nexxo 864126ec7f Add the SSH identity to the vault, and give deployment config a console page ... The SSH private key CluPilot deploys to every host is now stored through SecretVault (ssh.private_key), preferred over CLUPILOT_SSH_PRIVATE_KEY(_PATH) at all three real consumers — SshTraefikWriter and HostStep::keyLogin. kuma.password/kuma.totp stay in .env: they authenticate a separate Python container at boot, and nothing in this app reads them, so the vault would have nothing to wire them to. A new /admin/infrastructure page, backed by App\Support\ProvisioningSettings, makes the non-secret deployment settings that used to force a shell — DNS zone, WireGuard hub endpoint and public key, Traefik's dynamic-config path, the SSH public key, and the monitoring bridge URL — visible and editable from the console, each wired to every real consumer. WG subnet/hub IP and Kuma's own connection details stay in .env: the compose file and a separate container read those before this application ever does.		2026-07-29 00:52:44 +02:00
..
confirm-delete-datacenter.blade.php	One definition of the navigation, and the country instead of the building	2026-07-27 16:09:39 +02:00
confirm-delete-plan-draft.blade.php	feat(admin): a console for creating, pricing and scheduling plans	2026-07-26 12:41:51 +02:00
confirm-delete-vpn-peer.blade.php	feat(admin): VPN access management with live peer state	2026-07-25 21:38:12 +02:00
confirm-disable-two-factor.blade.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
confirm-end-other-sessions.blade.php	Show where an account is signed in, and let it sign the other places out	2026-07-28 23:38:17 +02:00
confirm-forget-secret.blade.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
confirm-reissue-vpn-peer.blade.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
confirm-remove-host.blade.php	One definition of the navigation, and the country instead of the building	2026-07-27 16:09:39 +02:00
confirm-save-secret.blade.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00
customers.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
datacenters.blade.php	Let a datacenter code be corrected while nothing depends on it, and say which building	2026-07-28 22:25:21 +02:00
edit-datacenter.blade.php	Let a datacenter code be corrected while nothing depends on it, and say which building	2026-07-28 22:25:21 +02:00
host-create.blade.php	Let a datacenter code be corrected while nothing depends on it, and say which building	2026-07-28 22:25:21 +02:00
host-detail.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
hosts.blade.php	Read VPN host state from the synced peer table, not a live hub call	2026-07-29 00:18:21 +02:00
infrastructure.blade.php	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
instance-admin-access.blade.php	One definition of the navigation, and the country instead of the building	2026-07-27 16:09:39 +02:00
instances.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
mail.blade.php	Bound the mail test-send and real send to a timeout instead of hanging	2026-07-28 16:36:14 +02:00
maintenance.blade.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
overview.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
plan-versions.blade.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
plans.blade.php	Show times on the operator's clock, keep storing them in UTC	2026-07-27 17:32:21 +02:00
provisioning.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
revenue.blade.php	Match the panel to the approved template, measured rather than assumed	2026-07-27 17:08:05 +02:00
secrets.blade.php	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00
settings.blade.php	Show where an account is signed in, and let it sign the other places out	2026-07-28 23:38:17 +02:00
two-factor-setup.blade.php	Let a half-finished two-factor enrolment be cancelled, and rework the setup page	2026-07-28 22:25:27 +02:00
vpn-config-access.blade.php	feat(vpn): ownership, a Developer role, and password-gated config retrieval	2026-07-25 22:31:54 +02:00
vpn.blade.php	Replace native confirm() dialogs with the app's own modal pattern	2026-07-28 19:34:27 +02:00