Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• e012654915 OpenBAO-Server 2.6.2 -> 2.7.1 (Unsealer bleibt vorerst) main Lutz Finsterle 2026-10-24 09:39:32 +02:00
• f3cfe777b6 mt-az: vollstaendige Zertifikatskette, plus Pruefung beim Erneuern Lutz Finsterle 2026-10-22 13:28:47 +02:00
• a9e51fbc8c MikroTik-Zertifikat erneuern und automatisieren Lutz Finsterle 2026-10-06 20:45:38 +02:00
• d3c7d2445f Audit-Log einrichten: deklarativ, mit Rotation und haltbarem Pfad Lutz Finsterle 2026-10-03 10:54:58 +02:00
• 175c0bc2d1 Policy claude-rw einchecken und SSH-Rechte eingrenzen Lutz Finsterle 2026-10-03 10:51:53 +02:00
• 14275a5627 Auto-Unseal beim Boot und internes Zertifikat fuer gitea.famfi.home lutz 2026-09-26 09:25:44 +02:00
• fef9e7f1ae Renew the transit seal token so auto-unseal survives a reboot Lutz Finsterle 2026-09-18 10:10:18 +02:00
• 055676c186 RESTORE.md: document the procedure a real restore drill exposed Lutz Finsterle 2026-08-22 09:59:51 +02:00
• 64b20a54dc Ship an encrypted DR bundle offsite to the NAS daily Lutz Finsterle 2026-08-22 09:50:30 +02:00
• 471692c283 Automate demo-app AppRole SecretID rotation on a weekly timer Lutz Finsterle 2026-08-22 09:33:16 +02:00
• ee0b8c818f Alert by email when an OpenBAO maintenance unit fails Lutz Finsterle 2026-08-22 09:22:05 +02:00
• c5ff1a3fca Upgrade OpenBAO 2.5.5 -> 2.6.2 Lutz Finsterle 2026-08-22 09:12:14 +02:00
• 123e65ee46 Renew root-owned /etc infra tokens too (backups were dead 24 days) Lutz Finsterle 2026-08-22 09:12:14 +02:00
• f2919cf50a Add daily app-token renewal (script + systemd timer) Lutz Finsterle 2026-08-01 10:20:12 +02:00
• 63f864b68b gitignore: cover *-credentials.txt (operator login creds) Lutz Finsterle 2026-08-01 10:04:13 +02:00
• f12034bab9 apply-policies: fix header always showing [dry-run] Lutz Finsterle 2026-08-01 10:03:12 +02:00
• 700e4ce15a Add smtp-healthcheck-ro policy (scoped read for ClaudeAdmin SMTP creds) Lutz Finsterle 2026-08-01 10:00:07 +02:00
• af31208251 Add prepare-host.sh: one-command SSH host onboarding Lutz Finsterle 2026-07-19 10:53:32 +02:00
• 5e5e7f779f Add governance blueprint: policy-as-code, operator/auditor, identity setup Lutz Finsterle 2026-06-30 21:05:38 +02:00
• 21929fa899 Add personal-backup playground (KV + transit) and AppRole demo Lutz Finsterle 2026-06-28 20:28:32 +02:00
• 5a111b7a20 Add SSH CA integration: signed user + host certs, ssh-login helper Lutz Finsterle 2026-06-28 14:55:01 +02:00
• 37a97cb0f4 Add OpenBAO-backed git credential helper for gitea pushes Lutz Finsterle 2026-06-28 14:37:39 +02:00
• 14f46e1082 Add unsealer, internal CA/TLS, auto-unseal, and automated cert+backup Lutz Finsterle 2026-06-28 14:28:49 +02:00
• 95e1b676e2 Initial Commit Lutz Finsterle 2026-06-28 13:41:17 +02:00