tree 8d483998903ae47cf7e9467829071bbb8c5329a0
parent 208f0058304f5c7a01d239d5bc58a78363982d6d
author Sergiusz Bazanski <q3k@q3k.org> 1554588383 +0200
committer Sergiusz Bazanski <q3k@q3k.org> 1554588383 +0200

*: rejigger tls certs and more

This pretty large change does the following:

 - moves nix from bootstrap.hswaw.net to nix/
 - changes clustercfg to use cfssl and moves it to cluster/clustercfg
 - changes clustercfg to source information about target location of
   certs from nix
 - changes clustercfg to push nix config
 - changes tls certs to have more than one CA
 - recalculates all TLS certs
   (it keeps the old serviceaccoutns key, otherwise we end up with
   invalid serviceaccounts - the cert doesn't match, but who cares,
   it's not used anyway)