13 commits

Author	SHA1	Message	Date
Luke Granger-Brown	97d71c78a1	ops/vault: add authentik-backed auth	2022-05-21 15:42:55 +01:00
Luke Granger-Brown	13d51a7978	ops/nixos: move gitlab-runner registration token to vault	2022-05-13 21:45:36 +00:00
Luke Granger-Brown	bf601faa89	nix/pkgs/authentik: init	2022-05-12 22:55:10 +00:00
Luke Granger-Brown	dca96efffe	fup: move config to secret	2022-04-10 01:37:37 +01:00
Luke Granger-Brown	8647af22d7	ops/nixos: put more things in Vault	2022-04-09 21:51:24 +01:00
Luke Granger-Brown	2536214734	deluge: migrate auth file to vault	2022-04-09 20:59:11 +01:00
Luke Granger-Brown	97a2e46eeb	lukegbcom: autodeploy using Vault	2022-04-05 22:04:32 +01:00
Luke Granger-Brown	dbaabf1295	vault: deployer should be allowed to read nix-daemon secrets	2022-03-24 22:20:44 +00:00
Luke Granger-Brown	7592e76a31	tokend: init ... tokend is responsible for issuing service-scoped tokens based on the token held and generated by the Vault Agent. It can also generate "server-user" scoped tokens, which exist for convenience's sake: they are not a strong attestation of the user on the machine, and have limited privileges compared to a Vault token issued using e.g. `vault login -method=oidc`.	2022-03-20 17:47:52 +00:00
Luke Granger-Brown	148e071c21	ops/vault/cfg: add acme-ca	2022-03-16 00:18:47 +00:00
Luke Granger-Brown	fb7e18260a	ops/vault/cfg: where we're going, we don't need secrets.nix	2022-03-16 00:06:46 +00:00
Luke Granger-Brown	23df8e3b18	ops/vault/cfg: initial configuration	2022-03-14 23:34:33 +00:00
Luke Granger-Brown	92998b5d36	ops/vault/cfg: init terranix stuff	2022-03-14 21:29:15 +00:00