|
13e8dba417
|
password-store: generate each secret in tmpdir
|
2023-10-05 19:14:10 +02:00 |
|
|
9559357c56
|
clanCore: specify interface for system.clan
|
2023-10-05 17:08:59 +02:00 |
|
|
dbf80595fd
|
zerotier: fix: find free port without collissions
|
2023-10-05 17:03:01 +02:00 |
|
|
3fb36b3ac1
|
secrets upload: skip on exit 23, cleanup
|
2023-10-04 21:29:19 +02:00 |
|
|
bc36ec4c1a
|
vms: support secrets and fix cross compilation
|
2023-10-04 18:04:27 +02:00 |
|
|
3c1d7a0553
|
secrets.password-store: ignore ssh errors
|
2023-10-04 16:34:37 +02:00 |
|
|
fcd1d18e15
|
restore possibility to update all machines without having to specify them
|
2023-10-04 08:35:59 +02:00 |
|
|
62caf98f15
|
secrets.password-store: optimize secret existence check
|
2023-09-30 09:36:39 +02:00 |
|
|
347d9676c5
|
secrets.password-store: fix multi-secret check
|
2023-09-30 09:27:25 +02:00 |
|
|
d810d2b4e1
|
secrets: allow empty facts
|
2023-09-30 09:18:24 +02:00 |
|
|
6cdf5615fe
|
clanCore.zerotier: create network-id only if fact exists
|
2023-09-29 20:05:35 +02:00 |
|
|
89b7ffce6c
|
clan-cli secrets upload: secrets are populated into tmpdir
|
2023-09-29 20:05:35 +02:00 |
|
|
7ca9c49163
|
restore clanInternals with valid nixos config
|
2023-09-29 19:39:35 +02:00 |
|
|
a5f181a430
|
clan-cli: init vm command
|
2023-09-29 19:18:27 +02:00 |
|
|
89e69e5cb6
|
add treewide pyproject.toml
Than we don't need a pyproject.toml per script
|
2023-09-29 16:41:14 +02:00 |
|
|
9daeaf5c62
|
zerotier: fix creating controller directory
|
2023-09-29 16:41:14 +02:00 |
|
|
5f15ec4495
|
add zerotier-members script
|
2023-09-29 16:07:22 +02:00 |
|
|
739d3b3578
|
zerotier: document mdns ports; drop duplicate udp firewall rules
the nixos module already opens the zerotier port
|
2023-09-28 17:58:42 +02:00 |
|
|
b587bd1b49
|
secrets.password-store: readd targetDirectory
|
2023-09-27 21:26:58 +02:00 |
|
|
2f73e6b472
|
drop requirement for importing qemu-vm.nix
|
2023-09-27 14:54:01 +02:00 |
|
|
c1a124d0bf
|
clan.networking.zerotier: create init script only if fact exists
|
2023-09-27 11:02:54 +02:00 |
|
|
5cf9b4428f
|
clanCore.secrets: facts.value can be null or str
|
2023-09-27 10:34:53 +02:00 |
|
|
0d41bec9ef
|
zerotier: fix eval
|
2023-09-26 16:19:43 +00:00 |
|
|
6e1a5ad81f
|
move zerotier secret generation into nixos module
|
2023-09-26 18:14:00 +02:00 |
|
|
74a3c85c29
|
move zerotier secret generation into nixos module
|
2023-09-26 17:57:43 +02:00 |
|
|
5d9ee64ddc
|
make zerotier module a directory
|
2023-09-26 15:55:41 +02:00 |
|
|
2cdc959a77
|
clan.networking.zerotier: fix controller mode
|
2023-09-25 19:11:16 +02:00 |
|
|
f518088d4c
|
clanCore.clanPkgs: set defaultText make it internal
|
2023-09-22 15:03:40 +02:00 |
|
|
51e8da2a74
|
config: get rid of impure eval
|
2023-09-22 14:32:38 +02:00 |
|
|
0540fb7103
|
document networking.deploymentAddress
|
2023-09-22 12:09:53 +02:00 |
|
|
