55451fe285
cleanup resolvers
2026-06-22 16:11:33 -05:00
6488494d1b
add ipv6 addresses to resolvers
2026-06-22 16:01:49 -05:00
c85be1d56c
flatcar resolvers
2026-06-22 15:52:51 -05:00
d6cf15165a
restore UISP server + caddy frontend, fix SSH host key regeneration, add tofu proxmox provider
2026-06-21 19:06:33 -05:00
d632095eb2
cloudflare: disable managed robots.txt; fix v5 config bugs
...
- Add cloudflare_bot_management for all zones with is_robots_txt_managed=false
so each app's own robots.txt is served instead of Cloudflare's managed one
- Fix zone_setting id zero_rtt -> 0rtt (invalid id rejected by API)
- Fix security_header value: object instead of jsonencode (avoids perpetual diff)
- Fix firewall expression http.request.user_agent -> http.user_agent (invalid field)
- tofu fmt reindentation
2026-06-04 17:41:45 -05:00
b282921e22
upgrade: Talos v1.13.3, K8s v1.36.1, Cloudflare v5
...
- Bump talos configs: installer:v1.12.6 -> v1.13.3, kubelet + K8s
components v1.35.0 -> v1.36.1 across all configs
- Update documentation version references (CLAUDE.md, README.md)
- Fix Cloudflare main.tf constraint to ~> 5.0 (was accidentally reverted)
- Copy talosconfig to ~/.talos/config for default CLI use
- Live nodes upgraded: 3 CP + 4 workers, then K8s upgrade completed
2026-06-04 15:23:13 -05:00
78d0ae179d
fix: resolve talos config issues, Cloudflare v5 migration, and security cleanup
...
- Remove sensitive files from git tracking (kubeconfig, secrets.yaml.backup,
talosconfig.backup) and update .gitignore
- Fix installer version drift: v1.12.4 -> v1.12.6 across all talos configs
- Fix grubUseUKICmdline + extraKernelArgs conflict on CP configs
- Remove tailscale extension from stock installer CP configs (won't work)
- Add nameservers to controlplane and per-node configs
- Add time servers to all per-node worker configs
- Fix HostnameConfig auto: stable in base templates
- Clean up doc drift (README.md, CLAUDE.md) for worker count and storage
- Remove all Longhorn references (worker configs, documentation)
- Migrate Cloudflare provider v4 -> v5 with full resource refactoring:
cloudflare_record -> cloudflare_dns_record,
zone_settings_override -> zone_setting,
block -> attribute syntax for rulesets, data, and tunnel configs
- Fix firewall expression (not http.user_agent ne '' -> not exists)
2026-06-04 14:58:09 -05:00
9b73f436d8
tofu: remove state from tracking, add gitignore, upgrade providers
...
- Stop tracking terraform.tfstate (git rm --cached)
- Add tofu/.gitignore with tfstate, plan, and IDE patterns
- Upgrade Porkbun provider 1.3.1 -> 1.3.3
- Upgrade Cloudflare provider 4.52.5 -> 4.52.7
- Add audit findings.md with 33 issues identified
- Clean up local backup files
2026-06-04 14:48:54 -05:00
38638e1134
update
2026-06-01 10:53:23 -05:00
36b5e087b3
updates
2026-05-04 16:59:31 -05:00
fea69f8a51
updates
2026-04-29 15:03:17 -05:00
ae5ceebf44
migrate from flux to argocd
...
- install argocd at home/cluster/argocd/, app-of-apps via root-app.yaml
- 4 child Applications: aprs, gridmap, prop, towerops
- argo.w5isp.com via cloudflared tunnel (CNAME + ingress_rule in tofu)
- update CLAUDE.md: drop K3s/Wavelog/n8n/Node-RED, document GitOps + ArgoCD
2026-04-29 10:26:33 -05:00
c3ae90aff0
dns updates
2026-04-27 12:43:08 -05:00
841fab5abe
update
2026-04-21 12:40:18 -05:00
925d37f3b8
update
2026-04-16 10:07:37 -05:00
36ab4bde73
update w5isp.com
2026-04-12 13:56:17 -05:00
35f66d0408
update
2026-04-06 09:39:03 -05:00
fc934290b8
update
2026-04-03 15:52:40 -05:00
ea091c68c9
fix w5isp.com ns
2026-04-02 09:37:07 -05:00
5ba93d2866
move w5isp.com to cloudflare
2026-04-02 09:22:20 -05:00
baa50efccf
update
2026-03-26 17:53:51 -05:00
fb6d00b84d
updates
2026-03-16 17:40:30 -05:00
47158aa771
update to reflect 380 prod
2026-03-10 10:05:17 -05:00
231c9744aa
update some dns and cloudflare
2026-02-25 13:24:10 -06:00
34aece2126
update
2026-02-19 09:35:52 -06:00
ee5d485808
add cloudflare
2026-02-18 12:55:34 -06:00
98d07b99e2
track tofu state locally in repo
2026-02-17 14:15:57 -06:00
928eba54e0
clean up tofu: porkbun-only, update aprs.me NS to cloudflare
...
- Remove proxmox/talos/null providers and variables
- Remove HTTP backend, use local state
- Remove skookum.me, towerops.net, vntx.net, as393837.net from DNS
- Switch aprs.me NS to Cloudflare
2026-02-17 13:07:04 -06:00
bed3526470
move terraform to tofu, add porkbun domain NS management
...
- Rename terraform/ to tofu/
- Add marcfrederick/porkbun provider for registrar NS management
- Add dns.tf with all 14 Porkbun domains and import blocks
- Update gridmap.org BIND9 zone NS to Cloudflare
- Update CLAUDE.md to reflect new directory structure
2026-02-17 12:49:26 -06:00
