Hi all, I have my home lab set up as a single git repo. I’ve got all infrastructure as opentofu / ansible configs, and using git crypt to protect secret files (tofu state, ansible secret values, etc).

How would you back up such a system? Keeping it on my self hosted git creates a circular dependency. I’m hesitant to use a private codeberg repo in case I leak secrets. Just wondering what the rest of you are doing.

  • ch8zer@lemmy.caOP
    link
    fedilink
    English
    arrow-up
    4
    ·
    15 days ago

    You pretty much got it. I need a quick way to restore the repo and ideally have git do a self backup. Seems like a cheap VPS may be the way to go

    • r0ertel@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      15 days ago

      For my own curiosity, how do you perform a build? Is it all done in pipelines, kicked off on change? Do you execute the whole infra build each time you release an update?

      • ch8zer@lemmy.caOP
        link
        fedilink
        English
        arrow-up
        3
        ·
        15 days ago

        Honestly, I just run it from the CLI myself.

        I’ve wasted too much time fighting with CI and automation that when I migrated to forjego I didn’t bother to put it in again.

        • r0ertel@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          14 days ago

          Same. I have spent way more time troubleshooting a pipeline than it saves. I like the idea of automation but laziness prevails.