Updated the .gitignore to include machine-specific configurations and secrets handling. Expanded the DEPLOYMENT-GUIDE.md to provide detailed instructions for adding new machines using a template, along with steps for managing encrypted secrets. Introduced example configuration files for boot settings and a sample WireGuard service, improving modularity and flexibility in the NixOS deployment process. Adjusted krops.nix to reference the correct path for machine-specific configurations.
25 lines
477 B
Text
25 lines
477 B
Text
build/
|
|
node_modules/
|
|
dist/
|
|
result
|
|
machine-specific
|
|
web-app
|
|
lnbits
|
|
lnbits-extensions
|
|
|
|
# Machine-specific configurations (user creates these)
|
|
# Keep example-machine as a template
|
|
config/machines/*
|
|
!config/machines/example-machine/
|
|
|
|
# Secrets - only ignore unencrypted secrets
|
|
# Encrypted .age files are SAFE to commit
|
|
secrets/**/!(*.age)
|
|
secrets/**/*.txt
|
|
secrets/**/*.key
|
|
secrets/**/*.pem
|
|
secrets/**/*.env
|
|
|
|
# Age/Passage identity files (NEVER commit these!)
|
|
.passage/
|
|
identities
|