* physical location: 115 Cotham Rd

* local IP: `192.168.40.20`

* physical location: 35 Cotham Rd

PEER=nathan

ssh ganesha "docker exec wireguard /app/show-peer $PEER"

ssh ganesha "sudo cat /var/lib/docker/volumes/infrastructure-setup_wireguard_config/_data/peer_$PEER/peer_$PEER.conf"

$PEER = "nathan"

ssh ganesha "docker exec wireguard /app/show-peer $PEER"

ssh ganesha "sudo cat /var/lib/docker/volumes/infrastructure-setup_wireguard_config/_data/peer_$PEER/peer_$PEER.conf"

We look after the following software:

* It is deployed on RAMA in Docker containers

* RAMA runs VISNA's `staging`, `sandbox` and `production` environments

* The deployment uses blue-green deployment, with routing handled via a containerized Nginx instance running on GANESHA

* The public URL is https://visna.isn.edu.au, which reaches GANESHA

* A Nginx instance running on GANESHA routes requests to the correct port on RAMA

* It is deployed by simply pushing the branches `production`, `sandbox` and `staging`

* It is deployed on RAMA in Docker containers

* RAMA runs THRIVE's `staging`, `sandbox` and `production` environments

* The deployment uses blue-green deployment, with routing handled via a containerized Nginx instance running on GANESHA

* The pipeline runs on a Gitea instance hosted on GANESHA(origin: `origin`)

* The public URL is https://thrive.isn.edu.au, which reaches GANESHA

* A Nginx instance running on GANESHA routes requests to the correct port on RAMA

* It is deployed by simply pushing the branches `production`, `sandbox` and `staging`

* It is deployed on GANESHA, in a Docker container

* The deployment is configured together with all the other services running on GANESHA (see below)

* The pipeline runs on a Gitea instance hosted on GANESHA (origin: `origin`)

* This is only reachable using local IPs, so I use a VPN, while THRIVE and VISNA are in the same network

* Pushing the branch `main` builds an image, stored in Gitea's imnage registry

* Deployment on GANESHA is done via git pull ganesha main && docker-compose pull modelix && docker-compose up -d --force-recreate modelix-caddy

* Among the services, there are:

* Homarr @ http://10.152.0.2:5005/

* Infisical @ http://10.152.0.2:12080/

* Portainer (RAMA) @ https://10.152.0.3:9443/

* Prometheus @ http://10.152.0.2:9090/

* THRIVE (production) @ https://thrive.isn.edu.au/

* THRIVE (sandbox) @ https://sandbox.dev.thrive.isn.edu.au/

* THRIVE (staging) @ https://staging.dev.thrive.isn.edu.au/

* VISNA (production) @ https://visna.isn.edu.au/

* VISNA (sandbox) @ https://sandbox.dev.visna.isn.edu.au/

* VISNA (staging) @ https://staging.dev.visna.isn.edu.au/

ssh ganesha "sudo bash -c 'V=/var/lib/docker/volumes/infrastructure-setup_wireguard_config/_data && printf \"[Interface]\nAddress = 10.13.13.9\nPrivateKey = \$(cat \$V/peer_$PEER/privatekey-peer_$PEER)\n\n[Peer]\nPublicKey = jI0naHt99LeIcbZUBXW4Q25Lhksxsjl7fdoWiOlMXF0=\nPresharedKey = RPEETrKWpDcJsFiMahBYJY5+nOisRavqaNGoaN81xNM=\nEndpoint = 34.40.255.123:51820\nAllowedIPs = 10.152.0.0/24, 10.13.13.0/24\nPersistentKeepalive = 25\n\"'" > /tmp/$PEER_wg0.conf

scp -i ~/.ssh/id_ed25519_$PEER /tmp/$PEER_wg0.conf $SSH_USER@$SSH_HOST:/tmp/wg0.conf && rm /tmp/$PEER_wg0.conf

ssh -i ~/.ssh/id_ed25519_$PEER -t $SSH_USER@$SSH_HOST "sudo install -m 600 -o root -g root /tmp/wg0.conf /etc/wireguard/wg0.conf && rm /tmp/wg0.conf && sudo systemctl enable --now wg-quick@wg0"

ssh ganesha "sudo cat /var/lib/docker/volumes/infrastructure-setup_wireguard_config/_data/peer_$PEER/peer_$PEER.conf"

ssh ganesha "docker exec wireguard /app/show-peer $PEER"