4 Commits

Author	SHA1	Message	Date
MichaelFisher1997	8887a8bb87	refactor: move tailscale join fully into cloud-init ... Remove guest-agent enrollment workflow, pass TS auth key through Terraform variables/secrets, and run tailscale up with tag:k8s during cloud-init bootstrap alongside SSH key injection.	2026-02-28 13:13:34 +00:00
MichaelFisher1997	17834b3aa7	update: rotate SSH access via cloud-init secret ... Inject SSH public key through Terraform/cloud-init from Gitea secret so access can be rotated without rebuilding the template image.	2026-02-28 12:36:20 +00:00
MichaelFisher1997	e714a56980	update: switch Terraform to NixOS template workflow ... - Point clone_template to nixos-template and trim cloud-init to Nix-safe hostname/DNS only - Remove SSH/Tailscale cloud-init variables and workflow secret dependencies - Add reusable NixOS template-base config with bootloader, Tailscale, fish, and utility packages	2026-02-28 00:06:25 +00:00
MichaelFisher1997	79b535bb59	fix: code quality improvements ... - Remove duplicate variables (alpaca_count, llama_count) - Remove unused variables (vm_name, disk_type) - Fix outputs to use correct variable names - Fix cloud-init template to not overwrite source file - Fix hardcoded hostname in cloud-init template - Fix typo in SSH_KEY_PUBLIC description	2026-02-27 01:25:25 +00:00