modules · sov · Tangled

Sovereign infrastructure from one typed specification: a server, its websites, DNS, git, backups and recovery

sov modules

17 files

nalenz.org · sov secrets check and sov keys [sync]: proving instead of looking · 13h ago

sov secrets check and sov keys [sync]: proving instead of looking

sov: the generic engine, extracted from the nalenz repository

sov-new-names runs in the background: it must never hold up a deploy

sov secrets check and sov keys [sync]: proving instead of looking

The sov command: secrets catalogue, rotation, owner key, paper recovery key, status, drill

One mirror key per repo (GitHub accepts a deploy key on one repository only)

The sov command: secrets catalogue, rotation, owner key, paper recovery key, status, drill

sov secrets check and sov keys [sync]: proving instead of looking

drill-target.nix

Every server secret rotatable or explained; GitHub keys handled; certificates for new names

sov secrets check and sov keys [sync]: proving instead of looking

sov secrets check and sov keys [sync]: proving instead of looking

sov: the generic engine, extracted from the nalenz repository

One mirror key per repo (GitHub accepts a deploy key on one repository only)

The sov command: secrets catalogue, rotation, owner key, paper recovery key, status, drill

sov secrets check and sov keys [sync]: proving instead of looking

sov: the generic engine, extracted from the nalenz repository

Every server secret rotatable or explained; GitHub keys handled; certificates for new names