torjus/nixos-servers
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
756 Commits 9 Branches 0 Tags
c214f8543c40f1118f64ac738a2ac3d8a46a6cbd
Commit Graph

2 Commits

Author SHA1 Message Date
Torjus Håkestad
c214f8543c homelab: add deploy.enable option with assertion
All checks were successful
Run nix flake check / flake-check (push) Successful in 2m6s
Details
Run nix flake check / flake-check (pull_request) Successful in 2m7s
Details 
- Add homelab.deploy.enable option (requires vault.enable)
- Create shared homelab-deploy Vault policy for all hosts
- Enable homelab.deploy on all vault-enabled hosts

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-02-07 06:54:42 +01:00
Torjus Håkestad
7933127d77 system: enable homelab-deploy listener for all vault hosts 
Add system/homelab-deploy.nix module that automatically enables the
listener on all hosts with vault.enable=true. Uses homelab.host.tier
and homelab.host.role for NATS subject subscriptions.

- Add homelab-deploy access to all host AppRole policies
- Remove manual listener config from vaulttest01 (now handled by system module)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-02-07 06:54:42 +01:00