Commit Graph

73 Commits

Author SHA1 Message Date
Fabio Scotto di Santolo
a97c64b08f Configure Aegis host DNS and NFS support 2026-09-16 10:19:06 +02:00
Fabio Scotto di Santolo
160d63c02d Add Atlas media and storage services [Phase 1] (#9)
* Add Atlas media and storage services

* Document Atlas backend phase one and WireGuard deployment

* Enable Atlas NAS management and document bootstrap workflow

* Harden Atlas network, SSH, firewall, and sharing

* Rotate Ansible Vault secrets

* Allow configurable Aegis SSH users and authorized keys

* Manage Aegis SSH authorized key fragments

* Manage SSH authorized key fragments for infrastructure hosts

* Harden Rocky storage and sharing configuration

* Verify WireGuard handshakes and restore Podman networking
2026-09-15 22:39:28 +02:00
Fabio Scotto di Santolo
e8d059c8ed Install ChatGPT desktop on Fedora desktops 2026-09-11 21:27:48 +02:00
Fabio Scotto di Santolo
ab8c51a57d Migrate Prometheus stack to Podman 2026-09-08 23:12:41 +02:00
Fabio Scotto di Santolo
ab0bbf30ab Document DNS Filter role for Aegis 2026-09-08 18:55:54 +02:00
Fabio Scotto di Santolo
24268938bd Hotfix/duckdns token (#8)
* fix: source DuckDNS token from Vault

* chore: rotate DuckDNS Vault token
2026-09-08 18:48:13 +02:00
Fabio Scotto di Santolo
eab66b6d3d Add dormant Rocky server profile (#2)
* Add dormant Rocky server profile

* feat: activate Rocky server profile for prometheus

* fix: complete Rocky server migration tooling

* Remove FreeBSD profile

* feat: add Aegis Fedora CoreOS profile

* docs: define Git Flow branch prefixes

* Add Aegis TPM-backed btrfs storage

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Preserve existing Aegis filesystem tables

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Remove unsupported Aegis TPM storage

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Configure Aegis pi Btrfs storage

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Mount Aegis Btrfs as root

Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>

* Handle Maven on Mise

* Feature/aegis coreos (#7)

* feat(aegis): add ARM image bootstrap workflow

* feat(aegis): manage firewall and SSH hardening

* feat(aegis): harden Fedora IoT services

* chore(aegis): remove local TLS configuration

* fix(aegis): restore supported Fedora IoT bootstrap

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
2026-09-08 10:36:29 +02:00
Fabio Scotto di Santolo
ae1ca44aa7 Feature/aegis coreos (#7)
* feat(aegis): add ARM image bootstrap workflow

* feat(aegis): manage firewall and SSH hardening

* feat(aegis): harden Fedora IoT services

* chore(aegis): remove local TLS configuration

* fix(aegis): restore supported Fedora IoT bootstrap
2026-09-05 16:58:53 +02:00
copilot-swe-agent[bot]
e92ff1c729 Mount Aegis Btrfs as root
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
2026-09-03 23:02:42 +00:00
copilot-swe-agent[bot]
8d3f67885c Configure Aegis pi Btrfs storage
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
2026-09-03 22:51:57 +00:00
copilot-swe-agent[bot]
bc9b381525 Remove unsupported Aegis TPM storage
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
2026-09-03 22:48:04 +00:00
copilot-swe-agent[bot]
54e1e88a4e Add Aegis TPM-backed btrfs storage
Co-authored-by: fscotto <17803710+fscotto@users.noreply.github.com>
2026-09-03 22:43:54 +00:00
Fabio Scotto di Santolo
764d329a8f feat: add Aegis Fedora CoreOS profile 2026-09-01 22:38:49 +02:00
Fabio Scotto di Santolo
6296925f2d Remove FreeBSD profile 2026-08-31 21:38:13 +02:00
Fabio Scotto di Santolo
45340103d0 feat: manage Java 11 with Mise on Fedora WSL 2026-08-31 18:20:52 +02:00
Fabio Scotto di Santolo
671581d717 feat: manage coding agents independently 2026-08-31 10:02:32 +02:00
Fabio Scotto di Santolo
bb907febf8 Update Atlas offsite backup plan 2026-08-30 23:30:16 +02:00
Fabio Scotto di Santolo
8ed439317a Add Rocky 9 Atlas NAS profile 2026-08-30 14:40:01 +02:00
Fabio Scotto di Santolo
bc5a7572a7 Add English README 2026-08-28 11:51:23 +02:00
Fabio Scotto di Santolo
a6a58245ff Refactor workstation to Fedora WSL target 2026-08-28 11:41:14 +02:00
Fabio Scotto di Santolo
31bc8d07de Add profile for Fedora WSL 2026-08-27 18:11:41 +02:00
Fabio Scotto di Santolo
474f0082bb Refactor Emacs for authoring workflows 2026-08-20 15:35:38 +02:00
Fabio Scotto di Santolo
f2bc1cf768 Keep Maximize New Windows enabled 2026-08-19 14:48:01 +02:00
Fabio Scotto di Santolo
e5a330dab0 Remove Hyprland and FreeBSD desktop profiles 2026-08-19 14:21:20 +02:00
Fabio Scotto di Santolo
6e27569dc3 Remove obsolete desktop profiles 2026-08-19 13:52:15 +02:00
Fabio Scotto di Santolo
e36e36a77e Update README.md 2026-07-19 14:59:09 +02:00
Fabio Scotto di Santolo
7b0e02bc9b Migrate ikaros to Fedora Workstation 2026-07-19 14:50:46 +02:00
Fabio Scotto di Santolo
800cdf7c31 Update nymph Fedora desktop configuration 2026-07-17 22:39:36 +02:00
Fabio Scotto di Santolo
2b9d22172b Change nymph target to Fedora Workstation 2026-07-17 19:52:20 +02:00
Fabio Scotto di Santolo
2bfe6fd8fa Move nymph to target Void+Niri 2026-07-17 17:42:05 +02:00
Fabio Scotto di Santolo
8eabc5b340 Update FreeBSD profile with Niri 2026-07-15 22:26:29 +02:00
Fabio Scotto di Santolo
f33f3fe433 Switch to Linux Mint and FreeBSD 2026-07-11 22:04:22 +02:00
Fabio Scotto di Santolo
dc230feace Add XFCE optional desktop 2026-07-01 23:48:11 +02:00
Fabio Scotto di Santolo
bac7d92cf6 Add optional KDE desktop profile 2026-06-21 20:45:11 +02:00
Fabio Scotto di Santolo
ae8a6161cd Remove i3 desktop profile and st terminal
Elimina completamente la sessione desktop i3 (X11), ormai non più usata
(gli host espongono solo sway e Hyprland su Wayland):
- ruolo profile_desktop_i3 e voce emptty i3.desktop
- desktop_i3_packages e i guard 'i3' in desktop_sessions_enabled
- desktop_i3_dotfiles e host_i3_dotfiles (autorandr X11)
- dotfiles i3/X11: .xinitrc, i3, i3blocks, picom, polybar, autorandr
- task host-specifici i3 (copy dotfiles, wrap prime-run su nymph)
- rimuove st (terminale X11 da sorgente) da desktop_void_source_tools
- consolida lo script live in scripts/remove_i3.sh, elimina cleanup-i3.sh
- aggiorna la documentazione (README/AGENTS/CLAUDE/knowledge)

