Fabio Scotto di Santolo
c899bb7192
Harden Rocky storage and sharing configuration
2026-09-15 22:05:48 +02:00
Fabio Scotto di Santolo
2ab5ba6818
Manage SSH authorized key fragments for infrastructure hosts
2026-09-13 15:16:40 +02:00
Fabio Scotto di Santolo
75d9081a11
Rotate Ansible Vault secrets
2026-09-13 13:53:03 +02:00
Fabio Scotto di Santolo
64aebe8c34
Add Atlas media and storage services
2026-09-10 22:27:33 +02:00
Fabio Scotto di Santolo
24268938bd
Hotfix/duckdns token ( #8 )
...
* fix: source DuckDNS token from Vault
* chore: rotate DuckDNS Vault token
2026-09-08 18:48:13 +02:00
Fabio Scotto di Santolo
ae1ca44aa7
Feature/aegis coreos ( #7 )
...
* feat(aegis): add ARM image bootstrap workflow
* feat(aegis): manage firewall and SSH hardening
* feat(aegis): harden Fedora IoT services
* chore(aegis): remove local TLS configuration
* fix(aegis): restore supported Fedora IoT bootstrap
2026-09-05 16:58:53 +02:00
Fabio Scotto di Santolo
1c23326fd5
Add gptel to Emacs desktop profile
2026-04-09 22:28:56 +02:00
Fabio Scotto di Santolo
0081f956df
Enable GPG sign on desktop .gitconfig
2026-04-03 18:14:24 +02:00
Fabio Scotto di Santolo
e5d11bd9c3
Fix vault
2026-04-02 11:16:49 +02:00
Fabio Scotto di Santolo
c2135b66cc
Parameterize Windows PSRP inventory settings
2026-04-01 17:47:42 +02:00
Fabio Scotto di Santolo
9c7bb4653d
Update vault with server secrets
2026-03-30 21:47:05 +02:00
Fabio Scotto di Santolo
965de96094
Add workstation-specific dotfiles support
2026-03-24 14:10:47 +01:00
Fabio Scotto di Santolo
c9ad30c113
Template private desktop mail configs
...
Render personal desktop configs from Ansible templates so public dotfiles no longer expose real identities or mail addresses. Update the bootstrap workflow to consume the rendered mail config and extend the encrypted vault schema for the new private values.
2026-03-18 15:00:56 +01:00
Fabio Scotto di Santolo
576999d864
Add mu4e mail provisioning with vault-backed iCloud secret
2026-03-17 22:12:05 +01:00