From b814aaa21186b1337935a49b594184d939b4b061 Mon Sep 17 00:00:00 2001
From: Matthew Baggett <matthew@baggett.me>
Date: Thu, 16 Jan 2025 10:41:21 +0100
Subject: [PATCH] Use ssh tunnel

---
 docker.tf => providers.docker.tf |  2 +-
 providers.ssh.tf                 | 11 +++++++++++
 2 files changed, 12 insertions(+), 1 deletion(-)
 rename docker.tf => providers.docker.tf (89%)
 create mode 100644 providers.ssh.tf

diff --git a/docker.tf b/providers.docker.tf
similarity index 89%
rename from docker.tf
rename to providers.docker.tf
index 54d2604..5cc1a5c 100644
--- a/docker.tf
+++ b/providers.docker.tf
@@ -1,5 +1,5 @@
 provider "docker" {
-  host = "ssh://passing_by_and_thought_id_drop_in.cluster.grey.ooo"
+  host = "tcp://${data.ssh_tunnel.management.local.address}"
   registry_auth {
     address  = "docker.io"
     username = "matthewbaggett"
diff --git a/providers.ssh.tf b/providers.ssh.tf
new file mode 100644
index 0000000..8f62ee5
--- /dev/null
+++ b/providers.ssh.tf
@@ -0,0 +1,11 @@
+provider "ssh" {
+  server = { host = "cluster.grey.ooo", port = 22 }
+  user   = "geusebio"
+  auth   = { private_key = { content = try(file("~/.ssh/keys/exploding_bolts_2_rsa"), "") } }
+}
+data "ssh_tunnel" "management" {
+  connection_name = "management"
+  remote = {
+    socket = "/var/run/docker.sock"
+  }
+}