recipe-maintainer: public snapshot (secrets + deployment plans removed, single commit)

Sanitized single-commit public mirror of recipe-maintainer. - Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders. - Removed plans/ and planned-updates/ (deployment-planning docs) so no client/ deployment domains appear in the public repo. - All other secret stores were already gitignored. - docs.coopcloud.tech retained as a submodule (public upstream).
2026-06-16 20:18:24 +00:00
commit f283a371bb
253 changed files with 15975 additions and 0 deletions
@@ -0,0 +1,72 @@
+data "digitalocean_ssh_key" "test" {
+  name = "nptest.pub"
+}
+
+resource "digitalocean_droplet" "test" {
+  name     = var.droplet_name
+  region   = var.region
+  size     = var.size
+  image    = var.image
+  ssh_keys = [data.digitalocean_ssh_key.test.id]
+
+  user_data = file("${path.module}/cloud-init.yaml")
+
+  connection {
+    type        = "ssh"
+    host        = self.ipv4_address
+    user        = "root"
+    private_key = file(var.ssh_private_key_path)
+    port        = 22
+  }
+
+  # Wait for cloud-init to finish before considering the droplet ready
+  provisioner "remote-exec" {
+    inline = ["cloud-init status --wait"]
+  }
+}
+
+# --- Reserved IP (created outside Terraform, passed in as variable) ---
+
+resource "digitalocean_reserved_ip_assignment" "test" {
+  ip_address = var.reserved_ip
+  droplet_id = digitalocean_droplet.test.id
+}
+
+# --- Firewall ---
+
+resource "digitalocean_firewall" "test" {
+  name        = "${var.droplet_name}-fw"
+  droplet_ids = [digitalocean_droplet.test.id]
+
+  # Allow all inbound
+  inbound_rule {
+    protocol         = "tcp"
+    port_range       = "1-65535"
+    source_addresses = ["0.0.0.0/0", "::/0"]
+  }
+  inbound_rule {
+    protocol         = "udp"
+    port_range       = "1-65535"
+    source_addresses = ["0.0.0.0/0", "::/0"]
+  }
+  inbound_rule {
+    protocol         = "icmp"
+    source_addresses = ["0.0.0.0/0", "::/0"]
+  }
+
+  # Allow all outbound
+  outbound_rule {
+    protocol              = "tcp"
+    port_range            = "1-65535"
+    destination_addresses = ["0.0.0.0/0", "::/0"]
+  }
+  outbound_rule {
+    protocol              = "udp"
+    port_range            = "1-65535"
+    destination_addresses = ["0.0.0.0/0", "::/0"]
+  }
+  outbound_rule {
+    protocol              = "icmp"
+    destination_addresses = ["0.0.0.0/0", "::/0"]
+  }
+}