ci/cd fails on failure

.gitea/workflows/deploy.yaml

@@ -17,6 +17,7 @@ jobs:
           # Wir übergeben die Secrets als Environment-Variablen an den SSH-Befehl
           envs: HETZNER_TOKEN 
           script: |
+                set-e
                 mkdir -p /root/iac
                 cd /root/iac
 

main.tf

@@ -7,9 +7,9 @@ resource "hcloud_ssh_key" "default" {
 # Cloud-init script
 locals {
   user_data = templatefile("${path.module}/scripts/cloud-init.sh", {
-    tailscale_auth_key = var.tailscale_auth_key
     username           = var.username
     ssh_public_key     = var.ssh_public_key
+    distro_id          = vars.distro_id
   })
 }
 

scripts/cloud-init.sh

@@ -18,20 +18,6 @@ DEBIAN_FRONTEND=noninteractive apt install -y \
   unattended-upgrades \
   apt-listchanges
 
-# Create non-root user
-#if ! id "$USERNAME" &>/dev/null; then
-#  useradd -m -s /bin/bash -G sudo "$USERNAME"
-#  echo "$USERNAME ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/$USERNAME
-#  chmod 0440 /etc/sudoers.d/$USERNAME
-#fi
-
-## SSH key for user
-#USER_HOME="/home/$USERNAME"
-#mkdir -p "$USER_HOME/.ssh"
-#echo "$SSH_PUBLIC_KEY" > "$USER_HOME/.ssh/authorized_keys"
-#chmod 700 "$USER_HOME/.ssh"
-#chmod 600 "$USER_HOME/.ssh/authorized_keys"
-#chown -R "$USERNAME:$USERNAME" "$USER_HOME/.ssh"
 
 # SSH hardening
 cat > /etc/ssh/sshd_config.d/hardening.conf << 'EOF'
@@ -139,11 +125,4 @@ EOF
 
 sysctl -p /etc/sysctl.d/99-security.conf
 
-## Tailscale (optional)
-#if [ -n "$TAILSCALE_AUTH_KEY" ]; then
-#  curl -fsSL https://tailscale.com/install.sh | sh
-#  tailscale up --authkey="$TAILSCALE_AUTH_KEY" --ssh
-#  echo "Tailscale installed and connected"
-#fi
-
 echo "=== Cloud-init completed at $(date) ==="

terraform.tfvars

@@ -1,7 +1,6 @@
-hcloud_token   = "your-hetzner-api-token"
 server_name    = "clawdbot-prod"
 server_type    = "cax21"
 image          = "ubuntu-24.04"
 location       = "nbg1-dc3"
 ssh_public_key = "ssh-rsa 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"
-
+distro_id      = "ubuntu"

variables.tf

@@ -45,13 +45,6 @@ variable "username" {
   default     = "clawdbot"
 }
 
-variable "tailscale_auth_key" {
-  description = "Tailscale auth key (optional)"
-  type        = string
-  default     = ""
-  sensitive   = true
-}
-
 variable "allowed_ssh_ips" {
   description = "IPs allowed to SSH (use your static IP or VPN range)"
   type        = list(string)