2 Commits

Author	SHA1	Message	Date
autonomic-bot	5e14963d51	feat(2): declarative Docker Hub auth — sops dockerhub_auth + config.json template (rate-limit fix) ... - secrets submodule -> cdd5e0a (adds sops dockerhub_auth = base64 nptest2:PAT). - nix/modules/secrets.nix: sops.secrets.dockerhub_auth + sops.templates."docker-config.json" renders /root/.docker/config.json (0600 root) so abra/docker pulls authenticate (200/6h per-account) instead of the exhausted 100/6h shared-IP anon limit. Survives 1c rebuild. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-05-28 22:05:10 +01:00
autonomic-bot	433ec9de30	refactor(1b): RL5 — consolidate Nix code under nix/ (modules->nix/modules, hosts->nix/hosts) ... flake.nix/flake.lock STAY at root so the build ref #cc-ci is unchanged; only flake's internal configuration.nix path updated. Root-relative refs inside moved modules re-based ../X -> ../../X (secrets/bridge/dashboard); configuration.nix's ../../modules imports unchanged (both dirs under nix/). Living docs (README, architecture/install/secrets/enroll) + .drone.yml comment updated to nix/...; append-only history logs left as-is. DECISIONS.md records RL5 + the deferred-coordinated RL6. Verified on cc-ci: nixos-rebuild build 'path:#cc-ci' -> toplevel 8i3jcad9 (BYTE-IDENTICAL to the pre-move build — store derivations are content-addressed on file contents, module .nix not in the runtime closure); scripts/lint.sh -> lint: PASS. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-27 21:19:09 +01:00