forked from clan/clan-core
pinpox
e8a6e88ea1
The default and flake-parts templates used by `clan init` now select the age secret store and list the admin's age public key in vars.settings.recipients.default. `clan init` / `clan flakes create` select or generate the admin key before creating the clan and pass it to create_clan; a sops user is only created when the resulting clan uses the sops backend (e.g. the minimal template). Template contents: - document age plugins (yubikey, tpm, bip39) and per-machine recipients - reach machines via p2p-ssh-iroh; add a commented internet instance for servers with a fixed address - explain inventory.machines and the sshd instance - generate the root password instead of prompting - drop the unused gnome module and the pkgsForSystem example The users service now defaults `prompt` to false, so the templates use the one-line `roles.default.settings.user = "root";`. Getting-started guides for local machines no longer ask for the post-install IP address and no longer prompt for a root password.