From 048f2bf808034c701c97fa80220cdc25f904e596 Mon Sep 17 00:00:00 2001
From: ansible <ansible@mymx.me>
Date: Mon, 10 Nov 2025 23:11:01 +0100
Subject: [PATCH] Convert secrets directory to private git submodule
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Remove secrets files from main repository
- Add secrets as git submodule pointing to private repository
- Secrets repository: ansible/secrets (private)
- Follows security best practice of separating sensitive data

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 .gitmodules                                        | 3 +++
 secrets                                            | 1 +
 secrets/machines/debian/ansible_authorized_key.pub | 1 -
 secrets/machines/debian/root_password.txt          | 1 -
 secrets/machines/debian/root_password_hash.txt     | 1 -
 5 files changed, 4 insertions(+), 3 deletions(-)
 create mode 100644 .gitmodules
 create mode 160000 secrets
 delete mode 100644 secrets/machines/debian/ansible_authorized_key.pub
 delete mode 100644 secrets/machines/debian/root_password.txt
 delete mode 100644 secrets/machines/debian/root_password_hash.txt

diff --git a/.gitmodules b/.gitmodules
new file mode 100644
index 0000000..d54ad7d
--- /dev/null
+++ b/.gitmodules
@@ -0,0 +1,3 @@
+[submodule "secrets"]
+	path = secrets
+	url = ssh://git@git.mymx.me:2222/ansible/secrets.git
diff --git a/secrets b/secrets
new file mode 160000
index 0000000..c2241e0
--- /dev/null
+++ b/secrets
@@ -0,0 +1 @@
+Subproject commit c2241e0e7da2730c516c7451aebd4d43a6c69a37
diff --git a/secrets/machines/debian/ansible_authorized_key.pub b/secrets/machines/debian/ansible_authorized_key.pub
deleted file mode 100644
index fb8e713..0000000
--- a/secrets/machines/debian/ansible_authorized_key.pub
+++ /dev/null
@@ -1 +0,0 @@
-ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILBrnivsqjhAxWYeuuvnYc3neeRRuHsr2SjeKv+Drtpu user@debian
diff --git a/secrets/machines/debian/root_password.txt b/secrets/machines/debian/root_password.txt
deleted file mode 100644
index 9711f2a..0000000
--- a/secrets/machines/debian/root_password.txt
+++ /dev/null
@@ -1 +0,0 @@
-kpKzCuawxG3VFqOx0dEXrpRhbu/uNbdeu27GovG9IUU=
diff --git a/secrets/machines/debian/root_password_hash.txt b/secrets/machines/debian/root_password_hash.txt
deleted file mode 100644
index 70f5c86..0000000
--- a/secrets/machines/debian/root_password_hash.txt
+++ /dev/null
@@ -1 +0,0 @@
-$6$6deeLJnt4iArwXPn$WPMPRSy6zcltolPn1B0UCo5imyeDQaNaMmcGt48rQ3gRBhZyzP4GILdit8Mg41CautJlqI4PK1DvoMMmkXqWg.