about summary refs log tree commit diff
path: root/secrets.nix (follow)
Commit message (Collapse)AuthorAgeFilesLines
* secrets: move all the secrets under module/Franck Cuny2022-04-101-28/+0
| | | | | Refactor a bit the configuration, which should simplify the management and usage of secrets from now on.
* rclone: synchronize restic repo to GCSFranck Cuny2022-03-111-0/+3
| | | | | | Add a couple of secrets to store the configuration and the service account, and add a timer to synchronize the restic repository to a GCS bucket once a day.
* restic: add the secret for the repo 'systems'Franck Cuny2022-03-071-0/+2
|
* unifi: configure the pollerFranck Cuny2022-03-061-0/+2
|
* traefik: initial configurationFranck Cuny2022-03-061-0/+3
| | | | | | | | | I want to run traefik on the NAS, so I can reach grafana and other future services running on that host. To manage TLS, we use let's encrypt with a DNS challenge. For this to work we need a service account configuration, that is encrypted with age.
* agenix: rekey secretsFranck Cuny2022-03-051-7/+13
| | | | Reinstalled tahoe, new ssh key for the host.
* secrets: add a new key and rekey existing keysFranck Cuny2022-03-011-2/+3
|
* tahoe: wireguard setupFranck Cuny2022-02-211-0/+1
|
* secrets: initial config and a first secretFranck Cuny2022-02-211-0/+10