toph/secrets/terraform/terraform.tfstate, branch main Unnamed repository; edit this file 'description' to name the repository. http://euandre.org/git/toph/atom?h=main 2022-03-07T22:12:06Z Delete all old code and configuration to start from scratch with Guix only 2022-03-07T22:12:06Z EuAndreh eu@euandre.org 2022-03-07T22:12:06Z urn:sha1:5bf9572734025ddbe680c0c4978f72df5718ae4b Delete files related to: - Terraform - opt/* - scripts/deploy - secrets/* - git-crypt - Nix Remove terraform state 2021-03-08T02:52:34Z EuAndreh eu@euandre.org 2021-03-08T02:52:34Z urn:sha1:9b29c3c23082baa55cc14eb8d783067bd41047e7 Delete Vultr vps resources 2021-02-23T18:40:08Z EuAndreh eu@euandre.org 2021-02-23T18:40:08Z urn:sha1:aee0b4925625ffbea3a006200c56aca5886cb92a Update tfstate file 2021-01-16T13:27:50Z EuAndreh eu@euandre.org 2021-01-16T13:27:50Z urn:sha1:3d1e6da836bb06c88d69533505750076bffcbd1e Checkpoint: Working vps.tf declaration after Vultr migration 2021-01-15T22:26:24Z EuAndreh eu@euandre.org 2021-01-15T22:26:24Z urn:sha1:e3ecadeb27abc30ef1fbb895ee348a75868aacdd vps.tf: Add CNAME "*" subdomain alias 2020-11-28T15:00:36Z EuAndreh eu@euandre.org 2020-11-28T15:00:36Z urn:sha1:3437e71b64e68e69dc8377ee67b68b8a9ece6de7 Terraform: Add email DNS records (DKIM, DMARC, SPF) 2020-11-26T18:18:06Z EuAndreh eu@euandre.org 2020-11-26T18:17:36Z urn:sha1:e317780e0a59b55d1203987dcbfa515ce93c1b3d Remove default.nix and shell.nix 2020-11-18T14:30:52Z EuAndreh eu@euandre.org 2020-11-18T14:28:42Z urn:sha1:c265ec0deeea7d5d4328c34df524bc5d1f163763 Remove most Nix files 2020-11-18T14:11:10Z EuAndreh eu@euandre.org 2020-11-18T14:11:10Z urn:sha1:28d15a26debe76d503a36dd3fdc7f291abe84655 Add base Guix configuration and start switching to it 2020-11-17T01:26:54Z EuAndreh eu@euandre.org 2020-11-17T01:10:25Z urn:sha1:1bf3861318f9cc362384722d4f312f3dd439c749 - remove NixOS stateVersion from .envrc; - add guix-reconfigure.sh; - add vps.scm with initial Guix system configuration; - update vps.tf to use the new "base-guix" snapshot. The "base-guix" image doesn't need a password. The "andreh" users has one, but it is configured for not requiring it when running commands as "sudo". The expected minimal steps one has to go through for privilege scalation is via the SSH private key, and accessing the VPS via SSH. Since password login is disabled and root can't login via SSH either, only the private SSH key allows access to the server. After that, the attacker will be able to run commands as root.