4 Commits

Author	SHA1	Message	Date
Berwn	5864054b00	Move Hetzner firewall rules into a separate data file ... Extract the per-firewall rule data out of control's configuration into modules/hetzner-firewall-rules.nix, imported like the DNS domains list. The evaluated rules are unchanged.	2026-06-14 15:49:00 +07:00
Berwn	344f432640	Add Hetzner Cloud firewall auto-sync from clan config ... control runs a oneshot on each deploy that creates each firewall if missing and replaces its rules via the Hetzner API set_rules action, using a Read/Write token stored as a clan secret. Public SSH is not exposed; admin access rides the ZeroTier mesh, with emergency-access as the console fallback.	2026-06-14 15:40:05 +07:00
Berwn	306a2cf61e	Set per-machine timezones and enable NTP ... control and ns2 use UTC+3 (Etc/GMT-3), ns1 uses UTC+1 (Etc/GMT-1) — fixed offsets, no DST. Make systemd-timesyncd explicit on all three.	2026-06-14 15:02:34 +07:00
Berwn	a86525d37c	Add machine control	2026-06-14 12:14:07 +07:00