18 Commits

Author SHA1 Message Date
71baa09bd2 Refactor imports and secrets. Add per system properties and role based secret access.
Highlights
- No need to update flake for every machine anymore, just add a properties.nix file.
- Roles are automatically generated from all machine configurations.
- Roles and their secrets automatically are grouped and show up in agenix secrets.nix
- Machines and their service configs may now query the properties of all machines.
- Machine configuration and secrets are now competely isolated into each machine's directory.
- Safety checks to ensure no mixing of luks unlocking secrets and hosts with primary ones.
- SSH pubkeys no longer centrally stored but instead per machine where the private key lies for better cleanup.
2023-04-21 12:58:11 -06:00
40f0e5d2ac Add Phil 2023-04-19 18:12:42 -06:00
f68a4f4431 nixpkgs-fmt everything 2023-04-04 23:30:28 -06:00
68bd70b525 Basic router working using the wip hostapd module from upstream 2023-04-04 12:57:16 -06:00
5ed02e924d Remove liza 2023-03-12 00:15:06 -07:00
1d620372b8 Remove leftovers of removed compute nodes 2023-03-12 00:14:49 -07:00
987919417d allow root login over ssh using trusted key 2023-02-11 23:07:48 -07:00
3e0cde40b8 Cleanup remote LUKS unlock 2023-02-11 18:40:08 -07:00
c649b04bdd Update ssh keys and allow easy ssh LUKS unlocking 2023-02-11 15:05:20 -07:00
zuckerberg
50fd928cda Change key 2022-08-25 23:16:09 -04:00
d378a287fa Add ponyo system 2022-05-02 11:56:14 -04:00
5945310dd4 Ponyo keys 2022-04-21 01:27:47 -04:00
809dd0b5eb s0 new key 2022-04-09 01:00:52 -04:00
zuckerberg
48c2917d5b Update ssh keys 2022-03-07 23:48:55 -05:00
zuckerberg
d6c23d2bc4 Remove mitty 2022-03-07 23:47:46 -05:00
3d48742a44 add ray keys 2021-06-29 23:26:04 -04:00
zuckerberg
e7b9b46f44 store pia secret in git 2021-06-22 20:48:05 -04:00
zuckerberg
8d02de637e use agenix 2021-06-14 22:50:14 -04:00