Replace Homelab management with Talos

.envrc

@@ -1,5 +1,11 @@
 #shellcheck disable=SC2148,SC2155
-export KUBECONFIG=$(expand_path ./provision/kubeconfig)
-export ANSIBLE_CONFIG=$(expand_path ./ansible.cfg)
-export ANSIBLE_HOST_KEY_CHECKING="False"
-export SOPS_AGE_KEY_FILE=$(expand_path ~/.config/sops/age/keys.txt)
+export KUBECONFIG="$(expand_path ./kubeconfig)"
+export SOPS_AGE_KEY_FILE="$(expand_path ./age.key)"
+# Venv
+PATH_add "$(expand_path ./.venv/bin)"
+export VIRTUAL_ENV="$(expand_path ./.venv)"
+export PYTHONDONTWRITEBYTECODE="1"
+# Talos
+export TALOSCONFIG="$(expand_path ./kubernetes/bootstrap/talos/clusterconfig/talosconfig)"
+# Bin
+PATH_add "$(expand_path ./.bin)"

.github/CODEOWNERS

@@ -1,2 +1 @@
-# https://docs.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners
 * @paulkiernan

.gitignore

@@ -1,19 +1,19 @@
-# Trash
+*.agekey*
+*.key
+*.pub
 .DS_Store
-Thumbs.db
-
-# k8s
-kubeconfig*
-
-# vscode-sops
-.decrypted~*.yaml
+.bin
 .config.env
-*.agekey
-
-# Ansible
-xanmanning.k3s*
-
-# Terraform
+.decrypted~*.yaml
+.idea
+.private
+.task
 .terraform
-.terraform.tfstate*
+.venv*
+/config.yaml
+Brewfile.lock.json
+Thumbs.db
+kubeconfig*
+talosconfig
 terraform.tfstate*
+wiki

.sops.yaml

@@ -1,10 +1,12 @@
 ---
 creation_rules:
-  - path_regex: provision/.*\.sops\.ya?ml
-    unencrypted_regex: "^(kind)$"
-    age: >-
-      age1cxqfxy46kp8p007857c6cnk4j2ypuc0pw04utqr58uraxn0dz3ystslpxj
-  - path_regex: cluster/.*\.ya?ml
+  - # IMPORTANT: This rule MUST be above the others
+    path_regex: talos/.*\.sops\.ya?ml
+    key_groups:
+      - age:
+          - "age16vnesw9pd7l556h9lmgv4lyya03xsu2akc5hukhgua8mffukmsms46665n"
+  - path_regex: kubernetes/.*\.sops\.ya?ml
     encrypted_regex: "^(data|stringData)$"
-    age: >-
-      age1cxqfxy46kp8p007857c6cnk4j2ypuc0pw04utqr58uraxn0dz3ystslpxj
+    key_groups:
+      - age:
+          - "age16vnesw9pd7l556h9lmgv4lyya03xsu2akc5hukhgua8mffukmsms46665n"