B4L/cnx-network-clan
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
36 Commits 1 Branch 0 Tags
807785cdab63e2511828d91713e13997c14578c3
T
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Berwn 807785cdab Add authoritative DNS on ns1/ns2 and finalize clan config 
- Knot authoritative DNS: ns1 primary, ns2 secondary serving cnx.network,
  buildfor.life and cnx.email over TSIG-secured zone transfer (modules/dns)
- Knot listens publicly + over ZeroTier; firewall opens port 53
- Complete clan inventory: name/domain, admin SSH key, control as the
  zerotier controller, tor on all nixos machines
- Enable age yubikey/fido2-hmac secret plugins
2026-06-14 13:24:23 +07:00
machines
Add authoritative DNS on ns1/ns2 and finalize clan config
2026-06-14 13:24:23 +07:00
modules
Add authoritative DNS on ns1/ns2 and finalize clan config
2026-06-14 13:24:23 +07:00
sops
Add machine ns2 to secrets
2026-06-14 12:20:27 +07:00
vars
Add ns2 to secret vars/shared/dns-tsig/tsig.conf
2026-06-14 13:22:43 +07:00
.envrc
Initial commit
2026-06-14 12:11:16 +07:00
.gitignore
Initial commit
2026-06-14 12:11:16 +07:00
clan.nix
Add authoritative DNS on ns1/ns2 and finalize clan config
2026-06-14 13:24:23 +07:00
flake.lock
Initial commit
2026-06-14 12:11:16 +07:00
flake.nix
Add authoritative DNS on ns1/ns2 and finalize clan config
2026-06-14 13:24:23 +07:00
inventory.json
update(inventory.json): Installed control
2026-06-14 12:36:24 +07:00
S
Description
No description provided
550 KiB
Languages
Nix 100%