Commit Graph

12 Commits

Author SHA1 Message Date
Fabio Scotto di Santolo
24268938bd Hotfix/duckdns token (#8)
* fix: source DuckDNS token from Vault

* chore: rotate DuckDNS Vault token
2026-09-08 18:48:13 +02:00
Fabio Scotto di Santolo
eab66b6d3d Add dormant Rocky server profile (#2)
* Add dormant Rocky server profile

* feat: activate Rocky server profile for prometheus

* fix: complete Rocky server migration tooling

* Remove FreeBSD profile

* feat: add Aegis Fedora CoreOS profile

* docs: define Git Flow branch prefixes

* Add Aegis TPM-backed btrfs storage

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Preserve existing Aegis filesystem tables

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Remove unsupported Aegis TPM storage

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Configure Aegis pi Btrfs storage

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Mount Aegis Btrfs as root

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Handle Maven on Mise

* Feature/aegis coreos (#7)

* feat(aegis): add ARM image bootstrap workflow

* feat(aegis): manage firewall and SSH hardening

* feat(aegis): harden Fedora IoT services

* chore(aegis): remove local TLS configuration

* fix(aegis): restore supported Fedora IoT bootstrap

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
2026-09-08 10:36:29 +02:00
Fabio Scotto di Santolo
d045299f59 Generalize UFW rule inventory inputs 2026-04-10 18:55:46 +02:00
Fabio Scotto di Santolo
a90f3a6610 Add server Docker compose stack with Vault-backed secrets 2026-03-30 21:40:12 +02:00
Fabio Scotto di Santolo
d6b19cc7c4 Add server profile directory setup 2026-03-30 19:02:24 +02:00
Fabio Scotto di Santolo
32e0b4cecd Make server profile user configurable 2026-03-30 17:55:29 +02:00
Fabio Scotto di Santolo
686d77d942 Harden SSH access on server profile 2026-03-25 22:26:07 +01:00
Fabio Scotto di Santolo
980e984020 Add server templates and normalize role tags 2026-03-25 22:07:44 +01:00
Fabio Scotto di Santolo
fc67ba7d18 Enable UFW across Ubuntu profiles 2026-03-25 21:44:13 +01:00
Fabio Scotto di Santolo
b75f52539e Copy server duckdns dotfiles 2026-03-25 21:30:38 +01:00
Fabio Scotto di Santolo
ebbb948d1e Wire Ubuntu server profile into playbook 2026-03-25 19:16:46 +01:00
Fabio Scotto di Santolo
6e0f5eb83b first commit 2026-03-12 14:37:50 +01:00