Torjus Håkestad 0700033c0a secrets: migrate all hosts from sops to OpenBao vault ...

Replace sops-nix secrets with OpenBao vault secrets across all hosts.
Hardcode root password hash, add extractKey option to vault-secrets
module, update Terraform with secrets/policies for all hosts, and
create AppRole provisioning playbook.

Hosts migrated: ha1, monitoring01, ns1, ns2, http-proxy, nix-cache01
Wave 1 hosts (nats1, jelly01, pgdb1) get AppRole policies only.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-05 18:43:09 +01:00

..

monitoring

Fix error in journald config

2025-02-07 13:22:50 +01:00

pki

pki: add new vault root ca to pki

2026-02-03 06:53:59 +01:00

acme.nix

Add lldap to auth01 host

2025-04-01 22:23:59 +02:00

autoupgrade.nix

Add autoupgrade

2025-02-06 19:58:01 +01:00

default.nix

dns: auto-generate zone entries from host configurations

2026-02-04 21:43:44 +01:00

nix.nix

nix: configure gc to delete generations older than 14d

2026-02-05 02:21:19 +01:00

packages.nix

Add some default packages

2025-02-24 18:54:59 +01:00

root-user.nix

secrets: migrate all hosts from sops to OpenBao vault

2026-02-05 18:43:09 +01:00

sops.nix

Add template host

2024-03-08 20:10:50 +01:00

sshd.nix

Add template host

2024-03-08 20:10:50 +01:00

vault-secrets.nix

secrets: migrate all hosts from sops to OpenBao vault

2026-02-05 18:43:09 +01:00