fscotto/infra
1
0
Fork 0
mirror of https://github.com/fscotto/infra.git synced 2026-09-27 19:03:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
511 Commits 2 Branches 0 Tags
3ac732751c9906e89d87bb9bd56540466e2baf64
Commit Graph

511 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Fabio Scotto di Santolo
3ac732751c Add pinned Java 25 to Mise on WSL workstation 2026-09-21 11:57:51 +02:00
Fabio Scotto di Santolo
e837b0059b Document validated Atlas Borg backup activation 2026-09-18 10:09:12 +02:00
Fabio Scotto di Santolo
7e498514dd Add encrypted Borg backups for Atlas 2026-09-18 10:00:45 +02:00
Fabio Scotto di Santolo
e7836ea25f Manage Atlas ZFS snapshots and scrubs 2026-09-17 23:10:53 +02:00
Fabio Scotto di Santolo
de2c24d15c Mount the shared Archive in Syncthing 2026-09-17 19:41:23 +02:00
Fabio Scotto di Santolo
bd13cb65cc Move temporary Navidrome and Syncthing services to Atlas 2026-09-17 10:18:23 +02:00
Fabio Scotto di Santolo
77afdda0a3 Move WireGuard gateway to Aegis 2026-09-17 09:08:25 +02:00
Fabio Scotto di Santolo
add75d74e9 refactor(atlas): separate service and host backup datasets 2026-09-17 00:06:46 +02:00
Fabio Scotto di Santolo
e46a2b22d7 Update Atlas NAS validation status and remaining TODOs 2026-09-16 10:25:38 +02:00
Fabio Scotto di Santolo
a97c64b08f Configure Aegis host DNS and NFS support 2026-09-16 10:19:06 +02:00
Fabio Scotto di Santolo
160d63c02d Add Atlas media and storage services [Phase 1] (#9) 
* Add Atlas media and storage services

* Document Atlas backend phase one and WireGuard deployment

* Enable Atlas NAS management and document bootstrap workflow

* Harden Atlas network, SSH, firewall, and sharing

* Rotate Ansible Vault secrets

* Allow configurable Aegis SSH users and authorized keys

* Manage Aegis SSH authorized key fragments

* Manage SSH authorized key fragments for infrastructure hosts

* Harden Rocky storage and sharing configuration

* Verify WireGuard handshakes and restore Podman networking
 2026-09-15 22:39:28 +02:00
Fabio Scotto di Santolo
73bf2cd62a feature: add WSL container tooling 2026-09-15 16:38:33 +02:00
Fabio Scotto di Santolo
e8d059c8ed Install ChatGPT desktop on Fedora desktops 2026-09-11 21:27:48 +02:00
Fabio Scotto di Santolo
569e6ef24e Fix desktop dotfile idempotency 2026-09-08 23:24:53 +02:00
Fabio Scotto di Santolo
ab8c51a57d Migrate Prometheus stack to Podman 2026-09-08 23:12:41 +02:00
Fabio Scotto di Santolo
7203ac6e2d Install cockpit and enable socket on prometheus 2026-09-08 19:17:22 +02:00
Fabio Scotto di Santolo
fc8df74050 Keep podman on rocky server for future Docker migration 2026-09-08 19:17:20 +02:00
Fabio Scotto di Santolo
350fc7ac95 Rename SSH host alias vps to prometheus-ubuntu 2026-09-08 18:56:00 +02:00
Fabio Scotto di Santolo
ab0bbf30ab Document DNS Filter role for Aegis 2026-09-08 18:55:54 +02:00
Fabio Scotto di Santolo
24268938bd Hotfix/duckdns token (#8) 
* fix: source DuckDNS token from Vault

* chore: rotate DuckDNS Vault token
 2026-09-08 18:48:13 +02:00
Fabio Scotto di Santolo
54e2917062 chore: uninstall GitHub Copilot agent 2026-09-08 10:42:25 +02:00
Fabio Scotto di Santolo
eab66b6d3d Add dormant Rocky server profile (#2) 
* Add dormant Rocky server profile

* feat: activate Rocky server profile for prometheus

* fix: complete Rocky server migration tooling

* Remove FreeBSD profile

* feat: add Aegis Fedora CoreOS profile

* docs: define Git Flow branch prefixes

* Add Aegis TPM-backed btrfs storage

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Preserve existing Aegis filesystem tables

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Remove unsupported Aegis TPM storage

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Configure Aegis pi Btrfs storage

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Mount Aegis Btrfs as root

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Handle Maven on Mise

* Feature/aegis coreos (#7)

