infra

Infrastructure-as-code for vps-nbg1 (Hetzner, Ubuntu 24.04 LTS, arm64).

This repo contains install scripts, config templates, and documentation for all services running on the VPS. Each service is self-contained under its own directory with idempotent install scripts.

---

Services

/*   11 */           at VPS.nw + (0.9, -0.5)
/*   12 */      arrow from CFD.s down 0.15 color 0x888888
/*   13 */      CDY: box "Caddy :8090" color white fill 0x5b4a8a width 1.4 height 0.4 rad 4px
/*   14 */      arrow from CDY.s down 0.15 color 0x888888
/*   15 */      FSL: box "Fossil :8081" color white fill 0x3a6b3a width 1.4 height 0.4 rad 4px
/*   16 */      text "edgesync" at FSL.s + (0, -0.18) small
                                                      ^^^^^
ERROR: syntax error

Service	Directory	Endpoint
NATS Server	nats/	tls://sync.craftdesign.group:4222
Fossil SCM	(managed separately)	https://fossil.craftdesign.group/
Coolify	(managed separately)	http://localhost:8000

---

NATS Documentation

• NATS Server — Setup & Architecture
• NATS Server — Operations Runbook

---

Repository Layout

nats/
  install.sh                   Phase 1 — binary, user, dirs, TLS cert, systemd unit
  bootstrap-creds.sh           Phase 2 — nsc operator/accounts/users, .creds files
  start.sh                     Phase 3 — render config, start service, copy JWTs
  provision-streams.sh         Phase 4 — create JetStream streams
  nats-server.conf.template    Config template (envsubst vars: OPERATOR_JWT, SYS_ACCOUNT_KEY)
  nats.service                 Systemd unit
  Dockerfile                   Future: containerised deployment
  creds/                       *.creds files (fossil-ignored, not committed)
docs/
  superpowers/
    specs/                     Design documents
    plans/                     Implementation plans

---

Quickstart — Re-installing NATS

cd ~/Projects/infra
export NATS_VERSION=2.10.22
sudo --preserve-env=NATS_VERSION bash nats/install.sh   # Phase 1 (root)
bash nats/bootstrap-creds.sh                             # Phase 2 (dmestas)
sudo bash nats/start.sh                                  # Phase 3 (root)
bash nats/provision-streams.sh                           # Phase 4 (dmestas)