Fabio Scotto di Santolo
bd13cb65cc
Move temporary Navidrome and Syncthing services to Atlas
2026-09-17 10:18:23 +02:00
Fabio Scotto di Santolo
160d63c02d
Add Atlas media and storage services [Phase 1] ( #9 )
...
* Add Atlas media and storage services
* Document Atlas backend phase one and WireGuard deployment
* Enable Atlas NAS management and document bootstrap workflow
* Harden Atlas network, SSH, firewall, and sharing
* Rotate Ansible Vault secrets
* Allow configurable Aegis SSH users and authorized keys
* Manage Aegis SSH authorized key fragments
* Manage SSH authorized key fragments for infrastructure hosts
* Harden Rocky storage and sharing configuration
* Verify WireGuard handshakes and restore Podman networking
2026-09-15 22:39:28 +02:00
Fabio Scotto di Santolo
ab8c51a57d
Migrate Prometheus stack to Podman
2026-09-08 23:12:41 +02:00
Fabio Scotto di Santolo
eab66b6d3d
Add dormant Rocky server profile ( #2 )
...
* Add dormant Rocky server profile
* feat: activate Rocky server profile for prometheus
* fix: complete Rocky server migration tooling
* Remove FreeBSD profile
* feat: add Aegis Fedora CoreOS profile
* docs: define Git Flow branch prefixes
* Add Aegis TPM-backed btrfs storage
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com >
* Preserve existing Aegis filesystem tables
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com >
* Remove unsupported Aegis TPM storage
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com >
* Configure Aegis pi Btrfs storage
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com >
* Mount Aegis Btrfs as root
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com >
* Handle Maven on Mise
* Feature/aegis coreos (#7 )
* feat(aegis): add ARM image bootstrap workflow
* feat(aegis): manage firewall and SSH hardening
* feat(aegis): harden Fedora IoT services
* chore(aegis): remove local TLS configuration
* fix(aegis): restore supported Fedora IoT bootstrap
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com >
2026-09-08 10:36:29 +02:00
Fabio Scotto di Santolo
67b576d9b3
Fix Git config on Fedora WSL
2026-08-31 17:49:48 +02:00
Fabio Scotto di Santolo
5914ae1557
feat: use BobIDE as diff/merge tool for workstation
2026-08-31 12:51:53 +02:00
Fabio Scotto di Santolo
cb2010b51e
Added configuration for gitlab on workstation
2026-07-27 09:18:46 +02:00
Fabio Scotto di Santolo
8377f2719c
Merge branch 'migrate-to-mint-bsd'
2026-07-17 17:43:45 +02:00
Fabio Scotto di Santolo
8eabc5b340
Update FreeBSD profile with Niri
2026-07-15 22:26:29 +02:00
Fabio Scotto di Santolo
a4b47e0456
Fix Linux Mint target
2026-07-15 10:40:10 +02:00
Fabio Scotto di Santolo
12feafb6d9
Update gitconfig on WSL
2026-07-02 09:32:32 +02:00
Fabio Scotto di Santolo
818d972493
Change merge and diff tool for git on workstation
2026-05-28 14:54:07 +02:00
Fabio Scotto di Santolo
c65aab1529
Add GPG sign workstation WSL host
2026-05-22 22:40:29 +02:00
Fabio Scotto di Santolo
0d9f1b2b61
Disable Nextcloud AIO on server
2026-04-28 16:07:34 +02:00
Fabio Scotto di Santolo
896a1aa530
Add Nextcloud AIO service
2026-04-28 14:48:21 +02:00
Fabio Scotto di Santolo
dccde894aa
Add Syncthing to server container stack
2026-04-20 14:20:53 +02:00
Fabio Scotto di Santolo
28710244f4
Use Magit and mu4e as default Emacs clients
2026-04-17 10:49:16 +02:00
Fabio Scotto di Santolo
dd2975a93c
Reconfigure GPTel for Ollama
2026-04-11 22:29:33 +02:00
Fabio Scotto di Santolo
1c23326fd5
Add gptel to Emacs desktop profile
2026-04-09 22:28:56 +02:00
Fabio Scotto di Santolo
0081f956df
Enable GPG sign on desktop .gitconfig
2026-04-03 18:14:24 +02:00
Fabio Scotto di Santolo
f96964f32b
Fix Docker Compose interpolation: use inline Vault passwords
2026-03-30 21:56:57 +02:00
Fabio Scotto di Santolo
a90f3a6610
Add server Docker compose stack with Vault-backed secrets
2026-03-30 21:40:12 +02:00
Fabio Scotto di Santolo
6c54a7ace0
Harden desktop mail bootstrap workflow
2026-03-26 16:36:28 +01:00
Fabio Scotto di Santolo
980e984020
Add server templates and normalize role tags
2026-03-25 22:07:44 +01:00
Fabio Scotto di Santolo
965de96094
Add workstation-specific dotfiles support
2026-03-24 14:10:47 +01:00
Fabio Scotto di Santolo
c9ad30c113
Template private desktop mail configs
...
Render personal desktop configs from Ansible templates so public dotfiles no longer expose real identities or mail addresses. Update the bootstrap workflow to consume the rendered mail config and extend the encrypted vault schema for the new private values.
2026-03-18 15:00:56 +01:00
