78d0ae179d
fix: resolve talos config issues, Cloudflare v5 migration, and security cleanup
...
- Remove sensitive files from git tracking (kubeconfig, secrets.yaml.backup,
talosconfig.backup) and update .gitignore
- Fix installer version drift: v1.12.4 -> v1.12.6 across all talos configs
- Fix grubUseUKICmdline + extraKernelArgs conflict on CP configs
- Remove tailscale extension from stock installer CP configs (won't work)
- Add nameservers to controlplane and per-node configs
- Add time servers to all per-node worker configs
- Fix HostnameConfig auto: stable in base templates
- Clean up doc drift (README.md, CLAUDE.md) for worker count and storage
- Remove all Longhorn references (worker configs, documentation)
- Migrate Cloudflare provider v4 -> v5 with full resource refactoring:
cloudflare_record -> cloudflare_dns_record,
zone_settings_override -> zone_setting,
block -> attribute syntax for rulesets, data, and tunnel configs
- Fix firewall expression (not http.user_agent ne '' -> not exists)
2026-06-04 14:58:09 -05:00
9b73f436d8
tofu: remove state from tracking, add gitignore, upgrade providers
...
- Stop tracking terraform.tfstate (git rm --cached)
- Add tofu/.gitignore with tfstate, plan, and IDE patterns
- Upgrade Porkbun provider 1.3.1 -> 1.3.3
- Upgrade Cloudflare provider 4.52.5 -> 4.52.7
- Add audit findings.md with 33 issues identified
- Clean up local backup files
2026-06-04 14:48:54 -05:00
928eba54e0
clean up tofu: porkbun-only, update aprs.me NS to cloudflare
...
- Remove proxmox/talos/null providers and variables
- Remove HTTP backend, use local state
- Remove skookum.me, towerops.net, vntx.net, as393837.net from DNS
- Switch aprs.me NS to Cloudflare
2026-02-17 13:07:04 -06:00