# Dev Server

A server for hosting a variety of small devICT services.

- Terraform to manage the digital ocean droplet
- Ansible to configure the base host setup
- Docker+compose to run the services

## Common commands

See the [`justfile`](justfile) — run `just --list` from this directory.
Terraform recipes wrap `op run` and read their vars from `.env.local.op`
(see the root [README](../README.md#terraform-state)).

## Services

-  [events](https://tangled.org/devict.org/events)

## Secrets

We use [infisical](https://infisical.com/) for remote secrets management.

Each service on the host has a separate machine identity with it's own client ID and auth secret.

In the service's role, we get a token to inject into the service container