erik 1937d59b2c feat: per-host darman passwords via sops; mercury sops; AdGuard pw via UI ...

- per-host darman_password (distinct hash) in secrets/{jupiter,vps,mercury}.yaml
  -> hashedPasswordFile; different console password per host (ssh still key-only)
- mercury: dedicated age key (on boot partition post-flash), sops-nix wired
- AdGuard: module has no secret hook + writable config -> mutableSettings=true,
  admin password set via web setup on first boot (never in repo/store)

2026-07-13 20:52:06 +02:00

..

configuration.nix

refactor: move host configs under hosts/{jupiter,vps}

2026-07-13 19:34:27 +02:00

disk-config.nix

refactor: move host configs under hosts/{jupiter,vps}

2026-07-13 19:34:27 +02:00

hardware-configuration.nix

refactor: move host configs under hosts/{jupiter,vps}

2026-07-13 19:34:27 +02:00

secrets.nix

feat: per-host darman passwords via sops; mercury sops; AdGuard pw via UI

2026-07-13 20:52:06 +02:00