This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

beatzaplentyandClaude Sonnet 4.6 f4831c9370 feat(pxe-boot): enroll in FreeIPA domain ...

- Add IPA client module with pre-provisioned keytab
- Set networking.domain for correct Kerberos FQDN
- Encrypted keytab covers lxc-pxe-boot and proxmox-pxe-boot age keys

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-28 10:31:36 +10:00

..

common.yaml

fix(secrets): correct corrupted sops fingerprints for proxmox-minimal and lxc-gui

2026-07-25 21:54:25 +10:00

gui.yaml

fix(secrets): correct corrupted sops fingerprints for proxmox-minimal and lxc-gui

2026-07-25 21:54:25 +10:00

ha-corosync-authkey

feat(ha): wire sops secrets and disable NetworkManager for HA servers

2026-07-27 11:45:36 +10:00

ha-server-1.yaml

feat(ha): wire sops secrets and disable NetworkManager for HA servers

2026-07-27 11:45:36 +10:00

ha-server-2.yaml

feat(ha): wire sops secrets and disable NetworkManager for HA servers

2026-07-27 11:45:36 +10:00

nix-cache.keytab

secrets(nix-cache): add sops-encrypted IPA host keytab

2026-07-28 07:25:25 +10:00

nix-cache.yaml

chore(secrets): Phase 4 — remove stale sops.yaml anchors and re-encrypt

2026-07-25 21:31:56 +10:00

pxe-boot.keytab

feat(pxe-boot): enroll in FreeIPA domain

2026-07-28 10:31:36 +10:00

server.yaml

chore(secrets): Phase 4 — remove stale sops.yaml anchors and re-encrypt

2026-07-25 21:31:56 +10:00

tailscale-router.keytab

feat(ipa): add AuthorizedKeysCommand + enroll tailscale-router

2026-07-28 09:42:38 +10:00

tailscale-router.yaml

added tailscale-router beszel secret

2026-07-26 11:14:05 +10:00

tor-relay.yaml

secrets: update recipients and re-encrypt for host key changes

2026-07-25 15:31:22 +10:00