* feat(aegis): add ARM image bootstrap workflow

* feat(aegis): manage firewall and SSH hardening

* feat(aegis): harden Fedora IoT services

* chore(aegis): remove local TLS configuration

* fix(aegis): restore supported Fedora IoT bootstrap

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
 2026-09-08 10:36:29 +02:00
Fabio Scotto di Santolo
ae1ca44aa7 Feature/aegis coreos (#7) 
* feat(aegis): add ARM image bootstrap workflow

* feat(aegis): manage firewall and SSH hardening

* feat(aegis): harden Fedora IoT services

* chore(aegis): remove local TLS configuration

* fix(aegis): restore supported Fedora IoT bootstrap
 2026-09-05 16:58:53 +02:00
Fabio Scotto di Santolo
295f1a62ad Handle Maven on Mise 2026-09-04 09:36:01 +02:00
Copilot
6da430b9e4 Merge pull request #5 from fscotto/copilot/featureadd-pi-user-and-encrypt-filesystem 
Configure Aegis with a pi user and Btrfs root filesystem
 2026-09-04 01:04:28 +02:00
copilot-swe-agent[bot]
e92ff1c729 Mount Aegis Btrfs as root 
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
 2026-09-03 23:02:42 +00:00
copilot-swe-agent[bot]
8d3f67885c Configure Aegis pi Btrfs storage 
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
 2026-09-03 22:51:57 +00:00
copilot-swe-agent[bot]
bc9b381525 Remove unsupported Aegis TPM storage 
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
 2026-09-03 22:48:04 +00:00
copilot-swe-agent[bot]
2004b48cf3 Preserve existing Aegis filesystem tables 
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
 2026-09-03 22:44:21 +00:00
copilot-swe-agent[bot]
54e1e88a4e Add Aegis TPM-backed btrfs storage 
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
 2026-09-03 22:43:54 +00:00
Fabio Scotto di Santolo
cb88e95385 docs: define Git Flow branch prefixes 2026-09-01 22:44:14 +02:00
Fabio Scotto di Santolo
764d329a8f feat: add Aegis Fedora CoreOS profile 2026-09-01 22:38:49 +02:00
Fabio Scotto di Santolo
1517c92866 Merge pull request #3 from fscotto/remove-freebsd-profile 
Remove FreeBSD profile
 2026-08-31 21:39:44 +02:00
Fabio Scotto di Santolo
6296925f2d Remove FreeBSD profile 2026-08-31 21:38:13 +02:00
Fabio Scotto di Santolo
45340103d0 feat: manage Java 11 with Mise on Fedora WSL 2026-08-31 18:20:52 +02:00
Fabio Scotto di Santolo
67b576d9b3 Fix Git config on Fedora WSL 2026-08-31 17:49:48 +02:00
Fabio Scotto di Santolo
5914ae1557 feat: use BobIDE as diff/merge tool for workstation 2026-08-31 12:51:53 +02:00
Fabio Scotto di Santolo
671581d717 feat: manage coding agents independently 2026-08-31 10:02:32 +02:00
Fabio Scotto di Santolo
7f6a45f614 Fix GitHub Copilot CLI 2026-08-30 23:56:36 +02:00
Fabio Scotto di Santolo
aadebbebd0 Add Raspberry Pi Imager to Fedora desktops 2026-08-30 23:37:24 +02:00
Fabio Scotto di Santolo
bb907febf8 Update Atlas offsite backup plan 2026-08-30 23:30:16 +02:00
Fabio Scotto di Santolo
2c1f58ce8e Add Seahorse and GSConnect to GNOME desktops 2026-08-30 16:45:44 +02:00
Fabio Scotto di Santolo
10bf0ee685 Sync Ikaros app picker layout 2026-08-30 16:37:10 +02:00
Fabio Scotto di Santolo
17ffa58e19 Use native Evolution desktop client 2026-08-30 16:32:09 +02:00
Fabio Scotto di Santolo
097374f2c5 Replace LibreOffice with OnlyOffice Flatpak 2026-08-30 16:07:01 +02:00
Fabio Scotto di Santolo
8ed439317a Add Rocky 9 Atlas NAS profile 2026-08-30 14:40:01 +02:00
Fabio Scotto di Santolo
bc5a7572a7 Add English README 2026-08-28 11:51:23 +02:00
Fabio Scotto di Santolo
a6a58245ff Refactor workstation to Fedora WSL target 2026-08-28 11:41:14 +02:00
Fabio Scotto di Santolo
3f0654a4bd Merge branch 'feature/fedora-wsl' 2026-08-27 22:41:10 +02:00
Fabio Scotto di Santolo
8771fe79c8 Install LazyGit from official release on Fedora WSL 2026-08-27 18:57:11 +02:00