config.yaml

tags: &tags
  - ideme

droplet:
  name: ideme
  region: lon1
  size: s-1vcpu-1gb
  image:
    slug: ubuntu-20-10-x64
  destroy:
    minutes: 5

application:
  image: theiaide/theia:next 

infrastructure:
  vpc:
    name: ideme
    region: lon1
    description: "Keeps the publically accessible ideme resources isolated."
  domain:
    name: clustr.sh
    type: "A"
  project:
    name: ideme
    description: "ideme Tooling"
    purpose: "To make technical interviewing easier."
    env: Production
  firewall:
    name: "idme-firewall"
    rules:
      inbound:
        - protocol: tcp
          portRange: 443
          sources:
            addresses:
              - "0.0.0.0/0"
              - "::/0"
      outbound:
        - protocol: tcp
          portRange: 443
          destinations:
            addresses:
              - "0.0.0.0/0"
              - "::/0"
    tags: *tags
  ssh:
    name: "ideme public key"

userData: "#!/bin/sh

useradd -m -G users -s /bin/bash ideme

groupadd docker

usermod -aG docker ideme

echo 'ideme  ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers

mkdir -p /home/ideme/.ssh

cat /root/.ssh/authorized_keys >> /home/ideme/.ssh/authorized_keys

su ideme

sudo ufw disable

sudo fallocate -l 1G /swapfile

sudo chmod 600 /swapfile

sudo mkswap /swapfile

sudo swapon /swapfile

sudo cp /etc/fstab /etc/fstab.bak

echo '/swapfile none swap sw 0 0' | sudo tee -a /etc/fstab

sudo apt-get purge do-agent

curl -sSL https://repos.insights.digitalocean.com/install.sh -o /tmp/install.sh

sudo bash /tmp/install.sh

sudo apt-get update

sudo apt install -y git docker.io apache2-utils 

sudo sed -i -e '/^PermitRootLogin/s/^.*$/PermitRootLogin no/' /etc/ssh/sshd_config

sudo sed -i -e '$aAllowUsers ideme' /etc/ssh/sshd_config

sudo restart ssh

sudo eval `ssh-agent -s`

sudo mkdir -p /etc/nginx/htpasswd

sudo touch /etc/nginx/htpasswd/FULL_APP_DOMAIN

sudo htpasswd -b -c /etc/nginx/htpasswd/FULL_APP_DOMAIN RANDOM_USERNAME RANDOM_PASSWORD

sudo curl -L https://github.com/docker/compose/releases/download/1.21.2/docker-compose-`uname -s`-`uname -m` -o /usr/local/bin/docker-compose

sudo chmod +x /usr/local/bin/docker-compose

mkdir /home/ideme/theia

cd /home/ideme/theia

curl https://raw.githubusercontent.com/ngfgrant/ideme/main/do/nginx-proxy-compose.yaml > nginx-proxy-compose.yaml

curl https://raw.githubusercontent.com/ngfgrant/ideme/main/do/app-compose.yaml > app-compose.yaml

sudo sed -i -e 's/UNIQUE_APP_DOMAIN/FULL_APP_DOMAIN/g' app-compose.yaml 

sudo sed -i -e 's/APPLICATION_IMAGE/APPLICATION_DOCKER_IMAGE/g' app-compose.yaml 

docker-compose -f nginx-proxy-compose.yaml up -d

docker-compose -f app-compose.yaml up -d
"