b6c9fa666d
This commit captures the infrastructure state immediately following the "Post-Tyranny Tech" workshop on January 23rd, 2026. Infrastructure Status: - 13 client servers deployed (white, valk, zwaan, specht, das, uil, vos, haas, wolf, ree, mees, mus, mol, kikker) - Services: Authentik SSO, Nextcloud, Collabora Office, Traefik - Private network architecture with edge NAT gateway - OIDC integration between Authentik and Nextcloud - Automated recovery flows and invitation system - Container update monitoring with Diun - Uptime monitoring with Uptime Kuma Changes include: - Multiple new client host configurations - Network architecture improvements (private IPs + NAT) - DNS management automation - Container update notifications - Email configuration via Mailgun - SSH key generation for all clients - Encrypted secrets for all deployments - Health check and diagnostic scripts Known Issues to Address: - Nextcloud version pinned to v30 (should use 'latest' or v32) - Zitadel references in templates (migrated to Authentik but templates not updated) - Traefik dynamic config has obsolete static routes 🤖 Generated with Claude Code (https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
29 lines
719 B
YAML
29 lines
719 B
YAML
#cloud-config
|
|
package_update: true
|
|
package_upgrade: true
|
|
packages:
|
|
- curl
|
|
- wget
|
|
- git
|
|
- python3
|
|
- python3-pip
|
|
runcmd:
|
|
- hostnamectl set-hostname ${hostname}
|
|
- |
|
|
# Configure default route for private-only server
|
|
# Hetzner network route forwards traffic to edge gateway (10.0.0.2)
|
|
# Enable DHCP to get IP from Hetzner Cloud private network
|
|
cat > /etc/netplan/60-private-network.yaml <<'NETPLAN'
|
|
network:
|
|
version: 2
|
|
ethernets:
|
|
enp7s0:
|
|
dhcp4: true
|
|
dhcp4-overrides:
|
|
use-routes: false
|
|
routes:
|
|
- to: default
|
|
via: 10.0.0.1
|
|
NETPLAN
|
|
chmod 600 /etc/netplan/60-private-network.yaml
|
|
netplan apply
|