Fabio Scotto di Santolo
21e41f4fc1
Prepare Atlas encryption dependencies and update Vault placeholders
2026-09-22 14:37:25 +02:00
Fabio Scotto di Santolo
7e498514dd
Add encrypted Borg backups for Atlas
2026-09-18 10:00:45 +02:00
Fabio Scotto di Santolo
160d63c02d
Add Atlas media and storage services [Phase 1] ( #9 )
...
* Add Atlas media and storage services
* Document Atlas backend phase one and WireGuard deployment
* Enable Atlas NAS management and document bootstrap workflow
* Harden Atlas network, SSH, firewall, and sharing
* Rotate Ansible Vault secrets
* Allow configurable Aegis SSH users and authorized keys
* Manage Aegis SSH authorized key fragments
* Manage SSH authorized key fragments for infrastructure hosts
* Harden Rocky storage and sharing configuration
* Verify WireGuard handshakes and restore Podman networking
2026-09-15 22:39:28 +02:00
Fabio Scotto di Santolo
24268938bd
Hotfix/duckdns token ( #8 )
...
* fix: source DuckDNS token from Vault
* chore: rotate DuckDNS Vault token
2026-09-08 18:48:13 +02:00
Fabio Scotto di Santolo
ae1ca44aa7
Feature/aegis coreos ( #7 )
...
* feat(aegis): add ARM image bootstrap workflow
* feat(aegis): manage firewall and SSH hardening
* feat(aegis): harden Fedora IoT services
* chore(aegis): remove local TLS configuration
* fix(aegis): restore supported Fedora IoT bootstrap
2026-09-05 16:58:53 +02:00
Fabio Scotto di Santolo
a135edaa3f
Remove deadalus-win and deadalus-ubuntu profiles
...
Rimuove completamente i due host non più in uso dal playbook:
- inventory: gruppi ubuntu_workstation, workstation_dev_ubuntu,
workstation_host_windows e relative entry host
- host_vars deadalus-ubuntu/deadalus-win e group_vars windows
- play workstation_dev_ubuntu e workstation_host_windows in site.yml
- ruolo profile_workstation_host_windows e bootstrap PowerShell
- var PSRP nel vault.yml.example, pacchetti python pypsrp/pyspnego WSL
- collection ansible.windows/community.windows
- riferimenti nella documentazione (README/AGENTS/CLAUDE)
Workstation Linux nativa: resta solo deadalus-fedora.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-21 16:30:30 +02:00
Fabio Scotto di Santolo
c65aab1529
Add GPG sign workstation WSL host
2026-05-22 22:40:29 +02:00
Fabio Scotto di Santolo
1c23326fd5
Add gptel to Emacs desktop profile
2026-04-09 22:28:56 +02:00
Fabio Scotto di Santolo
9659fcce23
Enable SSH access on ikaros
2026-04-09 16:55:01 +02:00
Fabio Scotto di Santolo
0081f956df
Enable GPG sign on desktop .gitconfig
2026-04-03 18:14:24 +02:00
Fabio Scotto di Santolo
7b48cec181
Add configurable Windows package backends and taskbar policy
2026-04-02 23:55:07 +02:00
Fabio Scotto di Santolo
e5d11bd9c3
Fix vault
2026-04-02 11:16:49 +02:00
Fabio Scotto di Santolo
b01b3a7c1a
Support local vault overrides and optional vault pass file
2026-04-02 10:42:14 +02:00
Fabio Scotto di Santolo
6dbd0d5277
Document Windows PSRP vault settings
2026-04-01 17:49:18 +02:00
Fabio Scotto di Santolo
c2135b66cc
Parameterize Windows PSRP inventory settings
2026-04-01 17:47:42 +02:00
Fabio Scotto di Santolo
9c7bb4653d
Update vault with server secrets
2026-03-30 21:47:05 +02:00
Fabio Scotto di Santolo
a90f3a6610
Add server Docker compose stack with Vault-backed secrets
2026-03-30 21:40:12 +02:00
Fabio Scotto di Santolo
965de96094
Add workstation-specific dotfiles support
2026-03-24 14:10:47 +01:00
Fabio Scotto di Santolo
c9ad30c113
Template private desktop mail configs
...
Render personal desktop configs from Ansible templates so public dotfiles no longer expose real identities or mail addresses. Update the bootstrap workflow to consume the rendered mail config and extend the encrypted vault schema for the new private values.
2026-03-18 15:00:56 +01:00
Fabio Scotto di Santolo
576999d864
Add mu4e mail provisioning with vault-backed iCloud secret
2026-03-17 22:12:05 +01:00
Fabio Scotto di Santolo
6e0f5eb83b
first commit
2026-03-12 14:37:50 +01:00
