Commit Graph

2 Commits

Author SHA1 Message Date
519eb3a3bb fix: re-encrypt age secrets with SSH pubkey recipient (-R not -r)
Some checks failed
Build and Deploy / deploy (push) Failing after 3m4s
X25519 stanzas from ssh-to-age are incompatible with raw SSH identity.
Use age -R with SSH public key directly to produce ssh-ed25519 stanzas.
Updated AGENTS.md to document the correct process and warn against ssh-to-age.
2026-03-30 19:34:56 -04:00
bedc94cbc0 gitea: add actions runner and CI/CD deploy workflow
- enable gitea actions
- add native host runner (nix:host label, capacity 1)
- add gitea-runner system user with persisted state
- add agenix-encrypted CI secrets (deploy key, git-crypt key, runner token)
- authorize CI deploy key for root SSH
- add build-and-deploy workflow triggered on push to main
2026-03-30 17:27:47 -04:00