Did I just say all ? Well, that's all my public dotfiles. Take care if you want to use them. They are not guaranteed to work on your system!
Some parts of the configuration are not public and are encrypted using sops. The enciphered files are stored in the secrets folder. In order to deploy locally, the integration layer between the secrets and the dotfiles relies on sops-nix.
The CI/CD pipeline is configured using GitHub Actions. The workflow is defined in the .github/workflows folder:
- Static Analysis (GitHub Actions)
- Check Nix Flake update (run each week through CronJob)
Additionally, Dependabot is configured to automatically update dependencies (GitHub Actions, Terraform providers).
The settings of this repository are managed from the gitops-deployments repository using Terraform. The actual configuration applied is located in the Terraform module modules/github-repository.