RoyDumblauskas
|
a66a099b0b
|
decided that adding key for further editing should not be handled by the bootstrap process
|
2025-05-12 09:06:01 -05:00 |
|
RoyDumblauskas
|
ec16b01df8
|
update readme, delete floating hardware config file
|
2025-05-05 13:20:07 -05:00 |
|
RoyDumblauskas
|
5871c4c883
|
consolidate config file
|
2025-05-05 12:41:46 -05:00 |
|
RoyDumblauskas
|
d4a3e1a7dd
|
remove temporary key logging
|
2025-05-05 11:25:40 -05:00 |
|
RoyDumblauskas
|
b027bd2d10
|
add current host keys
|
2025-05-05 10:04:14 -05:00 |
|
RoyDumblauskas
|
02cf6110f2
|
log keys locally
|
2025-05-05 09:52:45 -05:00 |
|
RoyDumblauskas
|
b3aedc5ead
|
check if reference exists in key group before adding, skip if it does
|
2025-05-05 09:38:43 -05:00 |
|
RoyDumblauskas
|
cf085c4eec
|
yq commands to update .sops.yaml working
|
2025-05-03 23:24:11 -05:00 |
|
RoyDumblauskas
|
52e136de13
|
ssh generation/conversion working
|
2025-05-03 22:43:27 -05:00 |
|
RoyDumblauskas
|
76b42a7c19
|
remove dependency on previously removed impermanence var
|
2025-05-03 22:25:32 -05:00 |
|
RoyDumblauskas
|
00c5b6d15c
|
misnamed temp directory
|
2025-05-03 22:23:56 -05:00 |
|
RoyDumblauskas
|
43a27ab3ba
|
removed ssh key path
|
2025-05-03 22:21:43 -05:00 |
|
RoyDumblauskas
|
083dae99e0
|
removed colored prints
|
2025-05-03 22:19:44 -05:00 |
|
RoyDumblauskas
|
d9e76f19ac
|
key bootstrapping script first generation
|
2025-05-03 22:16:12 -05:00 |
|
RoyDumblauskas
|
ba26238980
|
working on bash script to allow remote bootstrapping of sops-nix secrets
|
2025-05-03 19:30:28 -05:00 |
|
RoyDumblauskas
|
5a900f5f1b
|
test first time secret generation
|
2025-04-29 21:37:31 -05:00 |
|
RoyDumblauskas
|
ba258962ff
|
declare sops key directory generate from ssh
|
2025-04-29 09:10:16 -05:00 |
|
RoyDumblauskas
|
b78fa2c4c2
|
working config, persist host_keys
|
2025-04-27 23:07:22 -05:00 |
|
RoyDumblauskas
|
95ed5beea3
|
change zfs structure
|
2025-04-27 22:01:25 -05:00 |
|
RoyDumblauskas
|
2d53e81605
|
TODO: test ephemeral root works as expected
|
2025-04-27 16:05:18 -05:00 |
|
RoyDumblauskas
|
3e792a7361
|
remove ext4 disko config backup
|
2025-04-27 15:39:13 -05:00 |
|
RoyDumblauskas
|
fa0bdb2f62
|
ephemeral root boots. Figure out what directory/pool to snapshot
|
2025-04-27 15:34:15 -05:00 |
|
RoyDumblauskas
|
52429b2544
|
returned to same error as before attempting impermanence
|
2025-04-27 15:20:27 -05:00 |
|
RoyDumblauskas
|
118186e48c
|
move root to dataset
|
2025-04-27 14:59:10 -05:00 |
|
RoyDumblauskas
|
fbf9accd6e
|
write first gen impermanence disko-config
|
2025-04-27 14:53:57 -05:00 |
|
RoyDumblauskas
|
8ac5fedce3
|
broken config, secrets suck
|
2025-04-25 01:15:59 -05:00 |
|
RoyDumblauskas
|
0cb2187ebd
|
new path for updated secret file sharing
|
2025-04-25 00:28:28 -05:00 |
|
RoyDumblauskas
|
5296108270
|
configuring nginx service and acme certs
|
2025-04-24 22:53:32 -05:00 |
|
RoyDumblauskas
|
46d30ca4c0
|
change var name of cloudflare secret file
|
2025-04-24 19:44:42 -05:00 |
|
RoyDumblauskas
|
fed92aa71d
|
added closing curly bracket
|
2025-04-24 17:07:55 -05:00 |
|
RoyDumblauskas
|
795b55f47e
|
configure cloudflare dns and wildcard nginx
|
2025-04-23 15:13:07 -05:00 |
|
RoyDumblauskas
|
59ac4f3deb
|
formatting
|
2025-04-21 17:33:25 -05:00 |
|
RoyDumblauskas
|
d2963ad1bb
|
broken github link
|
2025-04-21 16:21:56 -05:00 |
|
RoyDumblauskas
|
bdbcdbfefd
|
nvim exp
|
2025-04-21 16:20:25 -05:00 |
|
RoyDumblauskas
|
10c9fcbbfc
|
reorder inputs
|
2025-04-21 15:59:38 -05:00 |
|
RoyDumblauskas
|
27787b8d58
|
import quasi secrets via private repo
|
2025-04-19 22:53:28 -05:00 |
|
RoyDumblauskas
|
d4a9b19ff0
|
update secret repo
|
2025-04-19 22:44:21 -05:00 |
|
RoyDumblauskas
|
eb9aa1ada6
|
include quasiSecrets as import
|
2025-04-19 20:34:06 -05:00 |
|
RoyDumblauskas
|
e0c87891ce
|
pull ipaddrs from separate repo initial
|
2025-04-19 20:31:26 -05:00 |
|
RoyDumblauskas
|
b4825fec4f
|
ipaddr format
|
2025-04-17 13:39:56 -05:00 |
|
RoyDumblauskas
|
adb0c4ecf9
|
placeholder ipAddr file
|
2025-04-17 13:30:35 -05:00 |
|
RoyDumblauskas
|
1cd9b3ee94
|
track ip file
|
2025-04-17 13:24:40 -05:00 |
|
RoyDumblauskas
|
872bcfb683
|
update secret file, add secret test to config.nix
|
2025-04-17 10:56:14 -05:00 |
|
RoyDumblauskas
|
373437b909
|
read ip from not so secret file
|
2025-04-17 10:25:42 -05:00 |
|
RoyDumblauskas
|
9a52ee12cf
|
rewrite firewall config
|
2025-04-17 09:12:51 -05:00 |
|
RoyDumblauskas
|
918eb71e7e
|
import ip from .nix file
|
2025-04-17 09:06:18 -05:00 |
|
RoyDumblauskas
|
3fd6e90c1d
|
first compilation with secrets
|
2025-04-16 10:57:36 -05:00 |
|
RoyDumblauskas
|
483ee7f020
|
require generation of hardware file
|
2025-04-15 21:58:02 -05:00 |
|
RoyDumblauskas
|
be1a0ca56f
|
gitignore the private key
|
2025-04-15 21:03:43 -05:00 |
|
RoyDumblauskas
|
dac7920262
|
sops secret setup
|
2025-04-15 20:55:17 -05:00 |
|