# hcloud encrypted debian

## Description
This repository contains ansible roles and a packer definition to build
fully encrypted debian snapshots in hetzner cloud which can then be used
as base images for terraform deployments.

## Usage
Install `ansible-deployment`
```sh
pip install ansible-deployment
```

Further documentation for `ansible-deployment`: https://torarg.github.io/ansible-deployment/

Clone deployment:
```sh
git clone https://gitea.k3s.swla.eu/gitea-admin/hcloud-encrypted-debian-packer.git
```

Write deployment.key to deployment directory:
```sh
echo "SUPER_SECRET_KEY" > hcloud-encrypted-debian-packer/deployment.key
```

Change into deployment directory:
```sh
cd hcloud-encrypted-debian-packer
```

Pull encrypted deployment data blob:
```sh
ansible-deployment pull
```

Unlock deployment:
```sh
ansible-deployment unlock
```

Build snapshot with packer:
```sh
packer build hcloud-encrypted-debian.pkr.hcl
```