8 Commits

Author	SHA1	Message	Date
root	5887129202	client-add: rclone (finalize age_pubkey + grant shared secrets)	2026-07-01 23:50:37 +02:00
dtoro	dee08b97a4	secrets: grant strong access to hello.yaml and gitea-pat.yaml ... Standard baseline for an enrolled workstation-class client, matching mac-mini/republic-laptop/etc: the bootstrap decrypt-test secret plus the write-scoped Gitea PAT so strong can push to the wiki repo on its own (homelab client add/remove, wiki edits from that host). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-01 14:01:00 +02:00
root	335498d069	client-add: house (finalize age_pubkey + grant shared + hermes secrets)	2026-06-28 15:59:47 +02:00
root	76bbe99798	client-add: mac-mini (finalize age_pubkey + grant shared + hermes secrets)	2026-06-01 22:50:36 +02:00
root	aed977aa56	client-remove: test-victim	2026-05-20 19:29:47 +02:00
root	ea3100f091	client-add: test-victim (finalize age_pubkey + grant shared secrets)	2026-05-20 19:29:36 +02:00
root	58bd4df3b1	client-enrol: republic-laptop pubkey + hello.yaml recipient ... Phase 2 first workstation enrolled. age1vf8... is republic-laptop's issued pubkey; added as a recipient on hello.yaml so the post-bootstrap decrypt test works there. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-20 17:34:30 +02:00
root	bc578df39b	secrets: add encrypted hello.yaml (bootstrap verification) ... Encrypted to hubris + apps; expand recipients as new clients enrol via 'sops updatekeys -y secrets/hello.yaml'. Tests the full sops + age path. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-20 16:39:33 +02:00