autonomic-bot 9cc678853b 1c/W4: add sops.age.keyFile for bootstrap age key (recovery key on clones; host-derived on cc-ci) ...

cc-ci /var/lib/sops-nix/key.txt provisioned = host-derived age key (pub == &host recipient), so
adding keyFile is safe (sops-install-secrets aborts if a configured keyFile is missing).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-27 17:24:39 +01:00

..

abra.nix

M2: Drone server + exec runner up; infra as idempotent-reconcile oneshots

2026-05-26 22:59:59 +01:00

backupbot.nix

fix: set_env newline-safe — RESTIC_REPOSITORY was glued onto a comment line (backups broke)

2026-05-27 04:50:16 +01:00

bridge.nix

M10/D10: enable real-!testme path — fetch upstream tags + enroll 6 recipes in POLL_REPOS

2026-05-27 08:21:43 +01:00

dashboard.nix

dashboard: content-hash image tag so stack deploy rolls on code change (not stuck on :latest)

2026-05-27 07:24:21 +01:00

drone-runner.nix

resource safety: MAX_TESTS=capacity=1 + per-build 60m timeout (orchestrator design change)

2026-05-27 02:53:29 +01:00

drone.nix

fix: set_env newline-safe — RESTIC_REPOSITORY was glued onto a comment line (backups broke)

2026-05-27 04:50:16 +01:00

harness.nix

M5: upgrade + backup/restore stages green (custom-html); backup-bot-two oneshot

2026-05-27 00:53:16 +01:00

packages.nix

M2: Drone server + exec runner up; infra as idempotent-reconcile oneshots

2026-05-26 22:59:59 +01:00

proxy.nix

1c/W2a: mount cc-ci-secrets as submodule at secrets/; cert+key now sops-decrypted to /var/lib/ci-certs/live

2026-05-27 16:32:10 +01:00

secrets.nix

1c/W4: add sops.age.keyFile for bootstrap age key (recovery key on clones; host-derived on cc-ci)

2026-05-27 17:24:39 +01:00

swarm.nix

M1: proxy via real coop-cloud/traefik (abra, wildcard/no-ACME); recipe deploy+teardown; M1 CLAIMED

2026-05-26 22:21:12 +01:00