Berwn 807785cdab Add authoritative DNS on ns1/ns2 and finalize clan config ...

- Knot authoritative DNS: ns1 primary, ns2 secondary serving cnx.network,
  buildfor.life and cnx.email over TSIG-secured zone transfer (modules/dns)
- Knot listens publicly + over ZeroTier; firewall opens port 53
- Complete clan inventory: name/domain, admin SSH key, control as the
  zerotier controller, tor on all nixos machines
- Enable age yubikey/fido2-hmac secret plugins

2026-06-14 13:24:23 +07:00

..

control

Set disk schema of machine: control to single-disk

2026-06-14 12:29:39 +07:00

ns1

Add authoritative DNS on ns1/ns2 and finalize clan config

2026-06-14 13:24:23 +07:00

ns2

Add authoritative DNS on ns1/ns2 and finalize clan config

2026-06-14 13:24:23 +07:00