Commit Graph

33 Commits

Author SHA1 Message Date
lassulus 3fb36b3ac1 secrets upload: skip on exit 23, cleanup 2023-10-04 21:29:19 +02:00
lassulus 3c1d7a0553 secrets.password-store: ignore ssh errors 2023-10-04 16:34:37 +02:00
lassulus 62caf98f15 secrets.password-store: optimize secret existence check 2023-09-30 09:36:39 +02:00
lassulus 347d9676c5 secrets.password-store: fix multi-secret check 2023-09-30 09:27:25 +02:00
lassulus d810d2b4e1 secrets: allow empty facts 2023-09-30 09:18:24 +02:00
lassulus 89b7ffce6c clan-cli secrets upload: secrets are populated into tmpdir 2023-09-29 20:05:35 +02:00
lassulus 7ca9c49163 restore clanInternals with valid nixos config 2023-09-29 19:39:35 +02:00
lassulus b587bd1b49 secrets.password-store: readd targetDirectory 2023-09-27 21:26:58 +02:00
lassulus 5cf9b4428f clanCore.secrets: facts.value can be null or str 2023-09-27 10:34:53 +02:00
Jörg Thalheim 74a3c85c29 move zerotier secret generation into nixos module 2023-09-26 17:57:43 +02:00
lassulus aeed648bd0 secrets: use clanInternal for crosscompiling, move sops generators to new file 2023-09-21 17:25:32 +02:00
Jörg Thalheim 4096ea3adb don't set age keyfile if don't have a secret for it 2023-09-21 17:22:20 +02:00
Jörg Thalheim 0314132a1a rewrite sops backend for secret generation and add tests 2023-09-21 17:22:20 +02:00
lassulus 521f4ee5bc secrets sops: deploy age key 2023-09-21 17:22:20 +02:00
DavHau 9b6fafcb2d clan config: re-enable clan config 2023-09-19 15:12:29 +02:00
lassulus 0132abc547 secrets: use CLAN_DIR instead of clanCore.clanDir for fact storage 2023-09-15 12:17:07 +00:00
lassulus 6b7301cefb clanCore secrets: document custom store 2023-09-15 12:17:07 +00:00
lassulus c5c2a848c7 secrets pass: append openssh to PATH so we use systems openssh first 2023-09-15 12:17:07 +00:00
lassulus c5786614bf clan-cli secrets: deploy -> upload 2023-09-15 12:17:07 +00:00
lassulus 6153a9ee71 clanCore.secrets: set default and add generate/deploy composite 2023-09-15 12:17:07 +00:00
lassulus 285041026d clanCore sops: add dummy deployScript 2023-09-15 12:17:07 +00:00
lassulus 5285423479 secrets: add password-store implementation 2023-09-15 12:17:07 +00:00
lassulus 3f6fa0eeca clanCore secrets: add secretStore option 2023-09-15 12:17:07 +00:00
Jörg Thalheim 4d9a59c792 move facts to machine subdirectory
This makes it easier to delete facts when removing machines
2023-09-06 15:07:49 +00:00
Jörg Thalheim 89cdbdd62a also auto-import group secrets 2023-09-03 14:58:07 +02:00
Jörg Thalheim 2a9be18d31 generate-secrets: use - instead of _ as file seperator 2023-09-03 14:17:00 +02:00
Jörg Thalheim cfec69fec4 different fix for missing secrets 2023-09-03 14:07:31 +02:00
Jörg Thalheim 0a3982d0ac fix machines folder not beeing present yet 2023-09-03 13:33:41 +02:00
Jörg Thalheim 4e19b7c085 secrets/sops: set dummy default sops file 2023-09-03 07:59:28 +00:00
DavHau ac7e3f6407 sops: fix module to accept missing ./sops dir 2023-09-02 18:25:27 +02:00
DavHau 4afd9910e9 Revert "rename clanCore to clan.core"
This reverts commit fef796fa6e.
2023-08-30 15:24:33 +02:00
Jörg Thalheim fef796fa6e rename clanCore to clan.core 2023-08-30 12:46:49 +00:00
lassulus 9fca1e7f43 move clanCore into nixosModules, add secrets generate command 2023-08-29 16:28:50 +02:00