A CLI tool written in Go that queries the PuppetDB API to look up and filter node facts.
Updated 2026-08-15 15:00:16 +10:00
Terraform provider for managing ArtifactAPI
Updated 2026-08-13 20:00:48 +10:00
My terrible vibe coded artifact cache
Updated 2026-08-13 19:55:48 +10:00
Terraform provider for the Vault/OpenBao NetBox token secrets engine (pairs with vault-plugin-secrets-netbox)
Updated 2026-08-08 22:21:17 +10:00
HashiCorp Vault / OpenBao secrets engine for NetBox API tokens (seeded admin + dynamic per-user tokens with expiry-aligned leases)
Updated 2026-08-08 22:20:41 +10:00
HashiCorp Vault / OpenBao secrets engine issuing short-lived signed JWT app tokens (per-app roles, offline JWKS validation) for self-made services
Updated 2026-08-03 00:06:41 +10:00
Terraform provider for the kea-operator KeaAPI: manage Kea DHCP subnets and PXE client classes.
Updated 2026-08-02 20:13:21 +10:00
K8s operator + API for AI agent dispatch from git forges
Updated 2026-07-30 00:35:20 +10:00
Archives raw logs from NATS JetStream to S3 as zstd-compressed, GPG-encrypted, indexed objects; plus a CLI to search and retrieve them. Go service + CLI.
Updated 2026-07-29 20:19:46 +10:00
HashiCorp Vault / OpenBao secrets engine for Gitea: mints ephemeral, scoped per-user access tokens via the admin API, with seeded-admin basic-auth and root password rotation
Updated 2026-07-27 18:54:54 +10:00
Terraform provider for the Vault/OpenBao Gitea token secrets engine (giteavaultsecret)
Updated 2026-07-27 18:54:54 +10:00
A Go daemon that watches Gitea repos and dispatches one-shot Claude Code sessions in Docker to work issues and review PRs.
Updated 2026-07-27 18:54:53 +10:00
Monorepo of Go CLI tools for managing Vault tokens across multiple vault instances: vctl (login/renew per-context tokens) and vctx (context-aware wrapper around the vault CLI).
Updated 2026-07-27 18:54:53 +10:00
Spiritual successor to shorewall — nftables firewall manager using google/nftables
Updated 2026-07-26 19:17:41 +10:00
Terraform provider for tomswallapi: manage fleet-global firewall policy (zones, address groups, portgroups, rules, policies, fabrics) and per-device bindings.
Updated 2026-07-26 19:17:41 +10:00
Dependency-less Go CLI client for encapi, used as the Puppet exec External Node Classifier (ENC) on k8s compilers. Fetches the cobbler-wire ENC document and reshapes it for the puppet exec node_terminus.
Updated 2026-07-25 10:38:59 +10:00
HashiCorp Vault / OpenBao secrets engine for Rancher API tokens (seeded root rotation + dynamic scoped creds via tokens.ext.cattle.io)
Updated 2026-07-18 16:33:06 +10:00
RFC2136 dynamic-DNS updater daemon: watches a records file and network interfaces and pushes TSIG-signed updates to BIND, with a local status API for facter.
Updated 2026-07-18 08:28:29 +10:00
Terraform provider for the Vault/OpenBao GPG/OpenPGP secrets engine (gpgvaultsecret) — manage backends and keys
Updated 2026-07-16 23:38:53 +10:00
Terraform provider for the Vault/OpenBao Rancher token secrets engine (ranchervaultsecret)
Updated 2026-07-16 22:34:11 +10:00