7 commits

Author	SHA1	Message	Date
Luke Granger-Brown	42c3248644	secretsmgr: timer should want network-online.target	2024-01-27 21:42:57 +00:00
Luke Granger-Brown	86f193d44a	secretsmgr: add bare hostnames everywhere	2023-05-26 17:39:01 +01:00
Luke Granger-Brown	9aa6298df4	ssh-ca: also sign for otter-acoustic.ts.net	2023-03-12 03:53:42 +00:00
Luke Granger-Brown	7592e76a31	tokend: init ... tokend is responsible for issuing service-scoped tokens based on the token held and generated by the Vault Agent. It can also generate "server-user" scoped tokens, which exist for convenience's sake: they are not a strong attestation of the user on the machine, and have limited privileges compared to a Vault token issued using e.g. `vault login -method=oidc`.	2022-03-20 17:47:52 +00:00
Luke Granger-Brown	c9ffb4ed3e	secretsmgr: actually _enable_ the timer unit	2022-03-18 01:08:35 +00:00
Luke Granger-Brown	ce698ab382	nixos/secretsmgr: add the timer unit	2022-03-18 01:03:55 +00:00
Luke Granger-Brown	b719181dfe	nixos: migrate to secretsmgr for sshd and ACME	2022-03-17 23:31:55 +00:00