Jörg Thalheim
|
d984024f45
|
try to fix certificates
|
2020-08-07 11:38:52 +01:00 |
|
Jörg Thalheim
|
0b53376ef6
|
add flake.lock
packages needs this
|
2020-08-07 11:38:02 +01:00 |
|
Jörg Thalheim
|
9cbdd53970
|
drone-ci: access host-nix daemon
|
2020-08-02 00:09:23 +01:00 |
|
Jörg Thalheim
|
0cec798bc3
|
switch to drone-io
|
2020-08-02 00:06:02 +01:00 |
|
Jörg Thalheim
|
32c42617e4
|
sshkeys: use %w in fmt.Errorf calls
|
2020-07-30 16:22:43 +01:00 |
|
Jörg Thalheim
|
df86cc4e71
|
ssh-to-pgp: use %w for fmt.Errorf calls
|
2020-07-30 16:21:47 +01:00 |
|
Jörg Thalheim
|
01e4038c9a
|
don't print full executable path logging key import
|
2020-07-30 16:19:51 +01:00 |
|
Jörg Thalheim
|
9cd8bb080f
|
sops-install-secrets: use %w for fmt.Errorf calls
|
2020-07-30 16:19:14 +01:00 |
|
Jörg Thalheim
|
7eb1ca2322
|
add .drone.yml
|
2020-07-29 09:51:27 +01:00 |
|
Jörg Thalheim
|
bef5a49352
|
document how to expose same secret to different users
|
2020-07-29 08:11:44 +01:00 |
|
Jörg Thalheim
|
4728721e32
|
Merge pull request #25 from Mic92/test-foo
|
2020-07-25 18:29:44 +01:00 |
|
Jörg Thalheim
|
a693847646
|
buildkite: remove pipeline
This would allow to extract secrets
|
2020-07-25 18:26:45 +01:00 |
|
Jörg Thalheim
|
42463f12e0
|
Readme.md: add TODO for systemd services
|
2020-07-25 18:06:03 +01:00 |
|
Jörg Thalheim
|
7cca040407
|
README.md: fix typo
|
2020-07-23 16:40:45 +01:00 |
|
Jörg Thalheim
|
ce579c3b17
|
Merge pull request #22 from mweinelt/readme
README: correct mistake in GPG key decryption explanation
|
2020-07-23 15:52:16 +01:00 |
|
Martin Weinelt
|
6391feffe4
|
README: correct mistake in GPG key decryption explanation
|
2020-07-23 16:44:43 +02:00 |
|
Jörg Thalheim
|
aea30fe0e2
|
add flake installation
|
2020-07-23 09:08:42 +01:00 |
|
Jörg Thalheim
|
04584b67b0
|
README: fix codeblock language
|
2020-07-23 08:53:05 +01:00 |
|
Jörg Thalheim
|
70cd2a9dfe
|
README: fixup configuration markup
|
2020-07-23 08:51:53 +01:00 |
|
Jörg Thalheim
|
0acfed8167
|
Merge pull request #21 from Mic92/docs-improvements
|
2020-07-23 08:49:35 +01:00 |
|
Jörg Thalheim
|
59e6df1acf
|
sops-init-gpg-key: include hostname on darwin
|
2020-07-23 08:45:32 +01:00 |
|
Jörg Thalheim
|
ffc9c2c78c
|
module: add defaultSopsFormat option
|
2020-07-23 08:36:38 +01:00 |
|
Jörg Thalheim
|
2fa9c1a948
|
README: document different file formats & symlinks
|
2020-07-23 08:34:18 +01:00 |
|
Jörg Thalheim
|
98afd85ef8
|
sops-ini-gpg-key: add install check
|
2020-07-23 08:20:08 +01:00 |
|
Jörg Thalheim
|
c8eaa32f00
|
README.md: make niv path less weird
|
2020-07-23 07:11:43 +01:00 |
|
Jörg Thalheim
|
04a2eaf220
|
README: describe installation methods
fixes #20
|
2020-07-23 07:10:24 +01:00 |
|
Jörg Thalheim
|
298b235f66
|
Merge pull request #19 from Mic92/macos-ci
|
2020-07-22 23:52:36 +01:00 |
|
Jörg Thalheim
|
b8d91d61ac
|
restrict sops-install-secrets to linux
ramfs is not available elswhere.
