This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

beatzaplentyandClaude Sonnet 4.6 5487490b8e feat(ipa): add AuthorizedKeysCommand + enroll tailscale-router ...

- modules/ipa/client.nix: add AuthorizedKeysCommand so sshd fetches SSH
  public keys from IPA via sss_ssh_authorizedkeys, enabling pubkey login
  without per-host authorized_keys files

- hosts/tailscale-router/host.nix: add IPA client module + networking.domain
  so SSSD runs and wayne can authenticate on this host

- secrets/tailscale-router.keytab: sops-encrypted keytab for
  tailscale-router.sweet.home (generated by create-nixos-ipa-host-account.sh)

- .sops.yaml: creation rule for secrets/tailscale-router.keytab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-28 09:42:38 +10:00

..

beszel

Fix beszel-agent losing its hub-pairing fingerprint on every restart

2026-07-20 15:59:24 +10:00

boot

Resolve all statix and nixpkgs-fmt warnings repo-wide

2026-07-20 03:47:42 +10:00

build-types

fix(server): prevent zfs-init-tank from wiping pool on udev race

2026-07-27 21:52:39 +10:00

clan

feat(provision): Phase 2 — migrate SSH host keys to clan vars

2026-07-25 18:22:33 +10:00

common

fix(common): set mutableUsers = false to fix password setup on disk images

2026-07-26 07:36:06 +10:00

disko

Stage a ZFS RAID0 disko layout for the bare-metal gui host

2026-07-21 23:54:00 +00:00

docker

Fix NFS mount device strings on lxc-docker: use FQDN, not search domain

2026-07-21 01:19:42 +00:00

ha

fix(network): wire correct IPs throughout and add cutover plan

2026-07-27 12:32:54 +10:00

hardware-configuration

Add baremetal-gui flake target with ZFS RAID0, AMD GPU, and sops-backed wifi

2026-07-22 01:25:29 +00:00

installer

Fix auto-install.sh to work standalone, not just baked into the image

2026-07-22 02:38:11 +00:00

ipa

feat(ipa): add AuthorizedKeysCommand + enroll tailscale-router

2026-07-28 09:42:38 +10:00

networking

Add baremetal-gui flake target with ZFS RAID0, AMD GPU, and sops-backed wifi

2026-07-22 01:25:29 +00:00

nix-cache

fix(nix-cache): use FQDN to fix hostname resolution on clients

2026-07-25 16:01:56 +10:00

platforms

fix(lxc): auto-derive privileged from NFS fileSystems, not hostname list

2026-07-27 05:27:56 +10:00

pxe-boot

fix: wire vars.nfsShares.options and correct stale share key names

2026-07-27 04:45:16 +10:00

raspi

Fix NFS shares never mounting on lxc-docker

2026-07-20 12:56:42 +00:00

services

Resolve all statix and nixpkgs-fmt warnings repo-wide

2026-07-20 03:47:42 +10:00

tailscale

fix(tailscale-router): scope ts.net forwarder to tailnet subdomain

2026-07-27 19:23:46 +10:00

tor

Add lxc-tor-relay build type with nyx monitoring

2026-07-20 13:36:03 +00:00

traefik

Expand variables.nix: NFS shares, ports, image size, GC/rotation, Pi host

2026-07-20 08:27:37 +10:00