505 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Jörg Thalheim	d74c316321	Merge pull request #31 from Mic92/flakes	2020-08-07 11:49:32 +01:00
Jörg Thalheim	d984024f45	try to fix certificates	2020-08-07 11:38:52 +01:00
Jörg Thalheim	0b53376ef6	add flake.lock ... packages needs this	2020-08-07 11:38:02 +01:00
Jörg Thalheim	9cbdd53970	drone-ci: access host-nix daemon	2020-08-02 00:09:23 +01:00
Jörg Thalheim	0cec798bc3	switch to drone-io	2020-08-02 00:06:02 +01:00
Jörg Thalheim	32c42617e4	sshkeys: use %w in fmt.Errorf calls	2020-07-30 16:22:43 +01:00
Jörg Thalheim	df86cc4e71	ssh-to-pgp: use %w for fmt.Errorf calls	2020-07-30 16:21:47 +01:00
Jörg Thalheim	01e4038c9a	don't print full executable path logging key import	2020-07-30 16:19:51 +01:00
Jörg Thalheim	9cd8bb080f	sops-install-secrets: use %w for fmt.Errorf calls	2020-07-30 16:19:14 +01:00
Jörg Thalheim	7eb1ca2322	add .drone.yml	2020-07-29 09:51:27 +01:00
Jörg Thalheim	bef5a49352	document how to expose same secret to different users	2020-07-29 08:11:44 +01:00
Jörg Thalheim	4728721e32	Merge pull request #25 from Mic92/test-foo	2020-07-25 18:29:44 +01:00
Jörg Thalheim	a693847646	buildkite: remove pipeline ... This would allow to extract secrets	2020-07-25 18:26:45 +01:00
Jörg Thalheim	42463f12e0	Readme.md: add TODO for systemd services	2020-07-25 18:06:03 +01:00
Jörg Thalheim	7cca040407	README.md: fix typo	2020-07-23 16:40:45 +01:00
Jörg Thalheim	ce579c3b17	Merge pull request #22 from mweinelt/readme ... README: correct mistake in GPG key decryption explanation	2020-07-23 15:52:16 +01:00
Martin Weinelt	6391feffe4	README: correct mistake in GPG key decryption explanation	2020-07-23 16:44:43 +02:00
Jörg Thalheim	aea30fe0e2	add flake installation	2020-07-23 09:08:42 +01:00
Jörg Thalheim	04584b67b0	README: fix codeblock language	2020-07-23 08:53:05 +01:00
Jörg Thalheim	70cd2a9dfe	README: fixup configuration markup	2020-07-23 08:51:53 +01:00
Jörg Thalheim	0acfed8167	Merge pull request #21 from Mic92/docs-improvements	2020-07-23 08:49:35 +01:00
Jörg Thalheim	59e6df1acf	sops-init-gpg-key: include hostname on darwin	2020-07-23 08:45:32 +01:00
Jörg Thalheim	ffc9c2c78c	module: add defaultSopsFormat option	2020-07-23 08:36:38 +01:00
Jörg Thalheim	2fa9c1a948	README: document different file formats & symlinks	2020-07-23 08:34:18 +01:00
Jörg Thalheim	98afd85ef8	sops-ini-gpg-key: add install check	2020-07-23 08:20:08 +01:00
Jörg Thalheim	c8eaa32f00	README.md: make niv path less weird	2020-07-23 07:11:43 +01:00
Jörg Thalheim	04a2eaf220	README: describe installation methods ... fixes #20	2020-07-23 07:10:24 +01:00
Jörg Thalheim	298b235f66	Merge pull request #19 from Mic92/macos-ci	2020-07-22 23:52:36 +01:00
Jörg Thalheim	b8d91d61ac	restrict sops-install-secrets to linux ... ramfs is not available elswhere.	2020-07-22 23:46:05 +01:00
Jörg Thalheim	71db50d5eb	add a release.nix	2020-07-22 23:34:56 +01:00
Jörg Thalheim	4a41039ab3	mark sops-install-secrets as Linux only	2020-07-22 23:12:13 +01:00
Jörg Thalheim	5e95616f0f	use a shorter tempdir on macOS ... By default macOS does something like this: /var/folders/08/j4g_jn953lngpvgmyg8dygk00000gn/T/ breaking unix socket paths of gnupg.	2020-07-22 23:10:22 +01:00
Andreas Fuchs	1279274ddc	Use /tmp as the temporary dir for ssh-to-gpg ... This isn't great: but it might prevent the agent from complaining.	2020-07-22 23:10:22 +01:00
Andreas Fuchs	0d885b439f	Create a temporary GNUPGHOME dir ... This should prevent the paths from getting unwieldy, we'll see.	2020-07-22 23:10:22 +01:00
Jörg Thalheim	8c33651e0c	ci: add macOS support	2020-07-22 23:10:22 +01:00
Jörg Thalheim	3095053dd4	darwin fixes	2020-07-22 22:29:01 +01:00
Jörg Thalheim	ca550a4c65	Merge pull request #18 from Mic92/fix-subkeys	2020-07-22 22:12:25 +01:00
Jörg Thalheim	66393a1c82	sops-pgp-hook: ignore subkeys ... fixes #17	2020-07-22 15:07:51 +01:00
Jörg Thalheim	e39f83d86e	Merge pull request #16 from Mic92/fix-test ... sops-pgp-hook: make test robust against file order	2020-07-22 14:36:48 +01:00
Jörg Thalheim	0729c15de3	sops-pgp-hook: make test robust against file order ... There is no guarantee that keys will be returned in a certain order	2020-07-22 14:32:08 +01:00
Jörg Thalheim	b7ce70d49e	README: make adding users to keys group consistent	2020-07-21 14:55:18 +01:00
Jörg Thalheim	99ed276eb4	README: document access control	2020-07-21 12:30:53 +01:00
Jörg Thalheim	2fb90c84a6	Merge pull request #13 from Mic92/fix-existing-files	2020-07-20 00:16:31 +01:00
Jörg Thalheim	0f17dbc4bb	tests: add golangci-lint	2020-07-20 00:13:26 +01:00
Jörg Thalheim	f0b4003560	Merge pull request #12 from Mic92/fix-existing-files	2020-07-19 23:31:00 +01:00
Jörg Thalheim	fd28d45f10	make golangci-lint happy	2020-07-19 23:30:28 +01:00
Jörg Thalheim	16c3c3e39c	README.md: add more placeholder	2020-07-19 23:24:44 +01:00
Jörg Thalheim	bffb0afb48	fix replace existing files	2020-07-19 23:23:38 +01:00
Jörg Thalheim	04b33fdb9e	Merge pull request #11 from Mic92/validate	2020-07-19 21:20:52 +01:00
Jörg Thalheim	59803f7530	fix user manifest validation in sandbox ... we should not lookup users there	2020-07-19 21:04:58 +01:00