forked from pub-solar/infra
59 lines
1.5 KiB
Markdown
59 lines
1.5 KiB
Markdown
# Changing DNS entries
|
|
|
|
Our current DNS provider is [namecheap](https://www.namecheap.com/).
|
|
We use [Terraform](https://www.terraform.io) to declaratively manage our pub.solar DNS records.
|
|
|
|
### Initial setup
|
|
|
|
Skip this step if you already have a `triton` profile setup.
|
|
|
|
```
|
|
triton profile create
|
|
```
|
|
|
|
Please follow https://docs.greenbaum.cloud/en/devops/triton-cli.html for the details.
|
|
|
|
You will need to setup the following [namecheap API credentials](https://www.namecheap.com/support/api/intro),
|
|
look for "namecheap API key" in the pub.solar Keepass database.
|
|
```
|
|
NAMECHEAP_API_KEY
|
|
NAMECHEAP_API_USER
|
|
NAMECHEAP_USER_NAME
|
|
```
|
|
You will probably also need to add your external IP to the [API allow list](https://ap.www.namecheap.com/settings/tools/apiaccess/whitelisted-ips).
|
|
```
|
|
dig -4 ip @dns.toys
|
|
```
|
|
|
|
Now, change into the terraform directory and initialize the terraform providers.
|
|
|
|
```
|
|
cd terraform
|
|
export TRITON_KEY_ID=$(cat ~/.config/triton/profiles.d/lev-1-pub_solar.json | jq --raw-output .keyId)
|
|
|
|
terraform init
|
|
```
|
|
|
|
Make your changes, e.g. in `dns.tf`.
|
|
```
|
|
$EDITOR dns.tf
|
|
```
|
|
|
|
Plan your changes using:
|
|
```
|
|
terraform plan -out pub-solar-infra.plan
|
|
```
|
|
|
|
After verification, apply your changes with:
|
|
```
|
|
terraform apply "pub-solar-infra.plan"
|
|
```
|
|
|
|
### Useful links
|
|
|
|
We use the Manta remote backend to save the terraform state for collaboration.
|
|
- https://www.terraform.io/language/v1.2.x/settings/backends/manta
|
|
|
|
Namecheap Terraform provider docs:
|
|
- https://registry.terraform.io/providers/namecheap/namecheap/latest/docs
|