nix/machines
1
0
Fork 0
Code Issues Releases Packages Activity Actions

More fixes
Some checks failed
/ check (push) Failing after 1m29s
Details
/ systems (push) Failing after 22s
Details
/ terraform-providers (push) Successful in 4m6s
Details
/ rust-packages (push) Successful in 1m55s
Details
/ dev-shell (push) Successful in 1m39s
Details

Browse source
This commit is contained in:
Kaare Hoff Skovgaard 2025-07-15 08:13:26 +02:00
parent f8a0434e2b
commit 5826c78a68
Signed by: khs
GPG key ID: C7D890804F01E9F0
2 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nix/systems/aarch64-linux/security.kaareskovgaard.net/README.md
View file

@ -2,4 +2,6 @@
Open https://vault.kaareskovgaard.net and initialize OpenBAO. Remember to get some sort of auto unsealing set up afterwards, currently this is implemented with a cronjob on TrueNAS. Doing it this way allows various certificates to continue getting issued, even as OpenBAO gets sealed (due to auto updates).
After this, run the post provisioning script to initialize the various OpenBAO parts needed. Then `nix run '.#bitwarden-to-vault` can transfer the needed Bitwarden secrets to vault.
After this, run the post provisioning script to initialize the various OpenBAO parts needed.
In order for `security.kaareskovgaard.net` to authenticate itself with OpenBAO
Then `nix run '.#bitwarden-to-vault` can transfer the needed Bitwarden secrets to vault.

1
result
View file

@ -1 +0,0 @@
/nix/store/v800qb1c26k2hplgc35af8xnffkax9y5-env-20250714222538