Fabio Scotto di Santolo
|
0b6efc9ad8
|
Harden Atlas USB backup cleanup and document restorecon workflow
|
2026-09-25 08:02:44 +02:00 |
|
Fabio Scotto di Santolo
|
361ee77d72
|
Add manual Atlas USB backup and reminder services
|
2026-09-24 08:55:52 +02:00 |
|
Fabio Scotto di Santolo
|
48a7f57f7e
|
Add Cockpit storage management to Atlas and Prometheus
|
2026-09-22 20:49:18 +02:00 |
|
Fabio Scotto di Santolo
|
defa98c968
|
Install Cockpit Podman plugin on Atlas
|
2026-09-22 15:00:10 +02:00 |
|
Fabio Scotto di Santolo
|
21e41f4fc1
|
Prepare Atlas encryption dependencies and update Vault placeholders
|
2026-09-22 14:37:25 +02:00 |
|
Fabio Scotto di Santolo
|
7e498514dd
|
Add encrypted Borg backups for Atlas
|
2026-09-18 10:00:45 +02:00 |
|
Fabio Scotto di Santolo
|
e7836ea25f
|
Manage Atlas ZFS snapshots and scrubs
|
2026-09-17 23:10:53 +02:00 |
|
Fabio Scotto di Santolo
|
bd13cb65cc
|
Move temporary Navidrome and Syncthing services to Atlas
|
2026-09-17 10:18:23 +02:00 |
|
Fabio Scotto di Santolo
|
77afdda0a3
|
Move WireGuard gateway to Aegis
|
2026-09-17 09:08:25 +02:00 |
|
Fabio Scotto di Santolo
|
add75d74e9
|
refactor(atlas): separate service and host backup datasets
|
2026-09-17 00:06:46 +02:00 |
|
Fabio Scotto di Santolo
|
160d63c02d
|
Add Atlas media and storage services [Phase 1] (#9)
* Add Atlas media and storage services
* Document Atlas backend phase one and WireGuard deployment
* Enable Atlas NAS management and document bootstrap workflow
* Harden Atlas network, SSH, firewall, and sharing
* Rotate Ansible Vault secrets
* Allow configurable Aegis SSH users and authorized keys
* Manage Aegis SSH authorized key fragments
* Manage SSH authorized key fragments for infrastructure hosts
* Harden Rocky storage and sharing configuration
* Verify WireGuard handshakes and restore Podman networking
|
2026-09-15 22:39:28 +02:00 |
|
Fabio Scotto di Santolo
|
eab66b6d3d
|
Add dormant Rocky server profile (#2)
* Add dormant Rocky server profile
* feat: activate Rocky server profile for prometheus
* fix: complete Rocky server migration tooling
* Remove FreeBSD profile
* feat: add Aegis Fedora CoreOS profile
* docs: define Git Flow branch prefixes
* Add Aegis TPM-backed btrfs storage
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
* Preserve existing Aegis filesystem tables
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
* Remove unsupported Aegis TPM storage
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
* Configure Aegis pi Btrfs storage
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
* Mount Aegis Btrfs as root
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
* Handle Maven on Mise
* Feature/aegis coreos (#7)
* feat(aegis): add ARM image bootstrap workflow
* feat(aegis): manage firewall and SSH hardening
* feat(aegis): harden Fedora IoT services
* chore(aegis): remove local TLS configuration
* fix(aegis): restore supported Fedora IoT bootstrap
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
|
2026-09-08 10:36:29 +02:00 |
|
Fabio Scotto di Santolo
|
bb907febf8
|
Update Atlas offsite backup plan
|
2026-08-30 23:30:16 +02:00 |
|
Fabio Scotto di Santolo
|
8ed439317a
|
Add Rocky 9 Atlas NAS profile
|
2026-08-30 14:40:01 +02:00 |
|