mw
5a714e6256
Baby-step plan for hardware-backed OpenPGP commit/tag signing on YubiKey 5 NFC #30836069 (air-gapped keygen, ed25519/cv25519 subkeys, 2y expiry, touch required). LUKS-encrypted recovery backup on the Type-C USB stick; non-secret config to be folded into ansible/. HTTPS+GPG-sign (lowest risk); 2nd YubiKey scheduled as Phase 9 follow-up.
description, tags, last_updated
| description | tags | last_updated | |||||
|---|---|---|---|---|---|---|---|
| Infrastructure-as-Code and maintenance repository for Michael Wegener's primary workstation at satware AG (Pfeddersheim location). |
|
2026-06-17 |
saTway® Infrastructure - mw-pfeddersheim-workstation
This repository manages the configuration, software stack, and maintenance scripts for Michael Wegener's primary workstation. It ensures a reproducible, secure, and optimized environment following satware AG best practices.
🚀 Quick Start
To apply the current configuration or run maintenance:
# 1. Verify configuration with a dry run
ansible-playbook ansible/workstation.yml --check
# 2. Apply configuration locally
ansible-playbook ansible/workstation.yml
# 3. Run automated maintenance
bash scripts/maintenance.sh
# 4. Run daily routine (Morning/EOD)
bash scripts/daily-routine.sh morning-full
bash scripts/daily-routine.sh eod
📂 Project Structure
| Directory | Purpose |
|---|---|
ansible/ |
Configuration-as-Code (Roles: system-upgrade, common, dev-tools, maintenance, fonts, pdf, hyprland, greetd) |
config/ |
System configuration templates (.j2) |
docs/ |
PARA-structured documentation (product, adr, learnings, tech, workflows, plans) |
scripts/ |
Maintenance and automation scripts |
🛠 Software Stack
- Languages: Node.js 25.6.1, Python 3.14.3, PHP 8.5.3 (CLI)
- Automation: Ansible, Docker
- Desktop: Hyprland (Wayland), greetd + tuigreet, Waybar, Kitty
- Kernel: linux618 (LTS fallback) + linux70 (daily driver)
- NVIDIA: 580xx branch (Pascal/GT 1050 Ti)
- Environment: Manjaro/Arch Linux, Bash
📜 Core Principles
- Baby Steps™: All changes are small, atomic, and verifiable.
- Spec-Driven Development: Intent-first development with explicit documentation.
- Zero-Trust: Secrets are managed via
ansible-vaultor environment variables; never committed raw.
📄 Documentation
Comprehensive documentation is available in the docs/ directory:
© 2026 satware AG. All rights reserved.