sjat 43e5a4aa53 secrets(vault): add Gandi LiveDNS PAT as vault.gandi.pat ... Personal Access Token for wingu.me LiveDNS, used by the M1 public_dns role via community.general.gandi_livedns. Stored under the nested vault.<service>.<key> map (CLAUDE.md); the placeholder canary is preserved. Verified the token authenticates + is scoped to wingu.me, and that the file round-trips (decrypts to the expected structure). PAT to be rotated after M1 (transmitted in plaintext during setup). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 09:14:10 +02:00
..
firewall.yml	feat(base): shared firewall catalog/zones + firewall defaults	2026-06-06 18:49:40 +02:00
vars.yml	inventory: add ubongo to control group; set ssh-from-control addr	2026-06-11 10:32:24 +02:00
vault.yml	secrets(vault): add Gandi LiveDNS PAT as vault.gandi.pat	2026-06-14 09:14:10 +02:00