Restructure around a single entry point (automations.sh) with a Gum wizard and a self-extracting bundle for repo-less installs. Add scripts/oslib.sh so the provisioning scripts (setup-host, harden-ssh, harden-jumphost, sshuser) run on Alpine/Debian/Alma; seed root keys from globals/. - ntfy SSH-login alerts (user, source IP, key, region, jump target) via pam_exec - daily auto-updates with AUTO_REBOOT=idle (reboots only when no SSH active) and opt-in Alpine stable-branch upgrades - generic + per-deployment cloud-init; Gitea release workflow on tag - README/LICENSE/.gitignore/.gitattributes (force LF); repo URLs -> Gitea
12 lines
437 B
Plaintext
12 lines
437 B
Plaintext
# Shared admin SSH public keys.
|
|
#
|
|
# These are the public keys granted administrative SSH access across hosts.
|
|
# Used as the fallback source when SSH_KEYS_URL is not set in globals.env
|
|
# (see resolve_ssh_keys in ../scripts/lib.sh).
|
|
#
|
|
# One key per line. Lines starting with '#' and blank lines are ignored.
|
|
# Only public keys belong here. NEVER commit private keys.
|
|
#
|
|
# Example:
|
|
# ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAA... william@laptop
|