nixos-servers/secrets
2023-11-05 18:43:32 +01:00
..
files init 2023-11-05 18:43:32 +01:00
inventory init 2023-11-05 18:43:32 +01:00
.envrc init 2023-11-05 18:43:32 +01:00
.gitignore init 2023-11-05 18:43:32 +01:00
ansible.cfg init 2023-11-05 18:43:32 +01:00
deploy.yml init 2023-11-05 18:43:32 +01:00
flake.lock init 2023-11-05 18:43:32 +01:00
flake.nix init 2023-11-05 18:43:32 +01:00
README.md init 2023-11-05 18:43:32 +01:00

We can for now keep using Ansible vault to deploy secrets. The steps for setting up a hypervisor will thus become:

  1. Manually install NixOS
  2. Configure SSH and install authorized keys
  3. Ensure python3 is present on the system
  4. Run Ansible script to copy secrets
  5. Run Nix to configure everything else