beatzaplenty/debian-configuration
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Restructure: move proxmox/ into subfolder, add pihole/ section with config and CI #3

Merged
beatzaplenty merged 2 commits from worktree-debian-restructure into main 2026-07-23 02:33:54 +00:00
Conversation 0 Commits 2 Files Changed 34
+2132
beatzaplenty commented 2026-07-23 02:31:51 +00:00
Owner
Copy Link
Copy Source
  • Moves all existing content into proxmox/ subfolder
  • Adds pihole/ with config snapshot, pull/apply scripts, and sanitize script
  • Adds secret scanning CI (GitHub Actions + Gitea Actions + local pre-commit hook)
- Moves all existing content into `proxmox/` subfolder - Adds `pihole/` with config snapshot, pull/apply scripts, and sanitize script - Adds secret scanning CI (GitHub Actions + Gitea Actions + local pre-commit hook)
beatzaplenty added 2 commits 2026-07-23 02:31:51 +00:00
restructure: move proxmox/ into subfolder, add pihole/ section 2909db5d04 
All existing content moved from repo root into proxmox/ to make room
for other Debian machine configs. Adds pihole/ with:

- config/pihole.toml — snapshot of current Pi-hole v6 config
- config/dnsmasq.d/99-ipxe-chainload.conf — custom PXE DHCP rules
  (EFI/BIOS iPXE chainload, fixed tag-specificity bug for UEFI boot)
- pull-config.sh <source-host> <dest-dir> — pull live config to disk
- apply-config.sh <source-dir> <dest-host> — push config to a Pi-hole

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XRzqNDrbnYR22ZgZj1Bg3s
ci: add secret scanning for GitHub, Gitea, and local use
Secret Scan / Scan for secrets and sensitive config (push) Failing after 4s
Details
Secret Scan / Scan for secrets and sensitive config (pull_request) Failing after 3s
Details
b269a5d616 
- .gitleaks.toml — extends gitleaks defaults with Pi-hole-specific rules
  for pwhash/totp_secret/app_pwhash; allowlists known-safe patterns
- .github/workflows/secret-scan.yml — GitHub Actions (full history scan)
- .gitea/workflows/secret-scan.yml — Gitea Actions (identical workflow)
- scripts/check-secrets.sh — shared runner used by both CI and local;
  supports --staged-only for pre-commit hook use; falls back to Docker
  if gitleaks isn't on PATH
- scripts/install-hooks.sh — installs pre-commit hook pointing at above
- pihole/sanitize-config.sh — redacts pwhash/totp_secret/app_pwhash
  in pihole.toml in-place before the file is committed
- pihole/pull-config.sh — updated to call sanitize-config.sh
  automatically after every pull so the repo stays clean by default

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XRzqNDrbnYR22ZgZj1Bg3s
beatzaplenty merged commit 898b8239cc into main 2026-07-23 02:33:54 +00:00
beatzaplenty deleted branch worktree-debian-restructure 2026-07-23 02:33:54 +00:00
This repo is archived. You cannot comment on pull requests.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
beatzaplenty
No Assignees
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: beatzaplenty/debian-configuration#3