nix/machines
1
0
Fork 0
Code Issues Releases Packages Activity Actions

More fixes

Browse source 
Former-commit-id: 5826c78a68
This commit is contained in:
Kaare Hoff Skovgaard 2025-07-15 08:13:26 +02:00
parent fee2017fd4
commit 0b124838b2
2 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nix/systems/aarch64-linux/security.kaareskovgaard.net/README.md
View file

@ -2,4 +2,6 @@
Open https://vault.kaareskovgaard.net and initialize OpenBAO. Remember to get some sort of auto unsealing set up afterwards, currently this is implemented with a cronjob on TrueNAS. Doing it this way allows various certificates to continue getting issued, even as OpenBAO gets sealed (due to auto updates). Open https://vault.kaareskovgaard.net and initialize OpenBAO. Remember to get some sort of auto unsealing set up afterwards, currently this is implemented with a cronjob on TrueNAS. Doing it this way allows various certificates to continue getting issued, even as OpenBAO gets sealed (due to auto updates).
After this, run the post provisioning script to initialize the various OpenBAO parts needed. Then `nix run '.#bitwarden-to-vault` can transfer the needed Bitwarden secrets to vault. After this, run the post provisioning script to initialize the various OpenBAO parts needed.
In order for `security.kaareskovgaard.net` to authenticate itself with OpenBAO
Then `nix run '.#bitwarden-to-vault` can transfer the needed Bitwarden secrets to vault.

1
result
View file

@ -1 +0,0 @@
/nix/store/v800qb1c26k2hplgc35af8xnffkax9y5-env-20250714222538