mw 5a714e6256 docs(plans): add YubiKey+GPG GitHub commit-signing plan ...

Baby-step plan for hardware-backed OpenPGP commit/tag signing on YubiKey 5
NFC #30836069 (air-gapped keygen, ed25519/cv25519 subkeys, 2y expiry, touch
required). LUKS-encrypted recovery backup on the Type-C USB stick; non-secret
config to be folded into ansible/. HTTPS+GPG-sign (lowest risk); 2nd YubiKey
scheduled as Phase 9 follow-up.

2026-06-24 16:54:08 +02:00

..

2026-02-27-initial-setup-plan.md

docs: align with satware AG best practices

2026-03-09 11:02:17 +01:00

2026-02-27-next-steps.md

docs: align with satware AG best practices

2026-03-09 11:02:17 +01:00

2026-03-09-next-steps.md

docs: add next session tasks for 2026-03-09

2026-03-09 11:02:35 +01:00

2026-06-24-yubikey-gpg-github-signing.md

docs(plans): add YubiKey+GPG GitHub commit-signing plan

2026-06-24 16:54:08 +02:00

NEXT_STEPS.md

migrate secrets management from KWallet to gnome-keyring + Bitwarden

2026-05-21 12:58:38 +02:00