Add some more infrastructure ideas

README.md

@@ -69,6 +69,8 @@ Name | Status | Blog Entries
 [Backup Emails](./projects/infrastructure/backup-emails.md) | - | -
 [Try sccache](./projects/infrastructure/sccache.md) | - | -
 [IPv4 for Streaming](./projects/infrastructure/ipv4-streaming.md) | - | -
+[Vault Agents](./projects/infrastructure/vault-agents.md) | - | -
+[VMs in Nomad](./projects/infrastructure/vms-in-nomad.md) | - | -
 
 ## Theory Projects
 Name | Status | Blog Entries

projects/infrastructure/vault-agents.md

@@ -0,0 +1,4 @@
+# Vault Agents
+I want to use vault agents on my bare metal server to manage most of my secrets that are required for other services (for example consul ACL tokens).
+The main open questions are around authenication and permissions, because I want to lock their permissions down as much as possible.
+I also want to set this up such that I can easily use this when I need to deploy new things that require secrets from vault.

projects/infrastructure/vms-in-nomad.md

@@ -0,0 +1,7 @@
+# VMs in Nomad
+I want to play around with the beta libvirt task driver for nomad to run some VMs.
+As a first proving ground for this, I would try to run the gitea runners in a VM, because that allows me to more easily configure them without actually giving them access to the underlying host machine.
+
+## References
+- [Virt Dirver Docs](https://developer.hashicorp.com/nomad/plugins/drivers/virt)
+- [Virt Driver GitHub](https://github.com/hashicorp/nomad-driver-virt)