infra
/
ignition
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
25 Commits
1 Branch
0 Tags
103 KiB
Shell 93.3%
Makefile 6.7%
 
 
Go to file
Dustin 859deb0664 sshkeys: Trust certificates issued by the CA 
Now that we have an internal SSH certificate authority, instead of
explicitly listing all M×N keys for each user and client machine, we can
list only the CA certificate in the SSH authorized keys file for the
*core* user.  This will allow any user who presents a valid, signed SSH
certificate for the *core* principal to log in.
 		2023-10-03 20:06:37 -05:00
.gitattributes frigate: Enable Frigate+ integration 2023-09-21 22:29:51 -05:00
.gitignore fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
65-apex.rules gasket-driver: Install Coral EdgeTPU driver 2023-09-16 07:58:48 -05:00
Makefile fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
butane-watch.sh meta: Add Makefile 2023-09-16 08:15:08 -05:00
collectd.container collectd: Run collectd in privileged container 2023-10-03 20:03:21 -05:00
collectd.yaml collectd: Run collectd in privileged container 2023-10-03 20:03:21 -05:00
fetchcert.service fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
fetchcert.sh fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
fetchcert.timer fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
fetchcert.yaml fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
flash.sh Add flash.sh 2023-08-04 15:01:18 -05:00
frigate.container frigate: Disable systemd filesystem isolation 2023-09-21 22:29:51 -05:00
frigate.env.gpg frigate: Enable Frigate+ integration 2023-09-21 22:29:51 -05:00
frigate.nginx frigate: Configure nginx reverse proxy 2023-09-21 22:32:59 -05:00
frigate.sysusers frigate: Manage state dir with tmpfiles.d 2023-09-19 10:44:34 -05:00
frigate.tmpfiles frigate: Manage state dir with tmpfiles.d 2023-09-19 10:44:34 -05:00
frigate.token.gpg nvr1: Deploy nginx 2023-09-21 22:34:14 -05:00
frigate.yaml frigate: Configure nginx reverse proxy 2023-09-21 22:32:59 -05:00
gasket-driver.container gasket-driver: Install Coral EdgeTPU driver 2023-09-16 07:58:48 -05:00
gasket-driver.yaml gasket-driver: Install Coral EdgeTPU driver 2023-09-16 07:58:48 -05:00
install-kubelet.service Initial commit 2023-07-17 15:16:01 -05:00
install-packages.service packages: Add framework for installing packages 2023-09-21 22:29:51 -05:00
install-packages.sh packages: Add framework for installing packages 2023-09-21 22:29:51 -05:00
k8s-aarch64-n0.yaml Initial commit 2023-07-17 15:16:01 -05:00
kubelet.yaml Initial commit 2023-07-17 15:16:01 -05:00
local_exporter.config local_exporter: Exporter for Zincati metrics 2023-10-03 15:29:58 -05:00
local_exporter.container local_exporter: Exporter for Zincati metrics 2023-10-03 15:29:58 -05:00
local_exporter.yaml local_exporter: Exporter for Zincati metrics 2023-10-03 15:29:58 -05:00
nginx.conf nginx: Deploy nginx in a container 2023-09-21 22:29:51 -05:00
nginx.container frigate: Configure nginx reverse proxy 2023-09-21 22:32:59 -05:00
nginx.yaml fetchcert: Add script to fetch certs from K8s 2023-09-21 22:30:23 -05:00
notify-shutdown.service notify-shutdown: Send a message on shutdown 2023-09-21 22:34:14 -05:00
notify-shutdown.yaml notify-shutdown: Send a message on shutdown 2023-09-21 22:34:14 -05:00
nvr1.yaml nvr1: Deploy notify-shutdown service 2023-09-21 22:34:14 -05:00
packages.yaml packages: Add framework for installing packages 2023-09-21 22:29:51 -05:00
ssh-bootstrap.service step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
ssh-bootstrap.sh step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
sshkeys.yaml sshkeys: Trust certificates issued by the CA 2023-10-03 20:06:37 -05:00
step-ssh-renew.env step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
step-ssh-renew.target step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
step-ssh-renew.timer step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
step-ssh-renew@.container step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
step-ssh.yaml step-ssh: Automatically issue/renew SSH host certs 2023-10-03 20:06:37 -05:00
zram.yaml zram: Configure swap-on-zram 2023-09-16 08:15:08 -05:00