raidkadri/az-infra

System components for Azurefire infrastructure

Azurefire infrastructure

Infrastructure for azurefire.net and pushbot.party. Hosting for a bunch of services that @smashwilson wants to stash somewhere, deployed to AWS as immutable infrastructure.

Services

These containers run persistently on the CoreOS host:

• pushbot: A hubot instance who's here to protect you from the terrible secret of space.
• az-nginx: An nginx server that terminates incoming TLS connections and proxies requests to other services.

Cron

These containers are triggered on a schedule:

• az-tls: Daily verification that the TLS certificate issued from Let's Encrypt is up to date. When expiration is near, acquire a new certificate with a DNS challenge and rebuild the infrastructure.

Deployment

Each time a new commit is merged into the master branch of this repository, its Travis build:

1. Ensures that an Elastic Load Balancer exists and collects information about any pre-existing instances.
2. Creates a temporary SSH keypair and uploads it to EC2.
3. Launches an EC2 instance with a CoreOS image and waits for it to begin listening on port 22.
4. Creates a bash script from a Jinja2 template and executes it over an SSH connection to the new host. The bash script pulls and runs containers for each of the services listed above.
5. Registers the new host on the load balancer.
6. De-registers any prior hosts from the load balancer. Terminates any prior instances and deletes any unused security groups and keypairs.