Fabio Scotto di Santolo
4bd6aafb53
Feature/atlas icloudpd migration ( #14 )
...
* Design gated Atlas iCloudPD migration target
* Target Atlas iCloudPD photos to Photobook
* Record isolated iCloudPD Photobook ACL validation
* Record Aegis iCloudPD source audit gap
* Verify iCloudPD backup source scope and Borg access
* Record Atlas iCloudPD deployment gate checks
* Pin iCloudPD photo file and directory modes
* Validate inactive iCloudPD Quadlet on Atlas generator
* Keep iCloudPD in Archive and reserve Photobook for Immich
* Prepare guarded Aegis iCloudPD retirement
* Declare inactive Atlas iCloudPD storage and Quadlet
* Retire Aegis iCloudPD from desired state
* Clear retired Aegis iCloudPD failed-unit state
* Remove completed iCloudPD retirement tasks from Aegis
* Record initial Atlas iCloudPD service start
* Manage Atlas iCloudPD config from Vault
* Fix Atlas iCloudPD traceroute startup and config drift
* Use Atlas Vault key for iCloudPD Apple ID
* Add HEIC decoding to Fedora desktops
* Record completed iCloudPD ingestion and remaining recovery checks
2026-10-03 09:59:59 +02:00
Fabio Scotto di Santolo
7e498514dd
Add encrypted Borg backups for Atlas
2026-09-18 10:00:45 +02:00
Fabio Scotto di Santolo
160d63c02d
Add Atlas media and storage services [Phase 1] ( #9 )
...
* Add Atlas media and storage services
* Document Atlas backend phase one and WireGuard deployment
* Enable Atlas NAS management and document bootstrap workflow
* Harden Atlas network, SSH, firewall, and sharing
* Rotate Ansible Vault secrets
* Allow configurable Aegis SSH users and authorized keys
* Manage Aegis SSH authorized key fragments
* Manage SSH authorized key fragments for infrastructure hosts
* Harden Rocky storage and sharing configuration
* Verify WireGuard handshakes and restore Podman networking
2026-09-15 22:39:28 +02:00
Fabio Scotto di Santolo
24268938bd
Hotfix/duckdns token ( #8 )
...
* fix: source DuckDNS token from Vault
* chore: rotate DuckDNS Vault token
2026-09-08 18:48:13 +02:00
Fabio Scotto di Santolo
ae1ca44aa7
Feature/aegis coreos ( #7 )
...
* feat(aegis): add ARM image bootstrap workflow
* feat(aegis): manage firewall and SSH hardening
* feat(aegis): harden Fedora IoT services
* chore(aegis): remove local TLS configuration
* fix(aegis): restore supported Fedora IoT bootstrap
2026-09-05 16:58:53 +02:00
Fabio Scotto di Santolo
1c23326fd5
Add gptel to Emacs desktop profile
2026-04-09 22:28:56 +02:00
Fabio Scotto di Santolo
0081f956df
Enable GPG sign on desktop .gitconfig
2026-04-03 18:14:24 +02:00
Fabio Scotto di Santolo
e5d11bd9c3
Fix vault
2026-04-02 11:16:49 +02:00
Fabio Scotto di Santolo
c2135b66cc
Parameterize Windows PSRP inventory settings
2026-04-01 17:47:42 +02:00
Fabio Scotto di Santolo
9c7bb4653d
Update vault with server secrets
2026-03-30 21:47:05 +02:00
Fabio Scotto di Santolo
965de96094
Add workstation-specific dotfiles support
2026-03-24 14:10:47 +01:00
Fabio Scotto di Santolo
c9ad30c113
Template private desktop mail configs
...
Render personal desktop configs from Ansible templates so public dotfiles no longer expose real identities or mail addresses. Update the bootstrap workflow to consume the rendered mail config and extend the encrypted vault schema for the new private values.
2026-03-18 15:00:56 +01:00
Fabio Scotto di Santolo
576999d864
Add mu4e mail provisioning with vault-backed iCloud secret
2026-03-17 22:12:05 +01:00