aeed648bd0
|
secrets: use clanInternal for crosscompiling, move sops generators to new file
|
2023-09-21 17:25:32 +02:00 |
|
|
4096ea3adb
|
don't set age keyfile if don't have a secret for it
|
2023-09-21 17:22:20 +02:00 |
|
|
0314132a1a
|
rewrite sops backend for secret generation and add tests
|
2023-09-21 17:22:20 +02:00 |
|
|
521f4ee5bc
|
secrets sops: deploy age key
|
2023-09-21 17:22:20 +02:00 |
|
|
9b6fafcb2d
|
clan config: re-enable clan config
|
2023-09-19 15:12:29 +02:00 |
|
|
a29f301f84
|
add vms
|
2023-09-15 14:02:40 +00:00 |
|
|
8d29d0e69c
|
clan-cli: get deploymentAddress from clan.networking
|
2023-09-15 12:17:07 +00:00 |
|
|
0132abc547
|
secrets: use CLAN_DIR instead of clanCore.clanDir for fact storage
|
2023-09-15 12:17:07 +00:00 |
|
|
6b7301cefb
|
clanCore secrets: document custom store
|
2023-09-15 12:17:07 +00:00 |
|
|
c5c2a848c7
|
secrets pass: append openssh to PATH so we use systems openssh first
|
2023-09-15 12:17:07 +00:00 |
|
|
c5786614bf
|
clan-cli secrets: deploy -> upload
|
2023-09-15 12:17:07 +00:00 |
|
|
6153a9ee71
|
clanCore.secrets: set default and add generate/deploy composite
|
2023-09-15 12:17:07 +00:00 |
|
|
285041026d
|
clanCore sops: add dummy deployScript
|
2023-09-15 12:17:07 +00:00 |
|
|
5285423479
|
secrets: add password-store implementation
|
2023-09-15 12:17:07 +00:00 |
|
|
3f6fa0eeca
|
clanCore secrets: add secretStore option
|
2023-09-15 12:17:07 +00:00 |
|
|
4d9a59c792
|
move facts to machine subdirectory
This makes it easier to delete facts when removing machines
|
2023-09-06 15:07:49 +00:00 |
|
|
89cdbdd62a
|
also auto-import group secrets
|
2023-09-03 14:58:07 +02:00 |
|
|
2a9be18d31
|
generate-secrets: use - instead of _ as file seperator
|
2023-09-03 14:17:00 +02:00 |
|
|
cfec69fec4
|
different fix for missing secrets
|
2023-09-03 14:07:31 +02:00 |
|
|
0a3982d0ac
|
fix machines folder not beeing present yet
|
2023-09-03 13:33:41 +02:00 |
|
|
4e19b7c085
|
secrets/sops: set dummy default sops file
|
2023-09-03 07:59:28 +00:00 |
|
|
c9bfd0a5b5
|
clanCore: add example options
|
2023-09-02 19:15:29 +02:00 |
|
|
a0d1b09b1d
|
clanCore module: add clanSchema top level option
|
2023-09-02 18:28:31 +02:00 |
|
|
ac7e3f6407
|
sops: fix module to accept missing ./sops dir
|
2023-09-02 18:25:27 +02:00 |
|
|
4afd9910e9
|
Revert "rename clanCore to clan.core"
This reverts commit fef796fa6e .
|
2023-08-30 15:24:33 +02:00 |
|
|
fef796fa6e
|
rename clanCore to clan.core
|
2023-08-30 12:46:49 +00:00 |
|
|
9fca1e7f43
|
move clanCore into nixosModules, add secrets generate command
|
2023-08-29 16:28:50 +02:00 |
|
|
63bb9395fd
|
automatically import secrets into nixos
|
2023-08-23 13:59:43 +02:00 |
|
|
ed1d28f20b
|
import nixosModules explicitly
we need to also import sops-nix for sops
|
2023-08-23 13:59:43 +02:00 |
|
|
96067a789d
|
move modules into nixosModules, add autoimport
|
2023-08-02 10:24:01 +02:00 |
|