34 lines
1.7 KiB
Markdown
34 lines
1.7 KiB
Markdown
# Hosts
|
|
|
|
| Host | Role | State |
|
|
| -------- | ----------------------------------- | --------- |
|
|
| Radagon | WAN router | active |
|
|
| Marika | OpenWrt intranet gateway + DNS/DHCP | active |
|
|
| Godfrey | Network switch | active |
|
|
| Morgott | Edge ingress + control-plane stacks | onboarded |
|
|
| Melina | Gitea + media/apps | onboarded |
|
|
| Mohg | App host | onboarded |
|
|
| Malenia | Mac app/utility host | onboarded |
|
|
| Miquella | NAS; exports `/mnt/nas` | onboarded |
|
|
|
|
| Host | Runs stacks | Notes |
|
|
| -------- | ----------: | ----------------------------------------------- |
|
|
| Morgott | yes | Caddy, identity, observability, certs, runners. |
|
|
| Melina | yes | Gitea, media, app stacks, runners. |
|
|
| Mohg | yes | Capacity host. |
|
|
| Malenia | yes | macOS-specific host. |
|
|
| Miquella | limited | NAS plus selected host services. |
|
|
|
|
## SOPS recipients
|
|
|
|
Public age keys are non-secret. Private keys stay on each host at
|
|
`/etc/charlie/age.key`.
|
|
|
|
| Owner | Public key |
|
|
| ------- | ---------------------------------------------------------------- |
|
|
| admin | `age19d6mc8arznnwnvtp0xrphlseuwf94p0f3pznszrtmd5wgmjpzqdq9mltvs` |
|
|
| morgott | `age1m5ha3fd8psek5pym4spk7encjk4vmsml46eya3eymp7q9d9jre5s7xe84r` |
|
|
| melina | `age1xfp878l4ul5zulqqul0u60c44c5wj94cmladgc6jt5jrlmrdrezsd8twh2` |
|
|
|
|
Admin key backup: vaultwarden Secure Note `Charlie SOPS admin age key`.
|