd-40vcpu-160gb" "g6_5-32vcpu-128gb" "so-24vcpu-192gb" "m6-24vcpu-192gb" "gpu-h100x1-80gb")) ((name . "Frankfurt 1") (slug . "fra1") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "s-4vcpu-16gb-amd" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m3-2vcpu-16gb" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb" "s-8vcpu-32gb-amd" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m3-4vcpu-32gb" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "c2-16vcpu-32gb" "m3-8vcpu-64gb" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "c-32" "g6_5-16vcpu-64gb" "c2-32vcpu-64gb" "m3-16vcpu-128gb" "m-24vcpu-192gb" "g-32vcpu-128gb" "gd-32vcpu-128gb" "m3-24vcpu-192gb" "g-40vcpu-160gb" "gd-40vcpu-160gb")) ((name . "Toronto 1") (slug . "tor1") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "g-2vcpu-8gb-intel" "gd-2vcpu-8gb-intel" "s-4vcpu-16gb-amd" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "g5_5-2vcpu-8gb-intel" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m-2vcpu-16gb-intel" "m3-2vcpu-16gb" "c-4-intel" "m3-2vcpu-16gb-intel" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "c2-4vcpu-8gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb-intel" "g-4vcpu-16gb-intel" "gd-4vcpu-16gb-intel" "c5-4vcpu-8gb-intel" "so1_5-2vcpu-16gb" "s-8vcpu-32gb-amd" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "g5_5-4vcpu-16gb-intel" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m-4vcpu-32gb-intel" "m3-4vcpu-32gb" "c-8-intel" "m3-4vcpu-32gb-intel" "c2-8vcpu-16gb-intel" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb-intel" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb-intel" "g-8vcpu-32gb-intel" "gd-8vcpu-32gb-intel" "c5-8vcpu-16gb-intel" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "g5_5-8vcpu-32gb-intel" "c2-16vcpu-32gb" "m-8vcpu-64gb-intel" "m3-8vcpu-64gb" "c-16-intel" "m3-8vcpu-64gb-intel" "c2-16vcpu-32gb-intel" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb-intel" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb-intel" "gpu-4000adax1-20gb" "g-16vcpu-64gb-intel" "gd-16vcpu-64gb-intel" "c5-16vcpu-32gb-intel" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "g6_5-16vcpu-64gb" "g5_5-16vcpu-64gb-intel" "m-16vcpu-128gb-intel" "m3-16vcpu-128gb" "c-32-intel" "m3-16vcpu-128gb-intel" "c2-32vcpu-64gb-intel" "m-24vcpu-192gb" "g-32vcpu-128gb" "so-16vcpu-128gb-intel" "so-16vcpu-128gb" "m6-16vcpu-128gb" "gd-32vcpu-128gb" "so1_5-16vcpu-128gb-intel" "gpu-6000adax1-48gb" "m-24vcpu-192gb-intel" "g-32vcpu-128gb-intel" "m3-24vcpu-192gb" "gd-32vcpu-128gb-intel" "c5-32vcpu-64gb-intel" "so1_5-16vcpu-128gb" "c-48-intel" "m3-24vcpu-192gb-intel" "m-32vcpu-256gb" "g6_5-32vcpu-128gb" "c2-48vcpu-96gb-intel" "g5_5-32vcpu-128gb-intel" "so-24vcpu-192gb-intel" "so-24vcpu-192gb" "m6-24vcpu-192gb" "m-32vcpu-256gb-intel" "c-60-intel" "m3-32vcpu-256gb" "so1_5-24vcpu-192gb-intel" "m3-32vcpu-256gb-intel" "g-48vcpu-192gb-intel" "c2-60vcpu-120gb-intel" "gd-48vcpu-192gb-intel" "c5-48vcpu-96gb-intel" "so1_5-24vcpu-192gb" "so-32vcpu-256gb-intel" "so-32vcpu-256gb" "m6-32vcpu-256gb" "g5_5-48vcpu-192gb-intel" "so1_5-32vcpu-256gb-intel" "g-60vcpu-240gb-intel" "m-48vcpu-384gb-intel" "gd-60vcpu-240gb-intel" "c5-60vcpu-120gb-intel" "gpu-h100x1-80gb" "so1_5-32vcpu-256gb" "m3-48vcpu-384gb-intel" "g5_5-60vcpu-240gb-intel" "so-48vcpu-384gb-intel")) ((name . "San Francisco 2") (slug . "sfo2") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-120gb-intel" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "g-2vcpu-8gb-intel" "gd-2vcpu-8gb-intel" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "g5_5-2vcpu-8gb-intel" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m-2vcpu-16gb-intel" "m3-2vcpu-16gb" "c-4-intel" "m3-2vcpu-16gb-intel" "c2-4vcpu-8gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb-intel" "g-4vcpu-16gb-intel" "gd-4vcpu-16gb-intel" "c5-4vcpu-8gb-intel" "so1_5-2vcpu-16gb" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "g5_5-4vcpu-16gb-intel" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m-4vcpu-32gb-intel" "m3-4vcpu-32gb" "c-8-intel" "m3-4vcpu-32gb-intel" "c2-8vcpu-16gb-intel" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb-intel" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb-intel" "g-8vcpu-32gb-intel" "gd-8vcpu-32gb-intel" "c5-8vcpu-16gb-intel" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "g5_5-8vcpu-32gb-intel" "c2-16vcpu-32gb" "m-8vcpu-64gb-intel" "m3-8vcpu-64gb" "c-16-intel" "m3-8vcpu-64gb-intel" "c2-16vcpu-32gb-intel" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb-intel" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb-intel" "g-16vcpu-64gb-intel" "gd-16vcpu-64gb-intel" "c5-16vcpu-32gb-intel" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "c-32" "g6_5-16vcpu-64gb" "g5_5-16vcpu-64gb-intel" "c2-32vcpu-64gb" "m-16vcpu-128gb-intel" "m3-16vcpu-128gb" "c-32-intel" "m3-16vcpu-128gb-intel" "c2-32vcpu-64gb-intel" "c5-32vcpu-64gb" "c-48" "m-24vcpu-192gb" "g-32vcpu-128gb" "so-16vcpu-128gb-intel" "so-16vcpu-128gb" "m6-16vcpu-128gb" "gd-32vcpu-128gb" "so1_5-16vcpu-128gb-intel" "c2-48vcpu-96gb" "m-24vcpu-192gb-intel" "g-32vcpu-128gb-intel" "m3-24vcpu-192gb" "g-40vcpu-160gb" "gd-32vcpu-128gb-intel" "c5-32vcpu-64gb-intel" "so1_5-16vcpu-128gb" "c-48-intel" "m3-24vcpu-192gb-intel" "m-32vcpu-256gb" "gd-40vcpu-160gb" "g6_5-32vcpu-128gb" "c2-48vcpu-96gb-intel" "g5_5-32vcpu-128gb-intel" "so-24vcpu-192gb-intel" "so-24vcpu-192gb" "m6-24vcpu-192gb" "m-32vcpu-256gb-intel" "c-60-intel" "m3-32vcpu-256gb" "so1_5-24vcpu-192gb-intel" "m3-32vcpu-256gb-intel" "g-48vcpu-192gb-intel" "c2-60vcpu-120gb-intel" "gd-48vcpu-192gb-intel" "c5-48vcpu-96gb-intel" "so1_5-24vcpu-192gb" "so-32vcpu-256gb-intel" "so-32vcpu-256gb" "m6-32vcpu-256gb" "g5_5-48vcpu-192gb-intel" "so1_5-32vcpu-256gb-intel" "g-60vcpu-240gb-intel" "m-48vcpu-384gb-intel" "gd-60vcpu-240gb-intel" "c5-60vcpu-120gb-intel" "so1_5-32vcpu-256gb" "m3-48vcpu-384gb-intel" "g5_5-60vcpu-240gb-intel" "so-48vcpu-384gb-intel")) ((name . "Bangalore 1") (slug . "blr1") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "g-2vcpu-8gb-intel" "gd-2vcpu-8gb-intel" "s-4vcpu-16gb-amd" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "g5_5-2vcpu-8gb-intel" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m-2vcpu-16gb-intel" "m3-2vcpu-16gb" "c-4-intel" "m3-2vcpu-16gb-intel" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "c2-4vcpu-8gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb-intel" "g-4vcpu-16gb-intel" "gd-4vcpu-16gb-intel" "c5-4vcpu-8gb-intel" "so1_5-2vcpu-16gb" "s-8vcpu-32gb-amd" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "g5_5-4vcpu-16gb-intel" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m-4vcpu-32gb-intel" "m3-4vcpu-32gb" "c-8-intel" "m3-4vcpu-32gb-intel" "c2-8vcpu-16gb-intel" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb-intel" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb-intel" "g-8vcpu-32gb-intel" "gd-8vcpu-32gb-intel" "c5-8vcpu-16gb-intel" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "g5_5-8vcpu-32gb-intel" "c2-16vcpu-32gb" "m-8vcpu-64gb-intel" "m3-8vcpu-64gb" "c-16-intel" "m3-8vcpu-64gb-intel" "c2-16vcpu-32gb-intel" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb-intel" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb-intel" "g-16vcpu-64gb-intel" "gd-16vcpu-64gb-intel" "c5-16vcpu-32gb-intel" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "c-32" "g6_5-16vcpu-64gb" "g5_5-16vcpu-64gb-intel" "c2-32vcpu-64gb" "m-16vcpu-128gb-intel" "m3-16vcpu-128gb" "c-32-intel" "m3-16vcpu-128gb-intel" "c2-32vcpu-64gb-intel" "c5-32vcpu-64gb" "c-48" "m-24vcpu-192gb" "g-32vcpu-128gb" "so-16vcpu-128gb-intel" "so-16vcpu-128gb" "m6-16vcpu-128gb" "gd-32vcpu-128gb" "so1_5-16vcpu-128gb-intel" "c2-48vcpu-96gb" "m-24vcpu-192gb-intel" "g-32vcpu-128gb-intel" "m3-24vcpu-192gb" "g-40vcpu-160gb" "gd-32vcpu-128gb-intel" "c5-32vcpu-64gb-intel" "so1_5-16vcpu-128gb" "c-48-intel" "m3-24vcpu-192gb-intel" "m-32vcpu-256gb" "gd-40vcpu-160gb" "g6_5-32vcpu-128gb" "c2-48vcpu-96gb-intel" "g5_5-32vcpu-128gb-intel" "c5-48vcpu-96gb" "so-24vcpu-192gb-intel" "so-24vcpu-192gb" "m6-24vcpu-192gb" "m-32vcpu-256gb-intel" "c-60-intel" "m3-32vcpu-256gb" "so1_5-24vcpu-192gb-intel" "m3-32vcpu-256gb-intel" "g6_5-40vcpu-160gb" "g-48vcpu-192gb-intel" "c2-60vcpu-120gb-intel" "gd-48vcpu-192gb-intel" "c5-48vcpu-96gb-intel" "so1_5-24vcpu-192gb" "so-32vcpu-256gb-intel" "so-32vcpu-256gb" "m6-32vcpu-256gb" "g5_5-48vcpu-192gb-intel" "so1_5-32vcpu-256gb-intel" "m-48vcpu-384gb-intel" "c5-60vcpu-120gb-intel" "so1_5-32vcpu-256gb" "m3-48vcpu-384gb-intel" "g5_5-60vcpu-240gb-intel")) ((name . "San Francisco 3") (slug . "sfo3") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "g-2vcpu-8gb-intel" "gd-2vcpu-8gb-intel" "s-4vcpu-16gb-amd" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "g5_5-2vcpu-8gb-intel" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m-2vcpu-16gb-intel" "m3-2vcpu-16gb" "c-4-intel" "m3-2vcpu-16gb-intel" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "c2-4vcpu-8gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb-intel" "g-4vcpu-16gb-intel" "gd-4vcpu-16gb-intel" "c5-4vcpu-8gb-intel" "so1_5-2vcpu-16gb" "s-8vcpu-32gb-amd" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "g5_5-4vcpu-16gb-intel" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m-4vcpu-32gb-intel" "m3-4vcpu-32gb" "c-8-intel" "m3-4vcpu-32gb-intel" "c2-8vcpu-16gb-intel" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb-intel" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb-intel" "g-8vcpu-32gb-intel" "gd-8vcpu-32gb-intel" "c5-8vcpu-16gb-intel" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "g5_5-8vcpu-32gb-intel" "c2-16vcpu-32gb" "m-8vcpu-64gb-intel" "m3-8vcpu-64gb" "c-16-intel" "m3-8vcpu-64gb-intel" "c2-16vcpu-32gb-intel" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb-intel" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb-intel" "g-16vcpu-64gb-intel" "gd-16vcpu-64gb-intel" "c5-16vcpu-32gb-intel" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "c-32" "g6_5-16vcpu-64gb" "g5_5-16vcpu-64gb-intel" "c2-32vcpu-64gb" "m-16vcpu-128gb-intel" "m3-16vcpu-128gb" "c-32-intel" "m3-16vcpu-128gb-intel" "c2-32vcpu-64gb-intel" "c5-32vcpu-64gb" "c-48" "m-24vcpu-192gb" "g-32vcpu-128gb" "so-16vcpu-128gb-intel" "so-16vcpu-128gb" "m6-16vcpu-128gb" "gd-32vcpu-128gb" "so1_5-16vcpu-128gb-intel" "c2-48vcpu-96gb" "m-24vcpu-192gb-intel" "g-32vcpu-128gb-intel" "m3-24vcpu-192gb" "g-40vcpu-160gb" "gd-32vcpu-128gb-intel" "c5-32vcpu-64gb-intel" "so1_5-16vcpu-128gb" "c-48-intel" "m3-24vcpu-192gb-intel" "m-32vcpu-256gb" "gd-40vcpu-160gb" "g6_5-32vcpu-128gb" "c2-48vcpu-96gb-intel" "g5_5-32vcpu-128gb-intel" "so-24vcpu-192gb-intel" "so-24vcpu-192gb" "m6-24vcpu-192gb" "m-32vcpu-256gb-intel" "c-60-intel" "m3-32vcpu-256gb" "so1_5-24vcpu-192gb-intel" "m3-32vcpu-256gb-intel" "g6_5-40vcpu-160gb" "g-48vcpu-192gb-intel" "c2-60vcpu-120gb-intel" "gd-48vcpu-192gb-intel" "c5-48vcpu-96gb-intel" "so1_5-24vcpu-192gb" "so-32vcpu-256gb-intel" "so-32vcpu-256gb" "m6-32vcpu-256gb" "g5_5-48vcpu-192gb-intel" "so1_5-32vcpu-256gb-intel" "g-60vcpu-240gb-intel" "m-48vcpu-384gb-intel" "gd-60vcpu-240gb-intel" "c5-60vcpu-120gb-intel" "so1_5-32vcpu-256gb" "m3-48vcpu-384gb-intel" "g5_5-60vcpu-240gb-intel" "so-48vcpu-384gb-intel")) ((name . "Sydney 1") (slug . "syd1") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-512mb-10gb" "s-1vcpu-1gb" "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "c-2" "c2-2vcpu-4gb" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "c5-2vcpu-4gb" "g-2vcpu-8gb" "s-4vcpu-8gb-240gb-intel" "gd-2vcpu-8gb" "s-4vcpu-16gb-amd" "m-2vcpu-16gb" "c-4" "g6_5-2vcpu-8gb" "c2-4vcpu-8gb" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb" "m3-2vcpu-16gb" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "c5-4vcpu-8gb" "g-4vcpu-16gb" "s-8vcpu-16gb-480gb-intel" "so-2vcpu-16gb" "m6-2vcpu-16gb" "gd-4vcpu-16gb" "so1_5-2vcpu-16gb" "s-8vcpu-32gb-amd" "m-4vcpu-32gb" "c-8" "g6_5-4vcpu-16gb" "c2-8vcpu-16gb" "s-8vcpu-32gb-640gb-intel" "m3-4vcpu-32gb" "c5-8vcpu-16gb" "g-8vcpu-32gb" "so-4vcpu-32gb" "m6-4vcpu-32gb" "gd-8vcpu-32gb" "so1_5-4vcpu-32gb" "m-8vcpu-64gb" "c-16" "g6_5-8vcpu-32gb" "c2-16vcpu-32gb" "m3-8vcpu-64gb" "c5-16vcpu-32gb" "g-16vcpu-64gb" "so-8vcpu-64gb" "m6-8vcpu-64gb" "gd-16vcpu-64gb" "so1_5-8vcpu-64gb" "m-16vcpu-128gb" "c-32" "g6_5-16vcpu-64gb" "c2-32vcpu-64gb" "m3-16vcpu-128gb" "c5-32vcpu-64gb" "c-48" "m-24vcpu-192gb" "g-32vcpu-128gb" "so-16vcpu-128gb" "m6-16vcpu-128gb" "gd-32vcpu-128gb" "c2-48vcpu-96gb" "m3-24vcpu-192gb" "g-40vcpu-160gb" "so1_5-16vcpu-128gb" "m-32vcpu-256gb" "gd-40vcpu-160gb" "g6_5-32vcpu-128gb" "c5-48vcpu-96gb" "so-24vcpu-192gb" "m6-24vcpu-192gb" "m3-32vcpu-256gb" "g6_5-40vcpu-160gb" "so1_5-24vcpu-192gb" "so-32vcpu-256gb" "m6-32vcpu-256gb" "so1_5-32vcpu-256gb")) ((name . "Atlanta 1") (slug . "atl1") (features "backups" "ipv6" "metadata" "install_agent" "storage" "image_transfer") (available . #t) (sizes "s-1vcpu-1gb-amd" "s-1vcpu-1gb-intel" "s-1vcpu-1gb-35gb-intel" "s-1vcpu-2gb-amd" "s-1vcpu-2gb-intel" "s-1vcpu-2gb-70gb-intel" "s-2vcpu-2gb-amd" "s-2vcpu-2gb-intel" "s-2vcpu-2gb-90gb-intel" "s-2vcpu-4gb-amd" "s-2vcpu-4gb-intel" "s-2vcpu-4gb-120gb-intel" "s-2vcpu-8gb-amd" "s-2vcpu-8gb-160gb-intel" "s-4vcpu-8gb-amd" "s-4vcpu-8gb-intel" "s-4vcpu-8gb-240gb-intel" "s-4vcpu-16gb-amd" "s-4vcpu-16gb-320gb-intel" "s-8vcpu-16gb-amd" "s-8vcpu-16gb-intel" "s-8vcpu-16gb-480gb-intel" "s-8vcpu-32gb-amd" "s-8vcpu-32gb-640gb-intel")))) diff --git a/src/nassella.scm b/src/nassella.scm index ac0a821..d8c3c15 100644 --- a/src/nassella.scm +++ b/src/nassella.scm @@ -1,3 +1,19 @@ +;; Copyright 2025-2026 Thomas Hintz + +;; This file is part of Nassella. + +;; Nassella is free software: you can redistribute it and/or modify it under the +;; terms of the GNU Affero General Public License as published by the Free +;; Software Foundation, either version 3 of the License, or (at your option) any +;; later version. + +;; Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +;; WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +;; FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +;; You should have received a copy of the GNU Affero General Public License +;; along with Nassella. If not, see . + ;; (load "src/db.scm") ;; (load "src/mocks.scm") (include "db") diff --git a/src/run.scm b/src/run.scm index 8b33b6f..d7d8ba3 100644 --- a/src/run.scm +++ b/src/run.scm @@ -1,3 +1,19 @@ +;; Copyright 2025-2026 Thomas Hintz + +;; This file is part of Nassella. + +;; Nassella is free software: you can redistribute it and/or modify it under the +;; terms of the GNU Affero General Public License as published by the Free +;; Software Foundation, either version 3 of the License, or (at your option) any +;; later version. + +;; Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +;; WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +;; FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +;; You should have received a copy of the GNU Affero General Public License +;; along with Nassella. If not, see . + (include "nassella") (import (chicken process-context) spiffy diff --git a/src/test.scm b/src/test.scm index 9ee1b6f..9b9611e 100644 --- a/src/test.scm +++ b/src/test.scm @@ -1,3 +1,19 @@ +;; Copyright 2025-2026 Thomas Hintz + +;; This file is part of Nassella. + +;; Nassella is free software: you can redistribute it and/or modify it under the +;; terms of the GNU Affero General Public License as published by the Free +;; Software Foundation, either version 3 of the License, or (at your option) any +;; later version. + +;; Nassella is distributed in the hope that it will be useful, but WITHOUT ANY +;; WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS +;; FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. + +;; You should have received a copy of the GNU Affero General Public License +;; along with Nassella. If not, see . + (load "nassella.scm") (import test spiffy (schematra test) postgresql uri-common