|
2020-07-22 23:46:05 +01:00 |
|
Jörg Thalheim
|
71db50d5eb
|
add a release.nix
|
2020-07-22 23:34:56 +01:00 |
|
Jörg Thalheim
|
4a41039ab3
|
mark sops-install-secrets as Linux only
|
2020-07-22 23:12:13 +01:00 |
|
Jörg Thalheim
|
5e95616f0f
|
use a shorter tempdir on macOS
By default macOS does something like this:
/var/folders/08/j4g_jn953lngpvgmyg8dygk00000gn/T/
breaking unix socket paths of gnupg.
|
2020-07-22 23:10:22 +01:00 |
|
Andreas Fuchs
|
1279274ddc
|
Use /tmp as the temporary dir for ssh-to-gpg
This isn't great: but it might prevent the agent from complaining.
|
2020-07-22 23:10:22 +01:00 |
|
Andreas Fuchs
|
0d885b439f
|
Create a temporary GNUPGHOME dir
This should prevent the paths from getting unwieldy, we'll see.
|
2020-07-22 23:10:22 +01:00 |
|
Jörg Thalheim
|
8c33651e0c
|
ci: add macOS support
|
2020-07-22 23:10:22 +01:00 |
|
Jörg Thalheim
|
3095053dd4
|
darwin fixes
|
2020-07-22 22:29:01 +01:00 |
|
Jörg Thalheim
|
ca550a4c65
|
Merge pull request #18 from Mic92/fix-subkeys
|
2020-07-22 22:12:25 +01:00 |
|
Jörg Thalheim
|
66393a1c82
|
sops-pgp-hook: ignore subkeys
fixes #17
|
2020-07-22 15:07:51 +01:00 |
|
Jörg Thalheim
|
e39f83d86e
|
Merge pull request #16 from Mic92/fix-test
sops-pgp-hook: make test robust against file order
|
2020-07-22 14:36:48 +01:00 |
|
Jörg Thalheim
|
0729c15de3
|
sops-pgp-hook: make test robust against file order
There is no guarantee that keys will be returned in a certain order
|
2020-07-22 14:32:08 +01:00 |
|
Jörg Thalheim
|
b7ce70d49e
|
README: make adding users to keys group consistent
|
2020-07-21 14:55:18 +01:00 |
|
Jörg Thalheim
|
99ed276eb4
|
README: document access control
|
2020-07-21 12:30:53 +01:00 |
|
Jörg Thalheim
|
2fb90c84a6
|
Merge pull request #13 from Mic92/fix-existing-files
|
2020-07-20 00:16:31 +01:00 |
|
Jörg Thalheim
|
0f17dbc4bb
|
tests: add golangci-lint
|
2020-07-20 00:13:26 +01:00 |
|
Jörg Thalheim
|
f0b4003560
|
Merge pull request #12 from Mic92/fix-existing-files
|
2020-07-19 23:31:00 +01:00 |
|
Jörg Thalheim
|
fd28d45f10
|
make golangci-lint happy
|
2020-07-19 23:30:28 +01:00 |
|
Jörg Thalheim
|
16c3c3e39c
|
README.md: add more placeholder
|
2020-07-19 23:24:44 +01:00 |
|
Jörg Thalheim
|
bffb0afb48
|
fix replace existing files
|
2020-07-19 23:23:38 +01:00 |
|
Jörg Thalheim
|
04b33fdb9e
|
Merge pull request #11 from Mic92/validate
|
2020-07-19 21:20:52 +01:00 |
|
Jörg Thalheim
|
59803f7530
|
fix user manifest validation in sandbox
we should not lookup users there
|
2020-07-19 21:04:58 +01:00 |
|
Jörg Thalheim
|
30ea9d3738
|
README.md: spell fixes
|
2020-07-19 19:31:45 +01:00 |
|