nxthdr Infrastructure

Infrastructure as Code for the nxthdr platform.

Documentation

📚 Read the full documentation

Quick links:

• Getting Started
• Quick Start Guide
• Common Tasks
• For AI Assistants

Quick Start

# 1. Set up vault password
echo "YOUR_VAULT_PASSWORD" > .password

# 2. Deploy everything
make apply

Main Commands

Command	Description
make apply	Full deployment (render + sync + terraform)
make render	Render templates only
make sync-config	Sync configs to servers
make sync-bird	Sync BIRD (BGP) configs
make sync-wireguard	Sync WireGuard (VPN) configs
make edit-secrets	Edit encrypted secrets

Technology Stack

• Ansible - Configuration management
• Terraform - Docker container orchestration
• Jinja2 - Template rendering
• Ansible Vault - Secrets management
• Docker - Container runtime
• BIRD - BGP routing
• WireGuard - VPN tunneling

Repository Structure

infrastructure/
├── inventory/          # Server definitions
├── templates/          # Jinja2 templates
│   ├── config/        # Docker container configs
│   └── terraform/     # Terraform templates
├── networks/          # BIRD & WireGuard configs
├── playbooks/         # Ansible automation
├── render/            # Python rendering scripts
├── secrets/           # Encrypted secrets
├── terraform/         # Terraform files
└── docs/              # Documentation (MkDocs)

Security

If you discover a security vulnerability, prefer email: [email protected]

Contributing

Contributions are welcome! Please:

1. Read the documentation
2. Open an issue to discuss your changes
3. Submit a pull request

License

See LICENSE file for details.