commit bfc083b421ba7e508201acacee187561ddea550d parent 9bf7671c9f677ce3bca8a34c8e211baea021fc88 Author: Daniel Barlow <dan@telent.net> Date: Thu, 5 Mar 2026 22:15:14 +0000 plan for key management Diffstat:
| M | notes.md | | | 11 | +++++++++++ |
1 file changed, 11 insertions(+), 0 deletions(-)
diff --git a/notes.md b/notes.md @@ -170,3 +170,14 @@ O wifi provisioning over ble - add an IMU to get lean angles - stop hardcoding BLE address ``` + +how to manage keys? the server is built manually with nix-shell, we +haven't even packaged this yet, and the client is built as part of +biscuit, on a separate machine + +- a nixos module to write a config file for the client that says +where the keys are // https://docs.python.org/3/library/configparser.html +- the client to parse the config file and read keys +- biscuit config to use the module +- biscuit make install to copy the keys from local/secrets/ dir to + /etc/secrets/eculocate