Joey Hafner
02972c0d6b
#3 Re-create test secret
2024-08-16 12:45:31 -07:00
Joey Hafner
8c3f370086
#3 Delete test secret
2024-08-16 12:44:47 -07:00
Joey Hafner
f9ca3ca219
#3 Remove unneeded SOPS_AGE_RECIPIENTS configuration from decrypt, cd to repo root
2024-08-16 12:43:31 -07:00
Joey Hafner
1b33a96e93
#3 Re-create test secret
2024-08-16 12:37:52 -07:00
Joey Hafner
96543c7f4f
#3 Delete test secret
2024-08-16 12:34:28 -07:00
Joey Hafner
4daec51130
#3 Debug echo FILE_PATH variable
2024-08-16 12:32:36 -07:00
Joey Hafner
489c8f67d7
#3 Re-create test secret
2024-08-16 12:29:15 -07:00
Joey Hafner
bb9b308cde
#3 Delete testsecret
2024-08-16 12:28:54 -07:00
Joey Hafner
bbad9b07ed
#3 Render absolute path of file to process
2024-08-16 12:27:37 -07:00
Joey Hafner
cc77e386be
#3 Re-introduce test secret
2024-08-16 12:20:38 -07:00
Joey Hafner
c1bc72e9fe
#3 Delete test secret
2024-08-16 12:19:46 -07:00
Joey Hafner
b45df3190d
#3 Reroute stdout and stderr from non-sops commands to log files
2024-08-16 12:16:07 -07:00
Joey Hafner
0080a68f3c
#3 Validate input is file path
2024-08-16 12:09:26 -07:00
Joey Hafner
afc9ef5abd
#3 Re-create test secret
2024-08-15 16:45:25 -07:00
Joey Hafner
958baec8b0
#3 Delete test secret
2024-08-15 16:44:35 -07:00
Joey Hafner
c02b810237
#3 Update encrypt and decrypt filter scripts
...
- Decrypt: use realpath of file to decrypt as FILE_PATH
- Decrypt: Switch from in-place to stdout
- Encrypt: Switch from operating on $1 to $FILE_PATH
2024-08-15 16:28:28 -07:00
Joey Hafner
766a34dfb4
#3 Fix logic for creating age keyfile
2024-08-15 16:24:21 -07:00
Joey Hafner
e5256cff1e
#3 Update script names in filter setup
2024-08-15 16:20:40 -07:00
Joey Hafner
fc5973a46f
#3 Configure sops filter in age-setup script
2024-08-15 16:19:42 -07:00
Joey Hafner
bf81ecbd27
#3 Init working encrypt-filter and testsecret.
...
TODO: Test decrypt-filter, write setup script
2024-08-15 16:14:07 -07:00
Joey Hafner
492fa394d6
Rename filter scripts
2024-08-15 15:46:57 -07:00
Joey Hafner
75b065de25
#3 Debug: Remove checking for count of arguments
2024-08-15 15:17:31 -07:00
Joey Hafner
601a9706f6
Delete unused dungeon-master files
2024-08-15 15:14:07 -07:00
Joey Hafner
205ab38149
#3 Set up scripts to encrypt/decrypt in place
2024-08-15 15:13:41 -07:00
Joey Hafner
c5231f1311
#5 Init Terraform Cloudflare DNS IaC
...
- Import existing records via cf-terraforming utility
- Rename resources to human-readable names
- Move aws and cloudflare terraform roots to their own directories
2024-08-15 15:04:13 -07:00
Joey Hafner
f99e1266ba
Move gitignore to homelab directory
2024-08-15 11:57:13 -07:00
Joey Hafner
172fab21f0
#4 Disable traefik debug logging
2024-08-15 11:56:19 -07:00
Joey Hafner
1b00de1c9d
#4 Remove quotes from token value
2024-08-15 11:47:31 -07:00
Joey Hafner
5aabb51cb5
#4 Add debug logging
...
Switch back to just one token with both Zone/DNS/Edit and Zone/Zone/Read permissions for 'All zones from account'
2024-08-15 11:34:15 -07:00
Joey Hafner
a21aedd233
#4 Enable debug logs for traefik to better diagnose issue getting certs via dnsChallenge
2024-08-15 11:25:31 -07:00
Joey Hafner
03878b77ef
#4 Add cloudflare zone read token
2024-08-15 11:03:59 -07:00
Joey Hafner
ec6f552a53
#4 Add nginx container at test.nginx.jafner.net to test DNS challenge
2024-08-15 10:24:17 -07:00
Joey Hafner
322a79c2f5
#2 Remove unused lines
2024-08-14 14:30:09 -07:00
Joey Hafner
676da8dca3
#2 Move age files to homelab/.sops/
...
Separate "authors" keys and "deploy" keys.
Add features to setup, encrypt, and decrypt scripts:
- Validate input arguments
- Set age keyfile and recipients dynamically at runtime
2024-08-14 14:26:52 -07:00
Joey Hafner
383b8b3351
#3 Switch send to dns01 challenge certresolver
2024-08-14 14:10:49 -07:00
Joey Hafner
1bcc37f70d
#3 Configure lets-encrypt-dns01 certresolver with its own acme.json storage
2024-08-14 14:10:17 -07:00
Joey Hafner
756225c680
#2 Switch postgress back to password from password file
2024-08-14 00:15:41 -07:00
Joey Hafner
228b3768cd
#2 Fix typo: extra underscore
2024-08-14 00:10:32 -07:00
Joey Hafner
b2028a5ad0
#2 Re-encrypt keycloak secrets with fighter's pubkey added to map
2024-08-14 00:05:58 -07:00
Joey Hafner
9ca38bd52c
#2 Replace Docker secrets with encrypted secrets.env file
...
Add encrypt and decrypt scripts
Add pubkeys file with desktop and fighter pubkeys
2024-08-13 23:34:15 -07:00
Joey Hafner
8729e02a23
Switch postgres to native password file, remove entrypoint injection
2024-08-13 15:52:02 -07:00
Joey Hafner
c4cc18835f
Resolve "/bin/sh: 1: source: not found"
2024-08-13 15:39:52 -07:00
Joey Hafner
8efd7c42a8
Simplify entrypoint
2024-08-13 15:38:57 -07:00
Joey Hafner
1f5801d31f
Correct entrypoint script name (this is going to be a pain)
2024-08-13 15:32:17 -07:00
Joey Hafner
aa0fe3365d
Experimental implementation of entrypoint injection to export secrets to env vars
2024-08-13 15:29:04 -07:00
Joey Hafner
f838aa199f
Remove deprecated HOSTNAME_URL option
2024-08-13 11:37:33 -07:00
Joey Hafner
d6682073d8
Update keycloak proxy configuration per upgrading guide.
...
https://www.keycloak.org/server/reverseproxy
https://www.keycloak.org/docs/latest/upgrading/index.html#deprecated-proxy-option
2024-08-13 11:27:01 -07:00
Joey Hafner
037ce905d0
#2 Fix typo in secret filename
2024-08-13 11:15:13 -07:00
Joey Hafner
e6158be743
#2 Remove leftover env_file block for forwardauth
2024-08-13 11:12:38 -07:00
Joey Hafner
623470803b
Move manifests to old/ and init Terraform configuration for silver-hand
2024-08-12 16:41:28 -07:00
