Berwn b11ff75ca6 Add internal reverse proxy for gateways (Caddy, wildcard via DNS-01) ...

cnx.router.proxy serves <service>.<site><n>.cnx.network with a real Let's
Encrypt wildcard obtained via a gateway-scoped TSIG key against ns1; Blocky
resolves the names to the router's LAN address, so they exist only
internally. First user: Omada UI on gw-cnx-1 (omada.cnx1.cnx.network).

2026-07-31 10:09:08 +07:00

docs

Add internal reverse proxy for gateways (Caddy, wildcard via DNS-01)

2026-07-31 10:09:08 +07:00

machines

Add internal reverse proxy for gateways (Caddy, wildcard via DNS-01)

2026-07-31 10:09:08 +07:00

modules

Add internal reverse proxy for gateways (Caddy, wildcard via DNS-01)

2026-07-31 10:09:08 +07:00

sops

secrets: add group admins to secret gw-cnx-1-age.key

2026-07-31 10:09:08 +07:00

vars

vars: update via generator dns-acme-gw-cnx-1-knot (machine: ns1)

2026-07-31 10:09:08 +07:00

.envrc

Initial commit

2026-06-14 12:11:16 +07:00

.gitignore

.gitignore

2026-07-31 09:38:57 +07:00

clan.nix

Migrate deprecated admin service to sshd + users

2026-07-28 17:17:56 +07:00

flake.lock

Update flake inputs (clan-core 2026-07-08, nixos-mailserver, treefmt-nix)

2026-07-28 17:11:00 +07:00

flake.nix

devshell: run multi-machine clan updates sequentially

2026-07-28 17:06:11 +07:00

fmt.nix

Add declarative SNM mail stack on mx1 with DNS-01, DANE, MTA-STS

2026-06-18 14:47:20 +07:00

inventory.json

update(inventory.json): Installed web01

2026-06-21 02:28:43 +07:00

TODO.md

Add VictoriaLogs for centralized journald across all hosts

2026-06-17 16:53:52 +07:00

S

Description

No description provided

839 KiB

Languages

Nix 100%