8 Commits

Author SHA1 Message Date
71baa09bd2 Refactor imports and secrets. Add per system properties and role based secret access.
Highlights
- No need to update flake for every machine anymore, just add a properties.nix file.
- Roles are automatically generated from all machine configurations.
- Roles and their secrets automatically are grouped and show up in agenix secrets.nix
- Machines and their service configs may now query the properties of all machines.
- Machine configuration and secrets are now competely isolated into each machine's directory.
- Safety checks to ensure no mixing of luks unlocking secrets and hosts with primary ones.
- SSH pubkeys no longer centrally stored but instead per machine where the private key lies for better cleanup.
2023-04-21 12:58:11 -06:00
40f0e5d2ac Add Phil 2023-04-19 18:12:42 -06:00
9e3dae4b16 Rekey secrets 2023-02-11 15:07:08 -07:00
zuckerberg
f5a9f04cf2 Rekey secrets 2022-08-25 23:16:22 -04:00
5ac5b4551b Rekey secrets 2022-05-02 11:56:25 -04:00
d5d986dd88 Rekey secrets 2022-04-21 01:26:53 -04:00
b347656b6a Rekey secrets 2022-04-07 13:11:16 -04:00
43e31a8d2d WolframAlpha For drastikbot 2022-03-27 19:23:07 -04:00