NAxS Homelab
Prerequisites
- Make sure that your user is part of the docker group
cat /etc/group | grep docker- if the entry looks likedocker:x:<Group ID>:<username>, you're good to go- Otherwise please run
sudo usermod -aG docker <username>, followed by logging out & in again for these changes to take into effect
- Create a default network called homelab
docker network create homelab
- Set up 1Password for access to secrets
- Install
pass&gpg - Generate key with
gpg --full-generate-key- stick to defaults
- as password, use
GPG cert passwordstored inside theNAxS Homelabvault in 1Password
- Initialize password storage with
pass init "GPG key ID"- You can check out the ID by using
gpg --list-secret-keys --keyid-format LONG- you should see a line withsec, containing the following information<encryption technology>/ID
- You can check out the ID by using
- Store the 1Password service account token in
passasop-sa_tokenby executingpass insert op-sa_token - Make sure your .zshrc file loads the token into the
OP_SERVICE_ACCOUNT_TOKEN(this is needed by the 1Password CLI for authentication purposes when loading the secrets) environment variable by executingexport OP_SERVICE_ACCOUNT_TOKEN="$(pass op-sa_token)"
// TODO: Create template script Template script which helps with setting up new applications (asks for potential secrets needs, adds default network to compose file, creates new users/groups to run containers rootless)