| commit | 3637b8aa1063963ea91fa2cf9cb8813c62e231d3 | [log] [tgz] |
|---|---|---|
| author | Skyler Grey <sky@a.starrysky.fyi> | Fri Aug 02 19:01:48 2024 +0000 |
| committer | Skyler Grey <minion@clicks.codes> | Fri Aug 02 19:46:49 2024 +0000 |
| tree | b7cd44a72797d874610d9793c0f6a445c42f1933 | |
| parent | 2b74eede40bca050694f7731207c16b8c5c3ba79 [diff] |
fix(secrets): Default secret permissions to 0440 The default age permissions for secrets block the "group" from accessing the secret, making that option useless without additionally specifying a mode This fixes that issue Change-Id: I10a49b4c82bab32696d5508c02e31b8782021238 Reviewed-on: https://git.clicks.codes/c/Infra/NixFiles/+/807 Tested-by: Skyler Grey <minion@clicks.codes> Reviewed-by: Skyler Grey <minion@clicks.codes>
This repository contains system configuration for Clicks's infrastructure.
Config is written using Snowfall lib. It keeps us organized and has some nice features like namespaces.
Devices are named after colors, areas are named as a letter, with the matching phonetic alphabet word. Areas are generally managed by one member of Clicks, who has full access to all of the servers in that area. If you require help for a specific area you can email admin@clicks.codes and in the subject line include the area you want help for.
| System | Description | Address |
|---|---|---|
| teal | Primary Host | teal.alpha.clicks.domains |
| a1d2 | Build Server | d2.a1.clicks.domains |
Deploys are done with deploy-rs, you'll need to be able to ssh into a machine with its hostname (either by a nifty .ssh/config rule or tailscale).
Once you've done that, you'll be able to deploy with
$ deploy .#MACHINE_NAME