2 Commits

Include renames

Author	SHA1	Message	Date
erik	1937d59b2c	feat: per-host darman passwords via sops; mercury sops; AdGuard pw via UI ... - per-host darman_password (distinct hash) in secrets/{jupiter,vps,mercury}.yaml -> hashedPasswordFile; different console password per host (ssh still key-only) - mercury: dedicated age key (on boot partition post-flash), sops-nix wired - AdGuard: module has no secret hook + writable config -> mutableSettings=true, admin password set via web setup on first boot (never in repo/store)	2026-07-13 20:52:06 +02:00
erik	5a23638f75	feat(mercury): AdGuard Home DNS adblock + DHCP, forwards to unbound ... - services/adguardhome.nix: upstream unbound, .sol local domain, DHCP 50-200 - nix-owned config (mutableSettings=false); adlists + dns declared - mercury imports adguard + unbound; drop the pick-one placeholder block - TODO: bcrypt admin password, jupiter static lease via UI (needs its MAC)	2026-07-13 20:13:01 +02:00