Torjus Håkestad b31c64f1b9 kanidm: remove declarative user provisioning ...

Keep base groups (admins, users, ssh-users) provisioned declaratively
but manage regular users via the kanidm CLI. This allows setting POSIX
attributes and passwords in a single workflow.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-08 15:14:03 +01:00

..

actions-runner

secrets: migrate all hosts from sops to OpenBao vault

2026-02-05 18:43:09 +01:00

home-assistant

home-assistant: fix zigbee battery value_template override key

2026-02-06 00:48:30 +01:00

http-proxy

acme: migrate from step-ca to OpenBao PKI

2026-02-07 18:20:10 +01:00

jellyfin

monitoring: auto-generate Prometheus scrape targets from host configs

2026-02-05 00:49:07 +01:00

kanidm

kanidm: remove declarative user provisioning

2026-02-08 15:14:03 +01:00

monitoring

pgdb1: decommission postgresql host

2026-02-07 22:54:50 +01:00

nats

homelab-deploy: add NATS-based deployment system

2026-02-07 05:22:06 +01:00

nix-cache

acme: migrate from step-ca to OpenBao PKI

2026-02-07 18:20:10 +01:00

ns

ns/resolver: add redundant stub-zone addresses

2026-02-07 20:10:17 +01:00

vault

monitoring: implement monitoring gaps coverage

2026-02-05 21:44:13 +01:00