Berwn 9c8a2abf3f Bind VictoriaLogs on IPv6 so the mesh can ship journald to it ...

VictoriaLogs, like the VM scraper, is IPv4-only by default: ":9428" binds
0.0.0.0 only, so ns1/ns2 pushing journald over the IPv6 mesh got "connection
refused" while control's own loopback (v4) upload worked. Add -enableTCP6 so it
binds [::] (dual-stack), matching the flag already used for the scraper.

Also simplify the systemd-journal-upload override to just startLimitIntervalSec=0
(retry forever / self-heal) and drop the SuccessExitStatus masking: a persistent
sink failure should stay loud rather than be hidden behind a green deploy.

2026-06-17 17:27:56 +07:00

docs

Bind VictoriaLogs on IPv6 so the mesh can ship journald to it

2026-06-17 17:27:56 +07:00

machines

Add blackbox exporter for outside-in DNS probes

2026-06-17 15:37:45 +07:00

modules

Bind VictoriaLogs on IPv6 so the mesh can ship journald to it

2026-06-17 17:27:56 +07:00

sops

Remove key(s) for user berwn from secrets

2026-06-17 10:29:23 +07:00

vars

Update vars via generator borgbackup for machine ns1

2026-06-17 15:07:13 +07:00

.envrc

Initial commit

2026-06-14 12:11:16 +07:00

.gitignore

Initial commit

2026-06-14 12:11:16 +07:00

clan.nix

Back up Knot DNSSEC keystore from ns1 to control via borgbackup

2026-06-17 15:06:58 +07:00

flake.lock

Add treefmt formatter (nix fmt + flake check gate)

2026-06-16 16:53:00 +07:00

flake.nix

Format tree with treefmt

2026-06-16 16:53:00 +07:00

fmt.nix

Add treefmt formatter (nix fmt + flake check gate)

2026-06-16 16:53:00 +07:00

inventory.json

update(inventory.json): Installed ns2

2026-06-14 13:34:17 +07:00

TODO.md

Add VictoriaLogs for centralized journald across all hosts

2026-06-17 16:53:52 +07:00

S

Description

No description provided

550 KiB

Languages

Nix 100%