kurogeek 4c589b8d0c router: allow SSH on the staging port ...

The staging uplink is in no VLAN zone and was fully default-deny; admit
TCP 22 on it so the box is reachable from the old LAN before the mgmt
VLAN or the mesh are up. Everything else on the port stays closed.

2026-09-16 08:30:14 +00:00

docs

router: stagingPort option, move gw-cnx-1 staging uplink into it

2026-09-16 08:30:14 +00:00

machines

router: stagingPort option, move gw-cnx-1 staging uplink into it

2026-09-16 08:30:14 +00:00

modules

router: allow SSH on the staging port

2026-09-16 08:30:14 +00:00

sops

secrets: add group admins to secret gw-cnx-1-age.key

2026-07-31 10:09:08 +07:00

vars

vars: update via generator dns-acme-gw-cnx-1-knot (machine: ns1)

2026-07-31 10:09:08 +07:00

.envrc

Initial commit

2026-06-14 12:11:16 +07:00

.gitignore

.gitignore

2026-07-31 09:38:57 +07:00

clan.nix

inventory.nix: router instance for gw-cnx-1

2026-09-10 03:35:37 +00:00

flake.lock

flake: use flake-parts

2026-08-05 10:19:32 +07:00

flake.nix

mob next [ci-skip] [ci skip] [skip ci]

2026-09-09 13:43:46 +07:00

fmt.nix

Add declarative SNM mail stack on mx1 with DNS-01, DANE, MTA-STS

2026-06-18 14:47:20 +07:00

inventory.json

inventory.json: update install time of gw-cnx-1

2026-07-31 17:37:47 +07:00

inventory.nix

router: stagingPort option, move gw-cnx-1 staging uplink into it

2026-09-16 08:30:14 +00:00

TODO.md

Add VictoriaLogs for centralized journald across all hosts

2026-06-17 16:53:52 +07:00

S

Description

No description provided

1.1 MiB

Languages

Nix 100%