sov
Sovereign infrastructure from one typed specification: a server, its websites, DNS, git, backups and recovery
Star 1
Fork 0
Watch

Commits on main

nalenz.org
sov secrets check and sov keys [sync]: proving instead of looking
committed
nalenz.org
sov paper print: the sheet goes to the Downloads folder (Windows' under WSL) and opens in the browser
committed
nalenz.org
sov-new-names runs in the background: it must never hold up a deploy
committed
nalenz.org
sov: a mirror keeps exactly one deploy key; show gh errors
committed
nalenz.org
Every server secret rotatable or explained; GitHub keys handled; certificates for new names
committed
nalenz.org
Rename dns_transfer_secret to dns_secondaries_secret (not about domain transfers)
committed
nalenz.org
recovery-drill: a deploy no longer interrupts a running drill
committed
nalenz.org
docs/operations.md: every operation as a sov command; sov in the dev shell
committed
nalenz.org
The sov command: secrets catalogue, rotation, owner key, paper recovery key, status, drill
committed
nalenz.org
One mirror key per repo (GitHub accepts a deploy key on one repository only)
committed
nalenz.org
sov: the generic engine, extracted from the nalenz repository
committed