2 Commits

Include renames

Author	SHA1	Message	Date
erik	1937d59b2c	feat: per-host darman passwords via sops; mercury sops; AdGuard pw via UI ... - per-host darman_password (distinct hash) in secrets/{jupiter,vps,mercury}.yaml -> hashedPasswordFile; different console password per host (ssh still key-only) - mercury: dedicated age key (on boot partition post-flash), sops-nix wired - AdGuard: module has no secret hook + writable config -> mutableSettings=true, admin password set via web setup on first boot (never in repo/store)	2026-07-13 20:52:06 +02:00
erik	946c44f1d3	feat: scaffold netcup vps host (disko/vda, static net, tailscale, caddy) ... - new nixosConfigurations.vps: UEFI systemd-boot, disko on /dev/vda - static IPv4 159.195.64.117/22 gw .1 (+ IPv6), eth0 pinned, public DNS - tailscale via headscale + sops authkey (secrets/vps.yaml, own host key) - caddy public reverse proxy: audiobookshelf.mgaction.town -> jupiter tailnet:8000 - shared common.nix (user/ssh/nix) ; .sops.yaml per-host rules	2026-07-13 01:01:53 +02:00