Commit graph

3 commits

Author SHA1 Message Date
5dcb85e56d Add sops-nix for secrets management
- Add flake.nix with sops-nix input
- Configure sops with age key encryption
- Add .sops.yaml template for age key configuration
- Create secrets/ directory for encrypted secrets
- Add .gitignore for age keys and nix result symlinks

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 19:34:10 +01:00
58905b7666 Add security hardening and basic VPS setup
- Enable firewall with only SSH port 22 open, disable ping
- Harden SSH: disable root login and password auth
- Create non-root user 'ashie' with sudo access
- Add htop and tmux to system packages
- Enable automatic NixOS updates (no auto-reboot)
- Fix hostname syntax error (missing closing quote)
- Remove duplicate nixos/ subdirectory

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 19:28:26 +01:00
System administrator
2e768daefa Initial commit 2026-03-17 18:20:35 +00:00