chore: Post-workshop state - January 23rd, 2026
This commit captures the infrastructure state immediately following
the "Post-Tyranny Tech" workshop on January 23rd, 2026.
Infrastructure Status:
- 13 client servers deployed (white, valk, zwaan, specht, das, uil, vos,
haas, wolf, ree, mees, mus, mol, kikker)
- Services: Authentik SSO, Nextcloud, Collabora Office, Traefik
- Private network architecture with edge NAT gateway
- OIDC integration between Authentik and Nextcloud
- Automated recovery flows and invitation system
- Container update monitoring with Diun
- Uptime monitoring with Uptime Kuma
Changes include:
- Multiple new client host configurations
- Network architecture improvements (private IPs + NAT)
- DNS management automation
- Container update notifications
- Email configuration via Mailgun
- SSH key generation for all clients
- Encrypted secrets for all deployments
- Health check and diagnostic scripts
Known Issues to Address:
- Nextcloud version pinned to v30 (should use 'latest' or v32)
- Zitadel references in templates (migrated to Authentik but templates not updated)
- Traefik dynamic config has obsolete static routes
🤖 Generated with Claude Code (https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
2026-01-23 20:36:31 +01:00
|
|
|
---
|
|
|
|
|
# kikker server - direct public IP
|
|
|
|
|
|
|
|
|
|
# SSH directly to public IP
|
|
|
|
|
ansible_host: 23.88.124.67
|
|
|
|
|
|
|
|
|
|
# Client identification
|
|
|
|
|
client_name: kikker
|
|
|
|
|
client_domain: kikker.vrije.cloud
|
|
|
|
|
client_secrets_file: kikker.sops.yaml
|
2026-01-23 21:13:49 +01:00
|
|
|
|
2026-01-23 21:36:30 +01:00
|
|
|
# Diun configuration - Use webhook to Matrix instead of email
|
|
|
|
|
diun_notif_enabled: true
|
|
|
|
|
diun_notif_type: webhook
|
|
|
|
|
diun_webhook_endpoint: "https://diun-webhook.postxsociety.cloud"
|
|
|
|
|
diun_webhook_method: POST
|
|
|
|
|
diun_webhook_headers:
|
|
|
|
|
Content-Type: application/json
|
2026-01-23 21:13:49 +01:00
|
|
|
diun_email_enabled: false
|