2026-07-28 09:09:05 +00:00
3 changed files with 18 additions and 0 deletions
@@ -195,3 +195,19 @@ creation_rules:
          - *lxc-minimal
          - *proxmox-minimal
          - *linode-minimal
+
+  # Host keytab for ha-server-1 FreeIPA enrollment (binary sops file).
+  # Generated by scripts/ipa/create-nixos-ipa-host-account.sh.
+  - path_regex: secrets/ha-server-1\.keytab$
+    key_groups:
+      - age:
+          - *admin
+          # proxmox-ha-server-1 added by sync-host-keys.sh
+
+  # Host keytab for ha-server-2 FreeIPA enrollment (binary sops file).
+  # Generated by scripts/ipa/create-nixos-ipa-host-account.sh.
+  - path_regex: secrets/ha-server-2\.keytab$
+    key_groups:
+      - age:
+          - *admin
+          # proxmox-ha-server-2 added by sync-host-keys.sh
@@ -0,0 +1 @@
+STUB: not yet enrolled — run: bash scripts/ipa/create-nixos-ipa-host-account.sh --ip 192.168.2.228 ha-server-1
@@ -0,0 +1 @@
+STUB: not yet enrolled — run: bash scripts/ipa/create-nixos-ipa-host-account.sh --ip 192.168.2.227 ha-server-2
				`@@ -0,0 +1 @@`
				`STUB: not yet enrolled — run: bash scripts/ipa/create-nixos-ipa-host-account.sh --ip 192.168.2.228 ha-server-1`