145 lines
5.2 KiB
Makefile
145 lines
5.2 KiB
Makefile
# Copyright 2025-2026 Thomas Hintz
|
|
|
|
# This file is part of Nassella.
|
|
|
|
# Nassella is free software: you can redistribute it and/or modify it under the
|
|
# terms of the GNU Affero General Public License as published by the Free
|
|
# Software Foundation, either version 3 of the License, or (at your option) any
|
|
# later version.
|
|
|
|
# Nassella is distributed in the hope that it will be useful, but WITHOUT ANY
|
|
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
|
|
# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
|
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
# along with Nassella. If not, see <https://www.gnu.org/licenses/>.
|
|
|
|
TERRAFORM_ENV := production
|
|
|
|
config_dir := ./config/
|
|
apps_config := $(config_dir)apps.config
|
|
|
|
IMAGE_DEPS :=
|
|
|
|
COMPOSE_ENVS := $(shell if [ -d app/ ]; then find app/ -type f -name '.compose-env'; fi)
|
|
|
|
ALL_APPS_FILES = $(shell find all-apps/ -type f -name '*')
|
|
|
|
APP_MAKEFILES := $(shell if [ -d app/ ]; then find app/ -type f -name 'Makefile'; fi)
|
|
-include $(APP_MAKEFILES)
|
|
|
|
# .dirstamp plus && $@ is like make magic to get this rule
|
|
# to only run if the contents of all-apps changes
|
|
app/.dirstamp: copy-apps.sh $(apps_config) $(ALL_APPS_FILES)
|
|
rm -Rf app/
|
|
mkdir app/
|
|
cp all-apps/app.service app/
|
|
cp all-apps/restic-snapshot.service app/
|
|
./make-top-level-docker-compose.sh $(apps_config) > app/docker-compose.yaml
|
|
./copy-apps.sh $(apps_config) && touch $@
|
|
|
|
# # compose .env files
|
|
# # (compose only supports one .env file at the root by default)
|
|
app/.env: $(apps_config) $(COMPOSE_ENVS)
|
|
find app/ -name ".compose-env" -exec cat > app/.env {} +
|
|
|
|
# Caddy / lb
|
|
app/lb/lb.env: $(apps_config) app/.dirstamp make-caddyfile-env.sh
|
|
mkdir -p app/lb
|
|
./make-caddyfile-env.sh $(apps_config) > $@
|
|
|
|
app/lb/Caddyfile: $(apps_config) app/.dirstamp
|
|
echo "(maintenance_intercept) {" > app/lb/Caddyfile-tmp
|
|
echo "@maintenanceModeActive file /maintenance/maintenance.on {" >> app/lb/Caddyfile-tmp
|
|
echo " root /" >> app/lb/Caddyfile-tmp
|
|
echo "}" >> app/lb/Caddyfile-tmp
|
|
echo "handle @maintenanceModeActive {" >> app/lb/Caddyfile-tmp
|
|
echo " respond \"We are performing a maintenance, come back later\" 503" >> app/lb/Caddyfile-tmp
|
|
echo "}" >> app/lb/Caddyfile-tmp
|
|
echo "}" >> app/lb/Caddyfile-tmp
|
|
find app/ -name "Caddyfile" -exec cat >> app/lb/Caddyfile-tmp {} +
|
|
mv app/lb/Caddyfile-tmp $@
|
|
|
|
# Backups / Restic / Backblaze
|
|
restic-env: $(apps_config) make-restic-generated.sh
|
|
./make-restic-generated.sh $(apps_config) > restic-env
|
|
restic-password: $(apps_config) make-restic-password.sh
|
|
./make-restic-password.sh $(apps_config) > restic-password
|
|
|
|
app.tar.gz: app/.dirstamp \
|
|
app/.env \
