Berwn fcd8e55024 Add untagged access ports and a staging uplink for gw-cnx-1 ...

New cnx.router.accessPorts option pins a port untagged to one VLAN via
bridge PVID/EgressUntagged; convention is the last copper port as an
always-available mgmt recovery port. gw-cnx-1 port roles: enp1s0 WAN,
enp2s0 trunk, enp3s0 temporary DHCP uplink into the old OPNsense LAN
(back to trunk at cutover), enp4s0 untagged mgmt.

2026-07-31 12:57:34 +07:00

docs

Add untagged access ports and a staging uplink for gw-cnx-1

2026-07-31 12:57:34 +07:00

machines

Add untagged access ports and a staging uplink for gw-cnx-1

2026-07-31 12:57:34 +07:00

modules

Add untagged access ports and a staging uplink for gw-cnx-1

2026-07-31 12:57:34 +07:00

sops

secrets: add group admins to secret gw-cnx-1-age.key

2026-07-31 10:09:08 +07:00

vars

vars: update via generator dns-acme-gw-cnx-1-knot (machine: ns1)

2026-07-31 10:09:08 +07:00

.envrc

Initial commit

2026-06-14 12:11:16 +07:00

.gitignore

.gitignore

2026-07-31 09:38:57 +07:00

clan.nix

Migrate deprecated admin service to sshd + users

2026-07-28 17:17:56 +07:00

flake.lock

Update flake inputs (clan-core 2026-07-08, nixos-mailserver, treefmt-nix)

2026-07-28 17:11:00 +07:00

flake.nix

devshell: run multi-machine clan updates sequentially

2026-07-28 17:06:11 +07:00

fmt.nix

Add declarative SNM mail stack on mx1 with DNS-01, DANE, MTA-STS

2026-06-18 14:47:20 +07:00

inventory.json

update(inventory.json): Installed web01

2026-06-21 02:28:43 +07:00

TODO.md

Add VictoriaLogs for centralized journald across all hosts

2026-06-17 16:53:52 +07:00

S

Description

No description provided

839 KiB

Languages

Nix 100%