292758900e
Add hi (74.50.113.232) with Forgejo + Caddy, bootstrapped support.vntx.net
...
- DNS: hi.mcintire.me A/AAAA, git.mcintire.me A/AAAA updated to new host
- forgejo role: Docker Compose deployment with SQLite, INSTALL_LOCK, admin user creation
- Caddyfile-hi.j2: reverse proxy git.mcintire.me -> localhost:3000
- tailscale role: skip connect when no auth key; dynamic repo suite
- debian role: fix Signed-By for debian.sources on trixie
- curl added to base Debian packages
- support.vntx.net: added to vntx_servers, DNS, host_vars
2026-07-24 13:12:33 -05:00
Graham McInitre
d644868602
Migrate mcintire.me DNS from self-hosted BIND9 to Cloudflare
...
- Add mcintire.me zone + all 14 DNS records to tofu/cloudflare.tf (A, MX, CNAME, SRV, TXT)
- Include zone settings, HSTS, bot management, firewall for mcintire.me
- Update Porkbun NS from as393837_ns to cloudflare_ns in tofu/dns.tf
- Remove mcintire.me zone from BIND9 master config (group_vars/bind9_servers/)
- Delete mcintire.me.yml zone file
- Remove mcintire.me secondary zone from git.mcintire.me host_vars
2026-07-24 09:14:36 -05:00
55451fe285
cleanup resolvers
2026-06-22 16:11:33 -05:00
c85be1d56c
flatcar resolvers
2026-06-22 15:52:51 -05:00
d632095eb2
cloudflare: disable managed robots.txt; fix v5 config bugs
...
- Add cloudflare_bot_management for all zones with is_robots_txt_managed=false
so each app's own robots.txt is served instead of Cloudflare's managed one
- Fix zone_setting id zero_rtt -> 0rtt (invalid id rejected by API)
- Fix security_header value: object instead of jsonencode (avoids perpetual diff)
- Fix firewall expression http.request.user_agent -> http.user_agent (invalid field)
- tofu fmt reindentation
2026-06-04 17:41:45 -05:00
78d0ae179d
fix: resolve talos config issues, Cloudflare v5 migration, and security cleanup
...
- Remove sensitive files from git tracking (kubeconfig, secrets.yaml.backup,
talosconfig.backup) and update .gitignore
- Fix installer version drift: v1.12.4 -> v1.12.6 across all talos configs
- Fix grubUseUKICmdline + extraKernelArgs conflict on CP configs
- Remove tailscale extension from stock installer CP configs (won't work)
- Add nameservers to controlplane and per-node configs
- Add time servers to all per-node worker configs
- Fix HostnameConfig auto: stable in base templates
- Clean up doc drift (README.md, CLAUDE.md) for worker count and storage
- Remove all Longhorn references (worker configs, documentation)
- Migrate Cloudflare provider v4 -> v5 with full resource refactoring:
cloudflare_record -> cloudflare_dns_record,
zone_settings_override -> zone_setting,
block -> attribute syntax for rulesets, data, and tunnel configs
- Fix firewall expression (not http.user_agent ne '' -> not exists)
2026-06-04 14:58:09 -05:00
38638e1134
update
2026-06-01 10:53:23 -05:00
36b5e087b3
updates
2026-05-04 16:59:31 -05:00
fea69f8a51
updates
2026-04-29 15:03:17 -05:00
ae5ceebf44
migrate from flux to argocd
...
- install argocd at home/cluster/argocd/, app-of-apps via root-app.yaml
- 4 child Applications: aprs, gridmap, prop, towerops
- argo.w5isp.com via cloudflared tunnel (CNAME + ingress_rule in tofu)
- update CLAUDE.md: drop K3s/Wavelog/n8n/Node-RED, document GitOps + ArgoCD
2026-04-29 10:26:33 -05:00
c3ae90aff0
dns updates
2026-04-27 12:43:08 -05:00
841fab5abe
update
2026-04-21 12:40:18 -05:00
925d37f3b8
update
2026-04-16 10:07:37 -05:00
36ab4bde73
update w5isp.com
2026-04-12 13:56:17 -05:00
35f66d0408
update
2026-04-06 09:39:03 -05:00
fc934290b8
update
2026-04-03 15:52:40 -05:00
5ba93d2866
move w5isp.com to cloudflare
2026-04-02 09:22:20 -05:00
baa50efccf
update
2026-03-26 17:53:51 -05:00
47158aa771
update to reflect 380 prod
2026-03-10 10:05:17 -05:00
231c9744aa
update some dns and cloudflare
2026-02-25 13:24:10 -06:00
ee5d485808
add cloudflare
2026-02-18 12:55:34 -06:00
