nexxo 864126ec7f Add the SSH identity to the vault, and give deployment config a console page ... The SSH private key CluPilot deploys to every host is now stored through SecretVault (ssh.private_key), preferred over CLUPILOT_SSH_PRIVATE_KEY(_PATH) at all three real consumers — SshTraefikWriter and HostStep::keyLogin. kuma.password/kuma.totp stay in .env: they authenticate a separate Python container at boot, and nothing in this app reads them, so the vault would have nothing to wire them to. A new /admin/infrastructure page, backed by App\Support\ProvisioningSettings, makes the non-secret deployment settings that used to force a shell — DNS zone, WireGuard hub endpoint and public key, Traefik's dynamic-config path, the SSH public key, and the monitoring bridge URL — visible and editable from the console, each wired to every real consumer. WG subnet/hub IP and Kuma's own connection details stay in .env: the compose file and a separate container read those before this application ever does.		2026-07-29 00:52:44 +02:00
..
FakeHetznerDnsClient.php	fix(hosts): a failed DNS deletion must not orphan the record	2026-07-25 23:53:14 +02:00
FakeHostDnsDirectory.php	Move host DNS names off the public zone into vpn-dns's internal hostsdir	2026-07-28 23:44:31 +02:00
FileHostDnsDirectory.php	Move host DNS names off the public zone into vpn-dns's internal hostsdir	2026-07-28 23:44:31 +02:00
HetznerDnsClient.php	feat(engine-b): 15-step customer pipeline + DNS/Traefik services	2026-07-25 11:50:26 +02:00
HostDnsDirectory.php	Move host DNS names off the public zone into vpn-dns's internal hostsdir	2026-07-28 23:44:31 +02:00
HttpHetznerDnsClient.php	Add the SSH identity to the vault, and give deployment config a console page	2026-07-29 00:52:44 +02:00