alexion 11d7cb053c docs(tasks): add task 0019, user SSH keys and an access policy ...

Per-machine client identities, so a compromised machine surrenders only
its own key, plus a role-based rule for which machines may reach which.
Only neogaia exists, so the server half is recorded rather than exercised.

2026-07-20 09:51:34 -04:00

..

0001-skeleton-and-building-host.md

build(deps): pin the stable overlay and stateVersion to 26.05

2026-07-19 07:57:21 -04:00

0002-neogaia-disk-and-boot.md

feat(neogaia): declare the encrypted disk with disko

2026-07-19 07:57:21 -04:00

0003-kernel-and-hardware.md

refactor(neogaia): drop the zram Module and enable zram inline

2026-07-19 07:57:21 -04:00

0004-networking-and-base-system.md

feat(neogaia): enable networking and set the base locale

2026-07-19 07:57:21 -04:00

0005-fish-shell-module.md

refactor(fish): merge the config fragments back into one config.fish

2026-07-19 07:57:21 -04:00

0006-tmux-module.md

feat(tmux): add a native Module and enable it on neogaia

2026-07-19 07:57:21 -04:00

0007-nvim-module.md

feat(nvim): configure Neovim via nixvim with Nix-managed plugins

2026-07-19 07:57:43 -04:00

0008-claude-code-module.md

feat(claude-code): manage the user's global config in the Module

2026-07-19 07:57:43 -04:00

0009-install-flow-docs.md

docs(neogaia): document the one-shot install flow

2026-07-19 07:57:43 -04:00

0010-sops-skeleton-and-password.md

feat(secrets): decrypt the login password from sops (task 0010)

2026-07-19 23:43:28 -04:00

0011-neogaia-ssh-host-keys.md

feat(neogaia): restore the SSH host keys from sops (task 0011)

2026-07-19 23:53:01 -04:00

0012-secrets-operations-docs.md

docs: plan sops secrets with two-tier age identities

2026-07-19 14:57:41 -04:00

0013-nixos-hardware-profile.md

docs: close out task 0013 after confirming it on hardware

2026-07-19 16:51:03 -04:00

0014-nix-store-housekeeping.md

docs: plan the post-boot hygiene tasks

2026-07-19 16:11:52 -04:00

0015-git-module.md

docs: plan the post-boot hygiene tasks

2026-07-19 16:11:52 -04:00

0016-esp-resize-and-reimage.md

docs: close out task 0016 after reimaging neogaia

2026-07-19 18:53:17 -04:00

0017-hardware-detection-refresh.md

docs(neogaia): record the boot verification for task 0017

2026-07-19 23:12:14 -04:00

0018-agent-sudo-credential-caching.md

feat(claude-code): share sudo's credential cache across sessions (task 0018)

2026-07-19 22:18:58 -04:00

0019-user-ssh-keys-and-access-policy.md

docs(tasks): add task 0019, user SSH keys and an access policy

2026-07-20 09:51:34 -04:00