gortium/infra
1
1
Fork 0
Code Issues 13 Pull Requests 24 Actions Packages Projects 1 Releases Wiki Activity
304 Commits 65 Branches 0 Tags
5de646d01800d0bfb0bdaec7fb69c0b27aed3732
Commit Graph

9 Commits

Author SHA1 Message Date
Hermes
24761b58b2 Add agenix-rekey module + rekey config back to lazyworkhorse 
agenix-rekey auto-re-encrypts secrets per host at build time:
- Encrypted once in git with master identity
- Re-encrypted for each host using their SSH host key
- No manual multi-recipient encryption needed
 2026-06-22 00:05:22 -04:00
Hermes
e03f09c247 Merge feat/remote-builders into uconsole-cm5-incremental 
Bidirectional remote building + rename uconsole-cm5 -> uConsole:
- Rename all uconsole-cm5 refs to uConsole (nixosSystem key, paths, module)
- Replace single-machine remote-builder module with multi-machine config
- Enable remote builder on lazyworkhorse -> uConsole (aarch64)
- Enable remote builder on uConsole -> lazyworkhorse (x86_64)
- Add builder system user + SSH key via agenix-rekey (secrets/builder_key.age)
- Add builder_key + gortium_password age secrets to all hosts
- Fix pre-existing bugs: missing modules in lazyworkhorse/cyt-pi,
  SSH config structure (hostKeys outside settings), cyt-pi inline user
- Remove obsolete openclaw-node service + module + age secrets
 2026-06-21 23:14:14 -04:00
Thierry Pouplier
9004163891 feat: add agenix secret for gortium password on uConsole 
- Add gortium_password.age entry in secrets.nix
- Add age.secrets.gortium_password in uConsole config
- Add hashedPasswordFile to existing gortium user
- Add ai-worker user for Hermes SSH access
 2026-06-14 19:53:40 -04:00
Hermes
a527b65eae fix(uconsole): rename secret to home_wifi (shared across hosts, not uconsole-specific) 2026-06-12 16:17:48 -04:00
Hermes
698d3f91eb feat(uconsole): add agenix secret for WiFi credentials 
- age.secrets.uconsole-wifi (SSID+password in encrypted file)
- systemd service ensure-wifi reads decrypted secret and configures NM
- agenix.nixosModules.default imported for uconsole-cm5
- uconsole-wifi.age declared in secrets/secrets.nix
 2026-06-12 16:15:37 -04:00
Robert
401b23ce46 feat: add openclaw node service and migrate to lix 
- Add headless openclaw node systemd service for host execution
- Migrate from nix to lix package manager
- Permit openclaw-2026.3.12 (insecure package warning)
- Use ai-worker user for node service
 2026-04-04 16:26:33 -04:00
Thierry Pouplier
71dfd04108 chore: add n8n-worker user and update authentication configuration 2026-01-01 02:25:34 -05:00
Thierry Pouplier
3497d93dcb Added a bootstrap key 2025-08-19 18:00:09 -04:00
Thierry Pouplier
911f3589a2 Used agenix to manage secrets, 4 services up, ssh 2025-08-08 17:00:47 -04:00