nixos

Archived

This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

T

History

beatzaplentyandClaude Sonnet 4.6 5487490b8e feat(ipa): add AuthorizedKeysCommand + enroll tailscale-router

- modules/ipa/client.nix: add AuthorizedKeysCommand so sshd fetches SSH
  public keys from IPA via sss_ssh_authorizedkeys, enabling pubkey login
  without per-host authorized_keys files

- hosts/tailscale-router/host.nix: add IPA client module + networking.domain
  so SSSD runs and wayne can authenticate on this host

- secrets/tailscale-router.keytab: sops-encrypted keytab for
  tailscale-router.sweet.home (generated by create-nixos-ipa-host-account.sh)

- .sops.yaml: creation rule for secrets/tailscale-router.keytab

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-28 09:42:38 +10:00

docker

feat(networking): declare static IPs for all NixOS-managed hosts in flake

2026-07-27 18:14:31 +10:00

ha-server-1

feat(networking): declare static IPs for all NixOS-managed hosts in flake

2026-07-27 18:14:31 +10:00

ha-server-2

feat(networking): declare static IPs for all NixOS-managed hosts in flake

2026-07-27 18:14:31 +10:00

nix-cache

feat(ipa): add reusable declarative FreeIPA client module