ce7bd53e26
#3 Touch secrets.env to re-encrypt with fighter's host pubkey as recipient
2024-08-16 15:28:45 -07:00
8d0add4d16
#3 Update encrypt filter to get host pubkey correctly
2024-08-16 15:27:30 -07:00
cbaedf5018
#3 Refactor secret management for fighter/zipline
2024-08-16 15:21:59 -07:00
448295b7ca
#3 Fix filters missing quotes, pass '%f' to filter scripts in setup
2024-08-16 15:16:31 -07:00
31ef9b5a53
#3 Enable sops filter for all secrets.env files
2024-08-16 15:09:25 -07:00
d3d6807af6
#3 Update gitignore for homelab to explicit list of secrets files, will remove each from list one at a time
2024-08-16 15:06:35 -07:00
49c4c9b085
#3 Delete test secrets
2024-08-16 14:35:55 -07:00
ba933c9533
#3 Remove duplicate keypair setup block
2024-08-16 14:34:22 -07:00
dff6d688be
#3 chmod +x age-setup.sh
2024-08-16 14:33:26 -07:00
7052b517fb
#3 Polish up the setup script, delete unused manual scripts
2024-08-16 14:31:58 -07:00
72f3f50b15
#3 Add handling for each file type supported by sops, including binary
2024-08-16 14:11:46 -07:00
86aa517c52
#3 Re-create test secrets
2024-08-16 13:42:10 -07:00
cdcc806113
#3 Delete test secrets
2024-08-16 13:39:28 -07:00
2f6536362a
#3 Add second test secret
2024-08-16 13:22:28 -07:00
2e676c3f4d
#3 Re-create test secret
2024-08-16 13:00:25 -07:00
d2aaac378f
#3 Delete test secret
2024-08-16 12:58:57 -07:00
bea0e29f89
#3 Switch to file descriptor 3 as input to sops
2024-08-16 12:52:04 -07:00
049ae05b4a
#3 Debug: echo working directory to diagnose whether we're working from a subdirectory of .git, rather than the true repo root.
2024-08-16 12:49:08 -07:00
02972c0d6b
#3 Re-create test secret
2024-08-16 12:45:31 -07:00
8c3f370086
#3 Delete test secret
2024-08-16 12:44:47 -07:00
f9ca3ca219
#3 Remove unneeded SOPS_AGE_RECIPIENTS configuration from decrypt, cd to repo root
2024-08-16 12:43:31 -07:00
1b33a96e93
#3 Re-create test secret
2024-08-16 12:37:52 -07:00
96543c7f4f
#3 Delete test secret
2024-08-16 12:34:28 -07:00
4daec51130
#3 Debug echo FILE_PATH variable
2024-08-16 12:32:36 -07:00
489c8f67d7
#3 Re-create test secret
2024-08-16 12:29:15 -07:00
bb9b308cde
#3 Delete testsecret
2024-08-16 12:28:54 -07:00
bbad9b07ed
#3 Render absolute path of file to process
2024-08-16 12:27:37 -07:00
cc77e386be
#3 Re-introduce test secret
2024-08-16 12:20:38 -07:00
c1bc72e9fe
#3 Delete test secret
2024-08-16 12:19:46 -07:00
b45df3190d
#3 Reroute stdout and stderr from non-sops commands to log files
2024-08-16 12:16:07 -07:00
0080a68f3c
#3 Validate input is file path
2024-08-16 12:09:26 -07:00
afc9ef5abd
#3 Re-create test secret
2024-08-15 16:45:25 -07:00
958baec8b0
#3 Delete test secret
2024-08-15 16:44:35 -07:00
c02b810237
#3 Update encrypt and decrypt filter scripts
...
- Decrypt: use realpath of file to decrypt as FILE_PATH
- Decrypt: Switch from in-place to stdout
- Encrypt: Switch from operating on $1 to $FILE_PATH
2024-08-15 16:28:28 -07:00
766a34dfb4
#3 Fix logic for creating age keyfile
2024-08-15 16:24:21 -07:00
e5256cff1e
#3 Update script names in filter setup
2024-08-15 16:20:40 -07:00
fc5973a46f
#3 Configure sops filter in age-setup script
2024-08-15 16:19:42 -07:00
bf81ecbd27
#3 Init working encrypt-filter and testsecret.
...
TODO: Test decrypt-filter, write setup script
2024-08-15 16:14:07 -07:00
492fa394d6
Rename filter scripts
2024-08-15 15:46:57 -07:00
75b065de25
#3 Debug: Remove checking for count of arguments
2024-08-15 15:17:31 -07:00
601a9706f6
Delete unused dungeon-master files
2024-08-15 15:14:07 -07:00
205ab38149
#3 Set up scripts to encrypt/decrypt in place
2024-08-15 15:13:41 -07:00
c5231f1311
#5 Init Terraform Cloudflare DNS IaC
...
- Import existing records via cf-terraforming utility
- Rename resources to human-readable names
- Move aws and cloudflare terraform roots to their own directories
2024-08-15 15:04:13 -07:00
f99e1266ba
Move gitignore to homelab directory
2024-08-15 11:57:13 -07:00
172fab21f0
#4 Disable traefik debug logging
2024-08-15 11:56:19 -07:00
1b00de1c9d
#4 Remove quotes from token value
2024-08-15 11:47:31 -07:00
5aabb51cb5
#4 Add debug logging
...
Switch back to just one token with both Zone/DNS/Edit and Zone/Zone/Read permissions for 'All zones from account'
2024-08-15 11:34:15 -07:00
a21aedd233
#4 Enable debug logs for traefik to better diagnose issue getting certs via dnsChallenge
2024-08-15 11:25:31 -07:00
03878b77ef
#4 Add cloudflare zone read token
2024-08-15 11:03:59 -07:00
ec6f552a53
#4 Add nginx container at test.nginx.jafner.net to test DNS challenge
2024-08-15 10:24:17 -07:00
