mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2025-01-18 08:06:16 +01:00
27553ab31a
With the support for network.wireguard.* credentials[1] in systemd v256[2], we can now easily avoid storing the credentials centrally in our ansible vault, which is preferable as it makes the private keys less exposed. It may also make fine-grained access easier in the future[3] as there is no longer a vault file for each server. All the keys have been rotated and the new private keys are only stored on the servers. [1] https://github.com/systemd/systemd/pull/30826 [2] https://github.com/systemd/systemd/releases/tag/v256 [3] https://gitlab.archlinux.org/archlinux/infrastructure/-/issues/64 |
||
|---|---|---|
| .. | ||
| backups.md | ||
| banning.md | ||
| becoming-devops.md | ||
| email.md | ||
| fail2ban.md | ||
| geomirrors.md | ||
| grafana.md | ||
| grow-disks.md | ||
| ipmi.md | ||
| kape.md | ||
| maintenance.md | ||
| matrix.md | ||
| monitoring.md | ||
| otp.md | ||
| quassel.md | ||
| rebuilderd.md | ||
| servers.md | ||
| ssh-hostkeys.txt | ||
| ssh-known_hosts.txt | ||
| testing.md | ||
| vault-rekeying.md | ||
| wireguard.md | ||