Fabio Scotto di Santolo
4bd6aafb53
Feature/atlas icloudpd migration ( #14 )
...
* Design gated Atlas iCloudPD migration target
* Target Atlas iCloudPD photos to Photobook
* Record isolated iCloudPD Photobook ACL validation
* Record Aegis iCloudPD source audit gap
* Verify iCloudPD backup source scope and Borg access
* Record Atlas iCloudPD deployment gate checks
* Pin iCloudPD photo file and directory modes
* Validate inactive iCloudPD Quadlet on Atlas generator
* Keep iCloudPD in Archive and reserve Photobook for Immich
* Prepare guarded Aegis iCloudPD retirement
* Declare inactive Atlas iCloudPD storage and Quadlet
* Retire Aegis iCloudPD from desired state
* Clear retired Aegis iCloudPD failed-unit state
* Remove completed iCloudPD retirement tasks from Aegis
* Record initial Atlas iCloudPD service start
* Manage Atlas iCloudPD config from Vault
* Fix Atlas iCloudPD traceroute startup and config drift
* Use Atlas Vault key for iCloudPD Apple ID
* Add HEIC decoding to Fedora desktops
* Record completed iCloudPD ingestion and remaining recovery checks
2026-10-03 09:59:59 +02:00
Fabio Scotto di Santolo
21e41f4fc1
Prepare Atlas encryption dependencies and update Vault placeholders
2026-09-22 14:37:25 +02:00
Fabio Scotto di Santolo
7e498514dd
Add encrypted Borg backups for Atlas
2026-09-18 10:00:45 +02:00
Fabio Scotto di Santolo
160d63c02d
Add Atlas media and storage services [Phase 1] ( #9 )
...
* Add Atlas media and storage services
* Document Atlas backend phase one and WireGuard deployment
* Enable Atlas NAS management and document bootstrap workflow
* Harden Atlas network, SSH, firewall, and sharing
* Rotate Ansible Vault secrets
* Allow configurable Aegis SSH users and authorized keys
* Manage Aegis SSH authorized key fragments
* Manage SSH authorized key fragments for infrastructure hosts
* Harden Rocky storage and sharing configuration
* Verify WireGuard handshakes and restore Podman networking
2026-09-15 22:39:28 +02:00
Fabio Scotto di Santolo
24268938bd
Hotfix/duckdns token ( #8 )
...
* fix: source DuckDNS token from Vault
* chore: rotate DuckDNS Vault token
2026-09-08 18:48:13 +02:00
Fabio Scotto di Santolo
a135edaa3f
Remove deadalus-win and deadalus-ubuntu profiles
...
Rimuove completamente i due host non più in uso dal playbook:
- inventory: gruppi ubuntu_workstation, workstation_dev_ubuntu,
workstation_host_windows e relative entry host
- host_vars deadalus-ubuntu/deadalus-win e group_vars windows
- play workstation_dev_ubuntu e workstation_host_windows in site.yml
- ruolo profile_workstation_host_windows e bootstrap PowerShell
- var PSRP nel vault.yml.example, pacchetti python pypsrp/pyspnego WSL
- collection ansible.windows/community.windows
- riferimenti nella documentazione (README/AGENTS/CLAUDE)
Workstation Linux nativa: resta solo deadalus-fedora.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-21 16:30:30 +02:00
Fabio Scotto di Santolo
c65aab1529
Add GPG sign workstation WSL host
2026-05-22 22:40:29 +02:00
Fabio Scotto di Santolo
1c23326fd5
Add gptel to Emacs desktop profile
2026-04-09 22:28:56 +02:00
Fabio Scotto di Santolo
9659fcce23
Enable SSH access on ikaros
2026-04-09 16:55:01 +02:00
Fabio Scotto di Santolo
7b48cec181
Add configurable Windows package backends and taskbar policy
2026-04-02 23:55:07 +02:00
Fabio Scotto di Santolo
b01b3a7c1a
Support local vault overrides and optional vault pass file
2026-04-02 10:42:14 +02:00
Fabio Scotto di Santolo
6dbd0d5277
Document Windows PSRP vault settings
2026-04-01 17:49:18 +02:00
Fabio Scotto di Santolo
a90f3a6610
Add server Docker compose stack with Vault-backed secrets
2026-03-30 21:40:12 +02:00
Fabio Scotto di Santolo
c9ad30c113
Template private desktop mail configs
...
Render personal desktop configs from Ansible templates so public dotfiles no longer expose real identities or mail addresses. Update the bootstrap workflow to consume the rendered mail config and extend the encrypted vault schema for the new private values.
2026-03-18 15:00:56 +01:00
Fabio Scotto di Santolo
576999d864
Add mu4e mail provisioning with vault-backed iCloud secret
2026-03-17 22:12:05 +01:00
