Establish clean homelab infrastructure baseline

Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
2026-09-09 16:47:20 +00:00
commit 88a02ababa
418 changed files with 50579 additions and 0 deletions
@@ -0,0 +1,13 @@
+output "acme_directory_url" {
+  value       = "${var.bao_address}/v1/${var.pki_mount}/roles/${var.acme_role}/acme/directory"
+  description = <<-EOT
+    Point ACME clients here. Example, on dc1 (binds :80 only during renewal):
+      lego --server <this> --domains dc1.ad.ddupan.top --email [email protected] --http run
+    Clients must already trust the internal CA, or pass its PEM to the client.
+  EOT
+}
+
+output "acme_enabled" {
+  value       = vault_pki_secret_backend_config_acme.this.enabled
+  description = "Whether the ACME directory is currently serving."
+}