57_Wolve
7faa9098de
Restructure around a single entry point (automations.sh) with a Gum wizard and a self-extracting bundle for repo-less installs. Add scripts/oslib.sh so the provisioning scripts (setup-host, harden-ssh, harden-jumphost, sshuser) run on Alpine/Debian/Alma; seed root keys from globals/. - ntfy SSH-login alerts (user, source IP, key, region, jump target) via pam_exec - daily auto-updates with AUTO_REBOOT=idle (reboots only when no SSH active) and opt-in Alpine stable-branch upgrades - generic + per-deployment cloud-init; Gitea release workflow on tag - README/LICENSE/.gitignore/.gitattributes (force LF); repo URLs -> Gitea
11 lines
428 B
Plaintext
11 lines
428 B
Plaintext
# Age public keys for encrypted backups (shared across all deployments)
|
|
#
|
|
# Generate a keypair with: age-keygen -o backup-private-key.txt
|
|
# Then copy the "Public key: age1..." line here.
|
|
#
|
|
# You can list multiple recipients - backups are encrypted to all of them.
|
|
# Store the corresponding PRIVATE keys securely, NEVER in this git repository.
|
|
|
|
# Primary backup key
|
|
age1tudl7dksctvpkfnu46tq8tmkt36k6xg0rmudzaayqakrtper2fpsk0dnhp
|