update TODOs: some secrets work is now complete
This commit is contained in:
parent
fb427e55e8
commit
38d921dbc9
7
TODO.md
7
TODO.md
|
@ -1,9 +1,8 @@
|
||||||
## refactoring:
|
## refactoring:
|
||||||
### sops/secrets
|
### sops/secrets
|
||||||
- move every secret into its own file.
|
- attach secrets to the thing they're used by (sane.programs)
|
||||||
- define SOPS secrets by crawling the ./secrets directory instead of manually defining them.
|
- rework secrets to leverage `sane.fs`
|
||||||
- see about removing the sops activation script and just using systemd scripts instead.
|
- remove sops activation script as it's covered by my systemd sane.fs impl
|
||||||
- maybe this fixes the multiple "building the system configuration..." messages during nixos-rebuild switch?
|
|
||||||
|
|
||||||
### roles
|
### roles
|
||||||
- allow any host to take the role of `uninsane.org`
|
- allow any host to take the role of `uninsane.org`
|
||||||
|
|
Loading…
Reference in New Issue
Block a user