infrastructure/TODO.md

TODO

• Update Readme (CI, Git, plantuml, etc.)
• Split docker/web/docker-compose.yaml into different configs (e.g. web, gitlab, drone) using the same network
• Use /var/lib/pbri/docker/... instead of Docker volumes (makes backups easier)
  • Make it inaccessible to anyone but root (-rw------)
• Add Drone runner
• Figure out how to dependably store .env files (Ansible vault? Something else?)
  • In vault, seperate from other config
• Check out docker swarm and current best practices for Ansible
• Use Gitea instead of GitLab
• Add drone exec runner for Nix builds with shared /nix
• Lint caddy file, add gzip and disable admin interface
• Make Gitea display graphs in Notebooks (see https://docs.gitea.io/en-us/external-renderers/).
• Factorio server
• Add flag for Gitea backups (after which Gitea will be up but no contain the sites source code)