mikl
2d023fc86d
- flake.nix: mkHost helper, SOPS-age integration - hosts/common: locale, sshd, universal packages - hosts/muscari: k3s host with Cilium flags - modules/users/mikl: SSH keys via forgejo .keys + sha256 pinning - modules/services/k3s: k3s daemon with Cilium-compatible flags - hardware-configuration.nix: placeholder, will be regenerated on real VM Stack: - NixOS 25.11 - k3s single-node (Cilium CNI, Traefik ingress) - SOPS + age for secrets - Multi-host ready (rosemary planned)
24 lines
No EOL
384 B
Text
24 lines
No EOL
384 B
Text
# Nix build artifacts
|
||
result
|
||
result-*
|
||
|
||
# secrets — НЕ коммитим незашифрованные
|
||
# (зашифрованные через SOPS — коммитятся)
|
||
*.plain.yaml
|
||
*.plain.yml
|
||
|
||
# editor backups
|
||
*.swp
|
||
*.bak
|
||
*~
|
||
.DS_Store
|
||
|
||
# nix tooling
|
||
.direnv/
|
||
devenv.nix
|
||
devenv.yaml
|
||
|
||
# age key (НИКОГДА не коммитить!)
|
||
*.age-key
|
||
*age-keys.txt
|
||
*age-keys.json |