head-vps/dns/compose.yaml
Elias Rhouzlane 5f715f2bdf feat(dns): the VPS applies DNS itself (doco-cd stack, OpenTofu + fnox image, state in a volume); private GitHub mirror
The stack is not registered in .doco-cd.yml yet: first a reviewed plan.
2026-11-03 18:14:17 +01:00

22 lines
619 B
YAML

# The DNS workflow, deployed by doco-cd like any stack: a push that changes dns/ rebuilds the image
# and reruns `tofu apply` once (restart: "no"). Its output is the record of each run:
# ssh fuckingtech.ch 'docker logs dns-apply-1'
# Plan only, by hand: ssh fuckingtech.ch 'docker run --rm -v /etc/head-vps/age.key:/run/secrets/age_key:ro -v dns_state:/state dns-apply plan'
services:
apply:
image: dns-apply
build:
context: .
restart: "no"
secrets:
- age_key
volumes:
- state:/state
secrets:
age_key:
file: /etc/head-vps/age.key
volumes:
state:
name: dns_state