Infrastructure as Code

Graham McIntire 02df6fbbc6 resolvers: serve DoH via Caddy, add IPv6 records and PQ SSH ... - unbound: add loopback DoH listener (127.0.0.1@8080, http-notls-downstream); interface-automatic-ports lists 8080 so interface-automatic does not silently drop the non-53 listener; access-control driven by resolver_allowed_netblocks - caddy: add RedHat/COPR install path, caddy_template var, /var/log/caddy dir; new Caddyfile-resolver.j2 terminates LE TLS and h2c-proxies to unbound, enforcing the client allow-list via remote_ip - resolvers: open 80/443 in firewall; prefer post-quantum SSH key exchange (sntrup761x25519-sha512) via validated sshd_config.d drop-in - bind9: zone.j2 emits AAAA records; add ipv6 for resolver1/2 (2606:1c80::240/250) - playbook: run caddy role on the resolvers group		2026-05-14 10:10:46 -05:00
ansible	resolvers: serve DoH via Caddy, add IPv6 records and PQ SSH	2026-05-14 10:10:46 -05:00
cluster	update	2026-03-26 17:53:51 -05:00
home/cluster	promtail: drop namespace.yaml (owned by node-exporter app)	2026-05-11 10:28:01 -05:00
old/cluster	update and remove dns from tf	2026-01-10 16:00:02 -06:00
talos	change	2026-04-20 13:00:52 -05:00
tofu	updates	2026-05-04 16:59:31 -05:00
.gitignore	update gitignore and docs for local tofu state	2026-02-17 14:31:33 -06:00
CLAUDE.md	migrate from flux to argocd	2026-04-29 10:26:33 -05:00
talosconfig	fix vntx cnames	2026-01-16 09:25:46 -06:00