files | ||
setups | ||
templates | ||
vars | ||
.gitignore | ||
deploy.yml | ||
LICENSE | ||
production | ||
README.md |
Ansible project for deploying Docker services to Opnxng
An Ansible project that deploys docker services to our servers.
ansible-playbook -i "production" "deploy.yml"
Services
The services are hosted on one Vultr and four Oracle servers. A variables file defines the services to be deployed or already deployed.
They are deployed with Compose files and load balanced according to the Caddyfile.
Configurations
Our SearXNG instance uses a custom settings.yml that always include upstream changes. It is updated by hand with reference to Pussthecat.org's configuration.
Passwords and other sensitive data are kept locally as encrypted variables in secrets.yml. We host an Authelia and Firefox stack that is restricted to specific users only. Their related files are also kept locally.
Contact
Please contact us via email if you discover any vulnerability or area for improvement in our infrastructure. We would truly appreciate it.