nexxo 864126ec7f Add the SSH identity to the vault, and give deployment config a console page ... The SSH private key CluPilot deploys to every host is now stored through SecretVault (ssh.private_key), preferred over CLUPILOT_SSH_PRIVATE_KEY(_PATH) at all three real consumers — SshTraefikWriter and HostStep::keyLogin. kuma.password/kuma.totp stay in .env: they authenticate a separate Python container at boot, and nothing in this app reads them, so the vault would have nothing to wire them to. A new /admin/infrastructure page, backed by App\Support\ProvisioningSettings, makes the non-secret deployment settings that used to force a shell — DNS zone, WireGuard hub endpoint and public key, Traefik's dynamic-config path, the SSH public key, and the monitoring bridge URL — visible and editable from the console, each wired to every real consumer. WG subnet/hub IP and Kuma's own connection details stay in .env: the compose file and a separate container read those before this application ever does.		2026-07-29 00:52:44 +02:00
..
Actions	Put every mail in one design, and confirm an order when the money arrives	2026-07-29 00:14:04 +02:00
Console	Move host DNS names off the public zone into vpn-dns's internal hostsdir	2026-07-28 23:44:31 +02:00
Exceptions	Refuse a portal login for an address that already belongs to an operator	2026-07-28 14:42:16 +02:00
Http	Show where an account is signed in, and let it sign the other places out	2026-07-28 23:38:17 +02:00
Listeners	Recognise the devices an account signs in from, and warn about a new one	2026-07-28 23:28:34 +02:00
Livewire	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
Mail	Put every mail in one design, and confirm an order when the money arrives	2026-07-29 00:14:04 +02:00
Models	Read VPN host state from the synced peer table, not a live hub call	2026-07-29 00:18:21 +02:00
Notifications	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
Policies	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
Providers	Move host DNS names off the public zone into vpn-dns's internal hostsdir	2026-07-28 23:44:31 +02:00
Provisioning	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
Services	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
Support	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00