traberphandClaude Opus 5.5
adb68d5146
- sish config mirrors kubernetes/base/sish (HTTP by Host on :80, SNI passthrough on :443, raw TCP on 22 and 20000-20099), single tenant via bind-any-host, domain tunnel.traberph.de - host key and connector key provisioned from gitignored coreos/.secrets/ - MemoryMax=256M for sish - Zincati reboot window 03:00-04:00 UTC, daily sish update within v2 with rollback - ignore *.ign (contains the host key) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
17 lines
398 B
Plaintext
17 lines
398 B
Plaintext
# Plaintext secrets: never commit, back them up outside this folder
|
|
.secrets/
|
|
|
|
# Talos generated configs contain cluster PKI and admin credentials (any folder,
|
|
# e.g. a new edge's config generated next to talos/)
|
|
controlplane.yaml
|
|
worker.yaml
|
|
talosconfig
|
|
secrets.yaml
|
|
kubeconfig
|
|
|
|
# Retired dev edge credentials (cirrus_dev), kept locally only
|
|
old/
|
|
|
|
# Ignition output embeds the secrets above
|
|
*.ign
|