feat: port legacy TSYS-CA (admin-code PKI + tsys-bits) [#769][#783]

Excluded admin-code/*SECRETS.inc (real Nitrokey HSM PINs in the public source repo) — SECRETS.inc.example template added in their place. Rotation/history-purge ruling pending in #783. legacy-* trees exempt from lint/pointer checks (historical verbatim code). https://projects.knownelement.com/issues/769#note-4152
2026-09-04 07:01:46 -05:00
parent 2eca50490d
commit af7c0f3478
29 changed files with 738 additions and 3 deletions
@@ -0,0 +1,6 @@
+#!/bin/bash
+# TEMPLATE ONLY — real values lived in *SECRETS.inc which were EXCLUDED from
+# this port after a secret-scan (Nitrokey SO PIN + USER PIN; see #783).
+# Populate at deploy time from ~/.creds or the secrets store — never commit.
+export SECRET_SOPIN=""
+export SECRET_USER_PIN=""