Config Emacs lasciata invariata di proposito.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-21 16:59:08 +02:00
Fabio Scotto di Santolo
a135edaa3f Remove deadalus-win and deadalus-ubuntu profiles
Rimuove completamente i due host non più in uso dal playbook:
- inventory: gruppi ubuntu_workstation, workstation_dev_ubuntu,
  workstation_host_windows e relative entry host
- host_vars deadalus-ubuntu/deadalus-win e group_vars windows
- play workstation_dev_ubuntu e workstation_host_windows in site.yml
- ruolo profile_workstation_host_windows e bootstrap PowerShell
- var PSRP nel vault.yml.example, pacchetti python pypsrp/pyspnego WSL
- collection ansible.windows/community.windows
- riferimenti nella documentazione (README/AGENTS/CLAUDE)

Workstation Linux nativa: resta solo deadalus-fedora.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-21 16:30:30 +02:00
Fabio Scotto di Santolo
769e61a488 Add Hyprland Void desktop profile 2026-06-06 16:08:35 +02:00
Fabio Scotto di Santolo
e2ea8edd9b docs: update for sway support and package bucket rules 2026-05-17 15:01:00 +02:00
Fabio Scotto di Santolo
1396bb842e Align README and AGENTS docs with current repository state
Remove all remaining Sway/Noctalia/Wayland references after their
removal from the playbook. Update topology and playbook composition
to reflect that both ikaros and nymph now run i3, drop the
profile_desktop_sway role row, remove the sway tag and any sway-tag
example. Update the dotfiles tree to include the actual subdirectories
(ubuntu, workstation_host_linux, workstation_dev_wsl). Document the
emptty XORG_SESSIONS_PATH whitelist and the nymph NVIDIA Optimus
overrides (GRUB cmdline, prime-run, WirePlumber camera priority).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-14 00:25:04 +02:00
Fabio Scotto di Santolo
ef02a4b2ea Added npm tag 2026-05-10 09:02:08 +02:00
Fabio Scotto di Santolo
20d087d2ef Enhance Sway/Noctalia integration and align desktop docs
- Add canonical usb-drive-manager plugin to Noctalia (symlink from official)
- Remove nm-applet and blueman packages from nymph Sway session
- Run udiskie without tray (backend for automount/LUKS, UI via usb-drive-manager)
- Add screenOverrides support to Noctalia bar via inventory variables
- Add host_packages_absent task to packages_void role
- Update desktop docs with full plugin list and config layering
- Add focused validation check for Sway/Noctalia bootstrap
2026-04-22 17:11:30 +02:00
Fabio Scotto di Santolo
6a2694b7cd Remove Ollama server infrastructure and related tasks 2026-04-22 10:46:14 +02:00
Fabio Scotto di Santolo
4632f20c87 Migrate nymph desktop to SwayFX and Noctalia 2026-04-21 23:04:52 +02:00
Fabio Scotto di Santolo
3ef9356737 Add desktop ollama service flag 2026-04-21 17:02:28 +02:00
Fabio Scotto di Santolo
d01b4c4c6a Split Emacs dotfiles deployment 2026-04-21 09:58:21 +02:00
Fabio Scotto di Santolo
dccde894aa Add Syncthing to server container stack 2026-04-20 14:20:53 +02:00
Fabio Scotto di Santolo
8c3b399a30 Simplify tmux config and bootstrap plugins with TPM 2026-04-17 16:09:59 +02:00
Fabio Scotto di Santolo
fa9b1a2a01 Stop managing Ollama through turnstile 2026-04-17 14:09:29 +02:00
Fabio Scotto di Santolo
e5c8bba594 Remove Hyprland support from desktop profile 2026-04-17 12:15:41 +02:00
Fabio Scotto di Santolo
e9bb9ad798 Remove Codex CLI from desktop bootstrap and dotfiles 2026-04-17 11:52:48 +02:00