thesabear/public
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: re-verify secrets-and-pki.md, no content drift found

Browse Source 
Live-checked every claim: Vault mount list, SSH CA role TTLs/algorithm,
the Caddyfile's asymmetric-trust config for Vault (exact match), all
per-host consumer stack counts (12 rocky-docker / 10 automation,
verified against the authoritative docker_secret_templates source, not
just Vault KV path listings which include unrelated Kestra-flow
secrets), the cert-rebuild script's 19-day-incident story, and the
lifecycle diagram - all still accurate. Bumping verified date/SHAs only.
This commit is contained in:
automation-bot committed 2026-09-19 00:19:40 +03:00
1 parent 08bdbfaa6a
commit c241ed618d
1 file changed
+3 -3
Download Patch File Download Diff File Expand all files Collapse all files
docs/secrets-and-pki.md
+3 -3
View File
@@ -1,6 +1,6 @@
<!-- verified: 2026-09-06 <!-- verified: 2026-09-19
iac@49ff427 : ansible/roles/secure_vault, ansible/group_vars/all/vault_provisioner.yml, ansible/roles/monitoring/mqtt_client iac@f770e1c : ansible/roles/secure_vault, ansible/group_vars/all/vault_provisioner.yml, ansible/roles/monitoring/mqtt_client
rocky-docker-lxc@4f43dcc : caddy/Caddyfile rocky-docker-lxc@7dd5025 : caddy/Caddyfile
trilium : Eu0wns00QOBG, wovVrgvoDVy2, 1seDR2nBmxKO, GW8BMoTKtRBe, JbKe9CHzOP9D, Tu7FX48fxSQZ, DvKxK0gHXsng, otSPaU6IfjlP trilium : Eu0wns00QOBG, wovVrgvoDVy2, 1seDR2nBmxKO, GW8BMoTKtRBe, JbKe9CHzOP9D, Tu7FX48fxSQZ, DvKxK0gHXsng, otSPaU6IfjlP
--> -->