Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 055676c186 RESTORE.md: document the procedure a real restore drill exposed main Lutz Finsterle 2026-08-22 09:59:51 +02:00
• 64b20a54dc Ship an encrypted DR bundle offsite to the NAS daily Lutz Finsterle 2026-08-22 09:50:30 +02:00
• 471692c283 Automate demo-app AppRole SecretID rotation on a weekly timer Lutz Finsterle 2026-08-22 09:33:16 +02:00
• ee0b8c818f Alert by email when an OpenBAO maintenance unit fails Lutz Finsterle 2026-08-22 09:22:05 +02:00
• c5ff1a3fca Upgrade OpenBAO 2.5.5 -> 2.6.2 Lutz Finsterle 2026-08-22 09:12:14 +02:00
• 123e65ee46 Renew root-owned /etc infra tokens too (backups were dead 24 days) Lutz Finsterle 2026-08-22 09:12:14 +02:00
• f2919cf50a Add daily app-token renewal (script + systemd timer) Lutz Finsterle 2026-08-01 10:20:12 +02:00
• 63f864b68b gitignore: cover *-credentials.txt (operator login creds) Lutz Finsterle 2026-08-01 10:04:13 +02:00
• f12034bab9 apply-policies: fix header always showing [dry-run] Lutz Finsterle 2026-08-01 10:03:12 +02:00
• 700e4ce15a Add smtp-healthcheck-ro policy (scoped read for ClaudeAdmin SMTP creds) Lutz Finsterle 2026-08-01 10:00:07 +02:00
• af31208251 Add prepare-host.sh: one-command SSH host onboarding Lutz Finsterle 2026-07-19 10:53:32 +02:00
• 5e5e7f779f Add governance blueprint: policy-as-code, operator/auditor, identity setup Lutz Finsterle 2026-06-30 21:05:38 +02:00
• 21929fa899 Add personal-backup playground (KV + transit) and AppRole demo Lutz Finsterle 2026-06-28 20:28:32 +02:00
• 5a111b7a20 Add SSH CA integration: signed user + host certs, ssh-login helper Lutz Finsterle 2026-06-28 14:55:01 +02:00
• 37a97cb0f4 Add OpenBAO-backed git credential helper for gitea pushes Lutz Finsterle 2026-06-28 14:37:39 +02:00
• 14f46e1082 Add unsealer, internal CA/TLS, auto-unseal, and automated cert+backup Lutz Finsterle 2026-06-28 14:28:49 +02:00
• 95e1b676e2 Initial Commit Lutz Finsterle 2026-06-28 13:41:17 +02:00