darman/homelab
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
81 Commits 2 Branches 0 Tags
5845c29a44f29936b745ded7a095874ca357b728
Commit Graph
4 Commits
Author SHA1 Message Date
erik 2b170af346 chore(scripts): move deploy+edit_secrets to scripts/, resolve repo root via git 
- scripts now find the flake root regardless of cwd or where they live on PATH
- gitignore .env
 2026-07-13 18:58:25 +02:00
erikandClaude Opus 4.8 f9358375b5 feat: sops decrypts via pre-generated SSH host key (works on boot #1) 
- pre-generate jupiter SSH host key off-repo (~/.config/homelab/jupiter)
- derive age recipient via ssh-to-age, add to .sops.yaml, re-encrypt secret
- secrets.nix: sops.age.sshKeyPaths = host key (drop separate keyFile)
- gitignore private-key patterns
- README: ship host key via nixos-anywhere --extra-files; secret decrypts boot #1

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-12 20:48:33 +02:00
erikandClaude Opus 4.8 062a631edf feat: samba password provisioning + caddy reverse proxy; rename user to darman 
- systemd oneshot sets SMB password after samba-smbd (activation ran too early)
- caddy vhost reverse_proxy to whoami so :80 actually serves
- vm.nix: throwaway SMB secret for testing; real host uses sops/agenix

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-11 19:02:13 +02:00
erikandClaude Opus 4.8 bb4823efe9 feat: flake NixOS config for jupiter + VirtualBox test image 
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-07-11 16:09:32 +02:00