129 commits

Author	SHA1	Message	Date
oddlama	a975cc1f7f	feat: add forgejo	2023-08-01 02:01:43 +02:00
oddlama	1184be0cc0	chore: update aggregated basic auth hashes	2023-07-31 12:49:09 +02:00
oddlama	788e7e3fa7	chore: move generated secrets to separate directory	2023-07-31 12:42:46 +02:00
oddlama	b2b2e60725	feat(zackbiene): start clean; add kea instead of dhcpcd ... chore: switch to hosts.toml	2023-07-25 18:48:42 +02:00
oddlama	ccd62a730a	feat: add influxdb microvm	2023-06-23 18:07:54 +02:00
oddlama	19acca7cba	chore: remove microvm local wireguard if not needed	2023-06-21 01:35:41 +02:00
oddlama	abdf363fba	feat: add vaultwarden microvm	2023-06-18 01:12:08 +02:00
oddlama	69bd2a71ce	feat: generate secrets	2023-06-12 01:03:44 +02:00
oddlama	d2b2f4021a	chore: add new wireguard secrets for loki vm	2023-06-03 17:47:05 +02:00
oddlama	135528e082	feat: add grafana test setup with oauth2	2023-06-02 01:28:35 +02:00
oddlama	ca7bbeec72	chore: add secrets for sentinel	2023-05-29 21:51:23 +02:00
oddlama	0e3d881887	feat: experiment with kanidm and acme dns-01. add common conditional locations to impermanence	2023-05-25 01:57:16 +02:00
oddlama	f65b217a92	feat: change passwords and hide new hashes	2023-05-22 23:53:45 +02:00
oddlama	bd8a14deb0	feat: ensure vms come online after deployment even with missing wireguard keys	2023-05-21 23:26:51 +02:00
oddlama	f3ed1248af	feat: properly ensure vm zfs dataset exists	2023-05-21 22:57:40 +02:00
oddlama	d7f69c5baa	refactor: properly modularize repo secret management	2023-05-21 14:40:42 +02:00
oddlama	88f1ac54b8	fix: remove faulty agenix directory early and only if necessary ... chore: change default microvm naming scheme to <host>-<name>	2023-05-21 01:29:54 +02:00
oddlama	4057ee9051	feat: implement cidr coersion to automatically determine wireguard network size from participants	2023-05-20 15:57:19 +02:00
oddlama	0bc49cc3f9	chore: only warn when hostkey is missing	2023-03-27 16:59:16 +02:00
oddlama	f2f8ca71bb	chore: put real MAC addresses in repo secrets	2023-03-15 17:43:33 +01:00
oddlama	6f8f74cc69	feat: add format-secrets app to run alejandra on hidden configuration	2023-03-15 17:03:35 +01:00
oddlama	3111408f7d	feat: allow .nix.age files to contain functions or bare attrs	2023-03-15 02:29:14 +01:00
oddlama	5bf0935eb2	feat: get myuser's username from repository secrets	2023-03-15 02:07:32 +01:00
oddlama	8c343b8f0f	feat: add odroid-n2 config	2023-03-11 23:03:52 +01:00
oddlama	056ce8a553	chore: use temporary secrets for zackbiene	2023-02-20 21:04:15 +01:00
oddlama	7cabb98064	feat: remove recipients.txt in favor of nix run '.#edit-secret'	2023-02-03 21:11:32 +01:00
oddlama	9d1253c03b	sad: this will be useless, but it has been a nice journey.	2023-01-28 02:51:13 +01:00
oddlama	92cf272cd1	feat: rekeying module finished, sandbox still flaky	2023-01-27 17:43:04 +01:00
oddlama	2a6e6c4ad1	feat: add public keys for secrets	2023-01-26 16:06:00 +01:00