Refactor imports and secrets. Add per system properties and role based secret access.

Browse Source

Highlights
- No need to update flake for every machine anymore, just add a properties.nix file.
- Roles are automatically generated from all machine configurations.
- Roles and their secrets automatically are grouped and show up in agenix secrets.nix
- Machines and their service configs may now query the properties of all machines.
- Machine configuration and secrets are now competely isolated into each machine's directory.
- Safety checks to ensure no mixing of luks unlocking secrets and hosts with primary ones.
- SSH pubkeys no longer centrally stored but instead per machine where the private key lies for better cleanup.

...

This commit is contained in:

Zuckerberg

2023-04-20 22:01:21 -06:00

parent a02775a234

commit 71baa09bd2

42 changed files with 632 additions and 383 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

secrets/hostapd-pw-experimental-tower.age

Binary file not shown.