erik
ac05d948b6
refactor: rename vps host -> neptun (solar-system theme)
...
git-mv hosts/vps->neptun, secrets/vps.yaml->neptun.yaml; update flake, .sops.yaml
rules, hostName, sops paths, README/CLAUDE. Off-repo host key dir renamed too.
2026-07-14 13:32:44 +02:00
erik
b6c393ff98
refactor: move host configs under hosts/{jupiter,vps}
...
- git-mv jupiter/ vps/ into hosts/; fix ../ -> ../../ for common/services/secrets
- flake.nix + deploy point at hosts/<config>/
- README structure updated
- verified: jupiter/vps/vbox all eval
2026-07-13 19:34:27 +02:00
erik
ec309c8fe1
refactor(deploy): generalize to any config, all params mandatory (no defaults)
2026-07-13 01:05:28 +02:00
erik and Claude Opus 4.8
f9358375b5
feat: sops decrypts via pre-generated SSH host key (works on boot #1 )
...
- pre-generate jupiter SSH host key off-repo (~/.config/homelab/jupiter)
- derive age recipient via ssh-to-age, add to .sops.yaml, re-encrypt secret
- secrets.nix: sops.age.sshKeyPaths = host key (drop separate keyFile)
- gitignore private-key patterns
- README: ship host key via nixos-anywhere --extra-files; secret decrypts boot #1
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-12 20:48:33 +02:00
erik and Claude Opus 4.8
9fb32fd454
feat: disko OS-disk layout + nixos-anywhere install flow
...
- add disko input; jupiter partitions/formats OS disk declaratively
- hardware-configuration.nix carries kernel modules only (disko owns fileSystems)
- data disk stays a plain unformatted mount, out of disko
- vbox unchanged (virtualbox-image supplies its own disk)
- README: nixos-anywhere remote install + daily rebuild loop
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-12 17:44:05 +02:00
erik and Claude Opus 4.8
bb4823efe9
feat: flake NixOS config for jupiter + VirtualBox test image
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-11 16:09:32 +02:00
erik