7d3fd2d8cf
Declare a clan.core.vars.generators.cloudflare-tunnel generator that
prompts for the tunnel token on first run and stores it SOPS-encrypted
under vars/per-machine/sunken-ship/cloudflare-tunnel/tunnel-token.
systemd.services.cloudflare-tunnel ExecStart now reads the decrypted
secret at runtime from \${config.clan.core.vars...path} (lives at
/run/secrets/vars/...) instead of the unmanaged
/home/danny/.secrets/cloudflare-tunnel-token file.
Stage 4c of the clan migration. The tunnel itself is slated for
retirement in 4d — ZeroTier-only access after that. Cloudflare token
was rotated during this migration; old value no longer valid.
|
||
|---|---|---|
| .. | ||
| daniel-macbook-air.nix | ||
| phantom-ship-hardware.nix | ||
| phantom-ship.nix | ||
| server-install.nix | ||
| sunken-ship-hardware.nix | ||
| sunken-ship.nix | ||
| wsl.nix | ||