photoncloud-monorepo/docs/por/T036-vm-cluster-deployment/node02/secrets
centra 5c6eb04a46 T036: Add VM cluster deployment configs for nixos-anywhere
- netboot-base.nix with SSH key auth
- Launch scripts for node01/02/03
- Node configuration.nix and disko.nix
- Nix modules for first-boot automation

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-11 09:59:19 +09:00
..
ca.crt T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
cluster-config.json T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
node02.crt T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
node02.key T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00
README.md T036: Add VM cluster deployment configs for nixos-anywhere 2025-12-11 09:59:19 +09:00

Node02 Secrets Directory

This directory contains TLS certificates and cluster configuration for node02.

Files

Required (to be populated by S3 - TLS Certificate Generation)

  • ca.crt - Certificate Authority certificate (shared across all nodes)
  • node02.crt - Node02 TLS certificate
  • node02.key - Node02 TLS private key (permissions: 0400)

Already Present

  • cluster-config.json - Cluster configuration for Raft bootstrap

Permissions

After copying certificates:

chmod 644 ca.crt
chmod 644 node02.crt
chmod 400 node02.key
chown root:root *

Provisioning

These files will be deployed to /etc/nixos/secrets/ during nixos-anywhere provisioning (S5).