update TODOs: some secrets work is now complete

This commit is contained in:
Colin 2023-05-14 09:58:49 +00:00
parent fb427e55e8
commit 38d921dbc9

View File

@ -1,9 +1,8 @@
## refactoring:
### sops/secrets
- move every secret into its own file.
- define SOPS secrets by crawling the ./secrets directory instead of manually defining them.
- see about removing the sops activation script and just using systemd scripts instead.
- maybe this fixes the multiple "building the system configuration..." messages during nixos-rebuild switch?
- attach secrets to the thing they're used by (sane.programs)
- rework secrets to leverage `sane.fs`
- remove sops activation script as it's covered by my systemd sane.fs impl
### roles
- allow any host to take the role of `uninsane.org`