7d92c55d37
docs: update for sops-to-openbao migration completion
...
Run nix flake check / flake-check (push) Failing after 18m17s
Update CLAUDE.md and README.md to reflect that secrets are now managed
by OpenBao, with sops only remaining for ca. Update migration plans
with sops cleanup checklist and auth01 decommission.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 20:06:21 +01:00
6d117d68ca
docs: move sops-to-openbao migration plan to completed
...
Run nix flake check / flake-check (push) Successful in 2m5s
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 19:45:42 +01:00
0700033c0a
secrets: migrate all hosts from sops to OpenBao vault
...
Replace sops-nix secrets with OpenBao vault secrets across all hosts.
Hardcode root password hash, add extractKey option to vault-secrets
module, update Terraform with secrets/policies for all hosts, and
create AppRole provisioning playbook.
Hosts migrated: ha1, monitoring01, ns1, ns2, http-proxy, nix-cache01
Wave 1 hosts (nats1, jelly01, pgdb1) get AppRole policies only.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 18:43:09 +01:00
4d33018285
docs: add ha1 memory recommendation to migration plan
...
Run nix flake check / flake-check (push) Failing after 3m28s
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 17:48:45 +01:00
678fd3d6de
docs: add systemd-exporter findings to monitoring gaps plan
...
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 10:19:33 +01:00
9d74aa5c04
docs: add zigbee sensor battery monitoring findings
...
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 09:21:54 +01:00
fe80ec3576
docs: add monitoring gaps audit plan
...
Run nix flake check / flake-check (push) Failing after 20m32s
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 03:19:20 +01:00
870fb3e532
docs: add plan for remote access to homelab services
...
Run nix flake check / flake-check (push) Successful in 2m4s
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 02:53:27 +01:00
e602e8d70b
docs: add plan for prometheus scrape target labels
...
Run nix flake check / flake-check (push) Successful in 2m7s
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 02:36:41 +01:00
09d9d71e2b
docs: note to establish hostname naming conventions before migration
...
Run nix flake check / flake-check (push) Has been cancelled
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 02:04:58 +01:00
cc799f5929
docs: note USB passthrough requirement for ha1 migration
...
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 02:02:14 +01:00
0abdda8e8a
docs: add plan for migrating existing hosts to opentofu
...
Run nix flake check / flake-check (push) Failing after 3m28s
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 01:59:51 +01:00
0ef63ad874
hosts: remove decommissioned media1, ns3, ns4, nixos-test1
...
Run nix flake check / flake-check (push) Failing after 4m47s
Run nix flake check / flake-check (pull_request) Successful in 3m20s
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 01:36:57 +01:00
86a077e152
docs: add host cleanup plan for decommissioned hosts
...
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-05 01:04:50 +01:00
a2a55f3955
docs: add docs directory info and nixos options improvement plan
...
Run nix flake check / flake-check (push) Failing after 4m12s
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-04 22:27:11 +01:00
d7d4b0846c
docs: move dns-automation plan to completed
...
Run nix flake check / flake-check (push) Successful in 2m17s
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2026-02-04 22:13:38 +01:00
048536ba70
docs: move dns automation from TODO.md to nixos-improvements.md
Run nix flake check / flake-check (push) Successful in 2m20s
2026-02-03 04:51:27 +01:00
01d4812280
vault: implement bootstrap integration
Run nix flake check / flake-check (push) Successful in 2m31s
Run nix flake check / flake-check (pull_request) Failing after 14m16s
2026-02-03 01:10:36 +01:00
7fc69c40a6
docs: add truenas-migration plan
Run nix flake check / flake-check (push) Successful in 2m18s
Periodic flake update / flake-update (push) Successful in 1m13s
2026-02-02 18:29:11 +01:00
34a2f2ab50
docs: add infrastructure documentation
Run nix flake check / flake-check (push) Failing after 11m9s
2026-02-02 17:36:55 +01:00
c694b9889a
vault: add auto-unseal
Run nix flake check / flake-check (push) Successful in 2m16s
2026-02-02 00:28:24 +01:00
