57_Wolve
7faa9098de
Restructure around a single entry point (automations.sh) with a Gum wizard and a self-extracting bundle for repo-less installs. Add scripts/oslib.sh so the provisioning scripts (setup-host, harden-ssh, harden-jumphost, sshuser) run on Alpine/Debian/Alma; seed root keys from globals/. - ntfy SSH-login alerts (user, source IP, key, region, jump target) via pam_exec - daily auto-updates with AUTO_REBOOT=idle (reboots only when no SSH active) and opt-in Alpine stable-branch upgrades - generic + per-deployment cloud-init; Gitea release workflow on tag - README/LICENSE/.gitignore/.gitattributes (force LF); repo URLs -> Gitea
34 lines
1.4 KiB
Plaintext
34 lines
1.4 KiB
Plaintext
# ── Secrets / runtime config ────────────────────────────────────────────────
|
|
# Populated env / config files (keep the *.example templates).
|
|
.env
|
|
**/.env
|
|
globals/globals.env
|
|
ssh-notify.conf
|
|
auto-update.conf
|
|
!*.env.example
|
|
!**/.env.example
|
|
!*.conf.example
|
|
|
|
# ── Private keys (NEVER commit) ─────────────────────────────────────────────
|
|
# age identities and SSH private keys. globals/age-pubkey.txt and
|
|
# globals/authorized_keys are PUBLIC and intentionally tracked.
|
|
*-private-key.txt
|
|
*age-key*
|
|
*.age.key
|
|
id_ed25519
|
|
id_ed25519_*
|
|
*.pem
|
|
|
|
# ── Backups ─────────────────────────────────────────────────────────────────
|
|
*.tar.gz.age
|
|
*-backup-*.tar.gz*
|
|
|
|
# ── Build output ────────────────────────────────────────────────────────────
|
|
dist/
|
|
|
|
# ── Editor / OS noise ───────────────────────────────────────────────────────
|
|
*.tmp
|
|
*.swp
|
|
.DS_Store
|
|
Thumbs.db
|