Merge branch '150.hro-cloud-cd' into 'develop'

Add support for continuous deployment of HRO

Closes #150

See merge request !444

.gitlab-ci.yml

@@ -169,6 +169,22 @@ deploy-to-production:
     name: "production"
     url: "https://monitoring.private.storage/"
 
+# Update the hro-cloud deployment - just like above for production (same branch).
+deploy-to-hro-cloud:
+  <<: *UPDATE_GRID
+
+  # https://docs.gitlab.com/ee/ci/yaml/#rules
+  rules:
+    # https://docs.gitlab.com/ee/ci/yaml/index.html#rulesif
+    # https://docs.gitlab.com/ee/ci/jobs/job_control.html#cicd-variable-expressions
+    # https://docs.gitlab.com/ee/ci/variables/predefined_variables.html
+    - if: '$CI_COMMIT_BRANCH == "production"'
+
+  environment:
+    # See notes in `update-staging`.
+    name: "hro-cloud"
+    url: "https://monitoring.deerfield.leastauthority.com/"
+
 update-nixpkgs:
   <<: *RUN_ON_SCHEDULE
   stage: "build"

ci-tools/known_hosts.hro-cloud

+monitoring.deerfield.leastauthority.com,vps-50812a54.vps.ovh.net,51.38.134.175 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOIgegzAxXPhxFK8vglBlUAFTzUoCj5TxqcLS57NaL2l
+payments.deerfield.leastauthority.com,vps-3cbcf174.vps.ovh.net,217.182.78.151 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFI32csriKoUUD3e813gcEAD5CCuf8rUnary70HfJMSr
+storage001.deerfield.leastauthority.com,185.225.209.174 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKX9Ei+WdNVvIncHQZ9CdEXZeSj2zBM/NQEuqmMbep0A
+storage002.deerfield.leastauthority.com,38.170.241.34 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK3TAQj5agAv9AOZQhE95vATQKcNbNZj5Y3xMb5cjzGZ
+storage003.deerfield.leastauthority.com,ns3728736.ip-151-80-28.eu,151.80.28.108 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFsh9No4PT3hHDsY/07kDSRCg1Jse38n7GY0Rk9DnyPe

ci-tools/update-grid-servers

@@ -61,6 +61,11 @@ update_grid_nodes() {
 	    domain=private.storage
 	    ;;
 
+	"hro-cloud")
+	    grid_dir=./morph/grid/hro-cloud
+	    domain=deerfield.leastauthority.com
+	    ;;
+
 	"staging")
 	    grid_dir=./morph/grid/testing
 	    domain=privatestorage-staging.com

morph/grid/hro-cloud/.gitignore

+private-keys