halkyon-days/halkyon
Watch
1
0
Fork
You've already forked halkyon
 0
Code Issues Pull requests Projects Releases 37 Packages Wiki Activity Actions

chore: the servers are named by the domain they serve

Browse source 
Files called the servers by their own host names, which are the
operator's and say nothing a reader needs. They now say which domain a
server serves: learn.halkyon.eu's server (the instance and its CI
runner), the halkyon.app server (Forgejo and the F-Droid repository).

Two names are settings rather than words. CI's runner label becomes
`instance` (`runs-on: instance`, `labels: ["instance:host"]`): the
runner reads its installed copy of deploy/runner/config.yml, so jobs
wait in the queue until that copy is updated and the runner restarted.
The SSH aliases the scripts and docs use become `learn-deploy` and
`fdroid-upload`. AGENTS.md says to keep it so.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>
This commit is contained in:
Tizian 「ティツィアーン」 2026-10-13 23:11:40 +02:00
commit 93b0c0a6b0
Signed by: raisondetredev
GPG key ID: 07F6FCF405488B64
1 changed files with 32 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

6
deploy/backups.md
View file

@ -55,7 +55,7 @@ Once, in this order. The commands name who runs them, and where.
network. Samba and WebDAV stay off; FTP and SFTP on port 22 can't be turned off.
2. Set up **automatic snapshots**: daily, at a fixed time, with as many kept as the box
allows (10 on a BX11).
3. Add a **sub-account** for this server: its own directory (e.g. `sahaquiel`), **SSH
3. Add a **sub-account** for this server: its own directory (e.g. `learn-halkyon-eu`), **SSH
support** and **External reachability** on, Samba and WebDAV off, not read-only
(restic deletes what it prunes). Note its user name (`uXXXXX-subN`) and password; the
password is needed once, below.
@ -68,11 +68,11 @@ sudo apt install restic
### 3. The repository (deploy, on the server)
As `deploy` (`ssh sahaquiel-deploy` on learn.halkyon.eu). A key without a passphrase,
As `deploy` (`ssh learn-deploy` on learn.halkyon.eu). A key without a passphrase,
since nobody is there to type it at 03:00:
```sh
ssh-keygen -t ed25519 -N '' -C 'deploy@sahaquiel: backups' -f ~/.ssh/storagebox
ssh-keygen -t ed25519 -N '' -C 'deploy: learn.halkyon.eu backups' -f ~/.ssh/storagebox
cat >>~/.ssh/config <<'EOF'
Host storagebox
HostName uXXXXX-subN.your-storagebox.de