|
|
app/lb/lb.env \
|
|
app/lb/Caddyfile
|
|
tar cfz app.tar.gz app/
|
|
|
|
ignition.json: cl.yaml app/.dirstamp \
|
|
$(IMAGE_DEPS) \
|
|
app/lb/lb.env \
|
|
app/lb/Caddyfile \
|
|
restic-env \
|
|
restic-password \
|
|
restic-restore.sh \
|
|
restic-snapshot.sh \
|
|
restic-scheduled-snapshot.sh \
|
|
app/.env \
|
|
$(config_dir)ssh-keys \
|
|
app.tar.gz
|
|
cat cl.yaml | docker run --rm --volume $(config_dir)/ssh-keys:/pwd/ssh-keys --volume ${PWD}:/pwd --workdir /pwd -i quay.io/coreos/butane:latest -d /pwd > ignition.json
|
|
|
|
generated.tfvars: $(apps_config) make-generated.sh
|
|
./make-generated.sh $(apps_config) > generated.tfvars
|
|
|
|
plan: ignition.json $(config_dir)$(TERRAFORM_ENV).tfvars generated.tfvars
|
|
terraform init
|
|
bash -c "terraform plan -var-file=<(cat $(config_dir)$(TERRAFORM_ENV).tfvars generated.tfvars)"
|
|
|
|
.PHONY: announce-start
|
|
announce-start:
|
|
echo "NASSELLA_CONFIG: start"
|
|
|
|
# run this first to generate the all/ dir
|
|
# then we can 'include' all the Makefiles in all/
|
|
.PHONY: preapply
|
|
preapply: app/.dirstamp
|
|
echo "app generated"
|
|
|
|
apply: announce-start restic-init ignition.json $(config_dir)$(TERRAFORM_ENV).tfvars generated.tfvars
|
|
echo "NASSELLA_CONFIG: end"
|
|
terraform init
|
|
bash -c "terraform apply -auto-approve -input=false -var-file=<(cat $(config_dir)$(TERRAFORM_ENV).tfvars generated.tfvars)"
|
|
|
|
destroy: ignition.json $(config_dir)$(TERRAFORM_ENV).tfvars generated.tfvars
|
|
terraform init
|
|
bash -c "terraform destroy -auto-approve -input=false -var-file=<(cat $(config_dir)$(TERRAFORM_ENV).tfvars generated.tfvars)"
|
|
|
|
.PHONY: restic-init
|
|
restic-init: $(apps_config) restic-password
|
|
./init-restic.sh $(apps_config)
|
|
|
|
## just an easy way to see snapshots that have been taken
|
|
.PHONY: restic-snapshots
|
|
restic-snapshots: $(apps_config) restic-password
|
|
./restic-snapshots.sh $(apps_config)
|
|
|
|
.PHONY: archive
|
|
archive:
|
|
echo "(" > all-apps/root-napp.scm
|
|
find all-apps/ -name "napp.scm" -exec cat >> all-apps/root-napp.scm {} +
|
|
echo ")" >> all-apps/root-napp.scm
|
|
tar -cf nassella-latest.tar all-apps cl.yaml init-restic.sh main.tf make-caddyfile-env.sh make-top-level-docker-compose.sh Makefile \
|
|
make-generated.sh make-restic-generated.sh make-restic-password.sh restic-snapshots.sh copy-apps.sh restic-restore.sh restic-snapshot.sh \
|
|
restic-scheduled-snapshot.sh \
|
|
.terraform.lock.hcl
|
|
cp nassella-latest.tar src/
|
|
|
|
## to help me remember the command to run to test the config locally
|
|
testlocalhost:
|
|
curl -k --resolve localhost:443:146.190.12.129 https://localhost
|
|
|
|
flatcarbuild: ignition.json
|
|
cp --reflink=auto flatcar/flatcar_production_qemu_image.img.fresh flatcar/flatcar_production_qemu_image.img
|
|
|
|
flatcarrun:
|
|
./flatcar/flatcar_production_qemu.sh -i ignition.json
|
|
|