Collection of operational skills for VaultMesh infrastructure including: - backup-sovereign: Backup and recovery operations - btc-anchor: Bitcoin anchoring - cloudflare-tunnel-manager: Cloudflare tunnel management - container-registry: Container registry operations - disaster-recovery: Disaster recovery procedures - dns-sovereign: DNS management - eth-anchor: Ethereum anchoring - gitea-bootstrap: Gitea setup and configuration - hetzner-bootstrap: Hetzner server provisioning - merkle-forest: Merkle tree operations - node-hardening: Node security hardening - operator-bootstrap: Operator initialization - proof-verifier: Cryptographic proof verification - rfc3161-anchor: RFC3161 timestamping - secrets-vault: Secrets management 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
65 lines
1.6 KiB
JSON
65 lines
1.6 KiB
JSON
{
|
|
"version": "1.0.0",
|
|
"skill": "operator-bootstrap",
|
|
"description": "Node A foundation for sovereign EU infrastructure",
|
|
"parameters": {
|
|
"required": [
|
|
"OPERATOR_NAME",
|
|
"OPERATOR_EMAIL",
|
|
"DOMAIN",
|
|
"CF_ACCOUNT_ID"
|
|
],
|
|
"optional": {
|
|
"NODE_NAME": "node-a",
|
|
"GITOPS_ROOT": "~/infrastructure",
|
|
"SSH_KEY_COMMENT": "node-a-operator",
|
|
"GPG_KEY_SIZE": 4096,
|
|
"GPG_KEY_EXPIRE": "2y",
|
|
"TUNNEL_NAME": "node-a-tunnel",
|
|
"ENABLE_KATE": true
|
|
}
|
|
},
|
|
"phases": {
|
|
"preflight": ["00_preflight.sh"],
|
|
"identity": {
|
|
"plan": ["01_identity_plan.sh"],
|
|
"apply": ["02_identity_apply.sh"],
|
|
"rollback": ["rollback/undo_identity.sh"]
|
|
},
|
|
"secrets": {
|
|
"guide": ["10_secrets_guide.sh"],
|
|
"interactive": true
|
|
},
|
|
"tunnel": {
|
|
"plan": ["20_tunnel_plan.sh"],
|
|
"apply": ["21_tunnel_apply.sh"],
|
|
"rollback": ["rollback/undo_tunnel.sh"]
|
|
},
|
|
"gitops": {
|
|
"plan": ["30_gitops_plan.sh"],
|
|
"apply": ["31_gitops_apply.sh"],
|
|
"rollback": ["rollback/undo_gitops.sh"]
|
|
},
|
|
"editor": ["40_editor_setup.sh"],
|
|
"verify": ["90_verify.sh"],
|
|
"report": ["99_report.sh"]
|
|
},
|
|
"checks": {
|
|
"identity": ["check_gpg.sh", "check_ssh.sh"],
|
|
"secrets": ["check_pass.sh"],
|
|
"tunnel": ["check_tunnel.sh"],
|
|
"gitops": ["check_gitops.sh"]
|
|
},
|
|
"rollback_order": [
|
|
"undo_tunnel.sh",
|
|
"undo_gitops.sh",
|
|
"undo_ssh_config.sh",
|
|
"undo_identity.sh"
|
|
],
|
|
"eu_compliance": {
|
|
"data_residency": "EU",
|
|
"jurisdiction": "Ireland",
|
|
"gdpr_applicable": true
|
|
}
|
|
}
|