site-setup/functionalidiot.com.tf

# gitea is a PITA to automate installation of, watch this pr for when it'll be
# fully setup-able from the cli https://github.com/go-gitea/gitea/issues/9210
variable "gitea_db_passwd" {
  type = string
}

variable "cloudflare_functionalidiot_zoneid" {
  type = string
}

resource "cloudflare_record" "root" {
  depends_on = [
    linode_instance.prod,
    cloudflare_record.functionalidiot_com_ns1,
    cloudflare_record.functionalidiot_com_ns2 ]
  zone_id    = var.cloudflare_functionalidiot_zoneid
  name       = "@"
  value      = linode_instance.prod.ip_address
  type       = "A"
  ttl        = 120
}

resource "cloudflare_record" "splat" {
  depends_on = [
    linode_instance.prod,
    cloudflare_record.functionalidiot_com_ns1,
    cloudflare_record.functionalidiot_com_ns2 ]
  zone_id    = var.cloudflare_functionalidiot_zoneid
  name       = "*"
  value      = linode_instance.prod.ip_address
  type       = "A"
  ttl        = 1
}

# resource "cloudflare_record" "root6" {
#   depends_on = [
#     linode_instance.prod,
#     cloudflare_record.functionalidiot_com_ns1,
#     cloudflare_record.functionalidiot_com_ns2 ]
#   zone_id    = var.cloudflare_functionalidiot_zoneid
#   name       = "@"
#   value      = local.ipv6
#   type       = "AAAA"
#   ttl        = 120
# }

# resource "cloudflare_record" "splat6" {
#   depends_on = [
#     linode_instance.prod,
#     cloudflare_record.functionalidiot_com_ns1,
#     cloudflare_record.functionalidiot_com_ns2 ]
#   zone_id    = var.cloudflare_functionalidiot_zoneid
#   name       = "*"
#   value      = local.ipv6
#   type       = "AAAA"
#   ttl        = 1
#   proxied    = true
# }

resource "cloudflare_record" "www" {
  depends_on = [
    cloudflare_record.root,
    cloudflare_record.splat ]
  zone_id    = var.cloudflare_functionalidiot_zoneid
  name       = "www"
  value      = "functionalidiot.com"
  type       = "CNAME"
  ttl        = 120
}

resource "cloudflare_record" "git" {
  depends_on = [
    cloudflare_record.root,
    cloudflare_record.splat ]
  zone_id    = var.cloudflare_functionalidiot_zoneid
  name       = "git"
  value      = "functionalidiot.com"
  type       = "CNAME"
  ttl        = 120
}

resource "cloudflare_record" "functionalidiot_com_ns1" {
  zone_id    = var.cloudflare_functionalidiot_zoneid
  name       = "@"
  value      = "mitch.ns.cloudflare.com"
  type       = "NS"
}

resource "cloudflare_record" "functionalidiot_com_ns2" {
  zone_id    = var.cloudflare_functionalidiot_zoneid
  name       = "@"
  value      = "tegan.ns.cloudflare.com"
  type       = "NS"
}

resource "null_resource" "functionalidiot_com_setup_new_gitea" {
  depends_on = [ null_resource.post_setup ]
  count      = fileexists("${path.module}/attic/var-lib-gitea.tar") ? 0 : 1
  connection {
    host        = linode_instance.prod.ip_address
    user        = "root"
    private_key = file("~/.ssh/id_rsa")
  }
  provisioner "file" {
    source      = "setup_gitea.sh"
    destination = "/tmp/setup_gitea.sh"
  }
  provisioner "remote-exec" {
    inline = [<<FIN
install -m755 /tmp/setup_gitea.sh /usr/local/bin/setup_gitea

rm -f /tmp/setup_gitea.sh

rc-update add gitea default

skey=$(su - gitea -c "gitea generate secret SECRET_KEY")
itoken=$(su - gitea -c "gitea generate secret INTERNAL_TOKEN")

SECRET_KEY=$skey INTERNAL_TOKEN=$itoken  /usr/local/bin/setup_gitea

rc-service gitea restart

sleep 3

chown gitea:www-data /var/lib/gitea/db/gitea.db

su - gitea -c "gitea migrate --config /etc/gitea/app.ini"

su - gitea -c "gitea admin create-user --username mitch --password ${var.gitea_db_passwd} --email spam@mitchty.com --admin --config /etc/gitea/app.ini"
FIN
    ]
  }
}

resource "null_resource" "functionalidiot_com_setup_saved_uacme" {
  depends_on = [ null_resource.post_setup ]
  count      = fileexists("${path.module}/attic/etc-ssl-uacme.tar") ? 1 : 0
  connection {
    host        = linode_instance.prod.ip_address
    user        = "root"
    private_key = file("~/.ssh/id_rsa")
  }
  provisioner "file" {
    source      = "etc-ssl-uacme.tar"
    destination = "/tmp/etc-ssl-uacme.tar"
  }
  # TODO: Finish post untar setup
  provisioner "remote-exec" {
    inline = [<<FIN
cd /
tar xvf /tmp/etc-ssl-uacme.tar
FIN
    ]
  }
}

resource "null_resource" "functionalidiot_com_setup_saved_gitea" {
  depends_on = [ null_resource.post_setup ]
  count      = fileexists("${path.module}/attic/var-lib-gitea.tar") ? 1 : 0
  connection {
    host        = linode_instance.prod.ip_address
    user        = "root"
    private_key = file("~/.ssh/id_rsa")
  }
  provisioner "file" {
    source      = "var-lib-gitea.tar"
    destination = "/tmp/var-lib-gitea.tar"
  }
  # TODO: Finish post untar setup
  provisioner "remote-exec" {
    inline = [<<FIN
cd /
tar xvf /tmp/var-lib-gitea.tar
rc-update add gitea default
rc-service gitea restart
FIN
    ]
  }
}

resource "null_resource" "functionalidiot_com_setup_new_nginx" {
  depends_on = [
    null_resource.post_setup,
    null_resource.functionalidiot_com_setup_saved_gitea,
    null_resource.functionalidiot_com_setup_saved_uacme
  ]
  connection {
    host        = linode_instance.prod.ip_address
    user        = "root"
    private_key = file("~/.ssh/id_rsa")
  }
  provisioner "file" {
    source      = "http-default.conf"
    destination = "/tmp/http-default.conf"
  }
  provisioner "file" {
    source      = "https-functionalidiot.com.conf"
    destination = "/tmp/https-functionalidiot.com.conf"
  }
  provisioner "remote-exec" {
    inline = [<<FIN
[ -e /etc/nginx/conf.d/default.conf ] && mv /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf.disable
install -m644 /tmp/http-default.conf /etc/nginx/conf.d/http-default.conf
install -m644 /tmp/https-functionalidiot.com.conf /etc/nginx/conf.d/https-functionalidiot.com.conf
rm -fr /tmp/*.conf

install -dm755 /var/www/default/htdocs /var/www/.well-known/acme-challenge
echo todo write more stuff > /var/www/default/htdocs/index.html

rc-service nginx restart
FIN
    ]
  }
}