4 ms·

I've been trying to find a solution for this too! I was considering using Rclone but too many things are using SQLite for me to trust rsync. I was also going to

I've been trying to find a solution for this too! I was considering using Rclone but too many things are using SQLite for me to trust rsync. I was also going to go with CoreOS but I'm leaning towards Fedora Cloud now in case I need to manage things a bit more (and "auto updating" is not something I want as that suggests auto rebooting). Your secrets.yaml makes me nervous though - too easy to miss a key and leave something exposed. Why not just add the whole file to the vault?

ebrahimh 17d ago
I like CoreOS because of the fact that all config, etc files, sysctls are in one place. Previously, I was using artix and had this “etc” directory[1] checked in to keep track of system configuration, but there was no good way to keep track of config drift (other than remembering to update this dir). Haven’t gone through a CoreOS update yet (been using for ~2 months), but doubtful it would break anything. I’ve tested to make sure all my containers shutdown gracefully etc. The SOPS (secrets.yaml) pattern is more common in NixOS configs, and I found it works nicely here too. In the artix setup, I had a bunch of .example files strewn around [2], which I had to remember to sync with the real versions. Encrypting a key is just prefixing it with “enc_priv_”, SOPS will encrypt and decrypt it automatically. I keep “public” values plaintext to maybe help someone setting this up for themselves. Just have to double-check git diff before committing. [1] https://github.com/ebrahim37/infra-template/tree/00eccff06aed3b65287ab348fb4a725dccd51986/etc https://github.com/ebrahim37/infra-template/tree/00eccff06ae... [2] https://github.com/ebrahim37/infra-template/blob/00eccff06aed3b65287ab348fb4a725dccd51986/rybbit/env/backend.env.example https://github.com/ebrahim37/infra-template/blob/00eccff06ae...
rsync 17d ago
Are you aware of sqlite3-rsync ? It is a tool that was created by the author of sqlite. It does just what you would expected to do.
- rsync 17d ago
  It is here: https://sqlite.org/rsync.html https://sqlite.org/rsync.html
  - zenoprax 16d ago
    Wow, I had no idea. This is probably going to do the trick nicely. I really appreciate the suggestion and link!

ebrahimh 17d ago

I like CoreOS because of the fact that all config, etc files, sysctls are in one place. Previously, I was using artix and had this “etc” directory[1] checked in to keep track of system configuration, but there was no good way to keep track of config drift (other than remembering to update this dir). Haven’t gone through a CoreOS update yet (been using for ~2 months), but doubtful it would break anything. I’ve tested to make sure all my containers shutdown gracefully etc. The SOPS (secrets.yaml) pattern is more common in NixOS configs, and I found it works nicely here too. In the artix setup, I had a bunch of .example files strewn around [2], which I had to remember to sync with the real versions. Encrypting a key is just prefixing it with “enc_priv_”, SOPS will encrypt and decrypt it automatically. I keep “public” values plaintext to maybe help someone setting this up for themselves. Just have to double-check git diff before committing. [1] https://github.com/ebrahim37/infra-template/tree/00eccff06aed3b65287ab348fb4a725dccd51986/etc https://github.com/ebrahim37/infra-template/tree/00eccff06ae... [2] https://github.com/ebrahim37/infra-template/blob/00eccff06aed3b65287ab348fb4a725dccd51986/rybbit/env/backend.env.example https://github.com/ebrahim37/infra-template/blob/00eccff06ae...

rsync 17d ago

Are you aware of sqlite3-rsync ? It is a tool that was created by the author of sqlite. It does just what you would expected to do.

rsync 17d ago
It is here: https://sqlite.org/rsync.html https://sqlite.org/rsync.html
- zenoprax 16d ago
  Wow, I had no idea. This is probably going to do the trick nicely. I really appreciate the suggestion and link!