Alexander Grabowski

grabowski pushed to main at B4L/cnx-network-clan

2026-06-18 14:47:26 +07:00

1cb6f39ea2 Add declarative SNM mail stack on mx1 with DNS-01, DANE, MTA-STS

026a26dd53 Add ns1 to secret vars/shared/dns-acme-mx1-secret/secret

7e5d50b260 Update vars via generator dns-acme-mx1-knot for machine ns1

312de984c1 Update vars via generator dns-acme-rfc2136 for machine mx1

d76aa8cc8d Update vars via generator mail-passwd-postmaster-at-cnx-email for machine mx1

Compare 6 commits »

grabowski pushed to main at B4L/cnx-network-clan

2026-06-18 12:24:40 +07:00

d1b24017aa Use no-store for docs: epoch mtimes make revalidation serve stale

grabowski pushed to main at B4L/cnx-network-clan

2026-06-18 12:19:45 +07:00

77a18df257 Stop browsers serving stale docs by forcing revalidation

grabowski pushed to main at B4L/cnx-network-clan

2026-06-18 12:12:18 +07:00

a4fe2a7b3a Document how to pull registrar DS records from Knot on ns1

grabowski pushed to main at B4L/cnx-network-clan

2026-06-18 11:53:20 +07:00

6e4178df04 Onboard mx1 mail host and factor out per-host public IPs

2c89ab913c update(inventory.json): Installed mx1

84c3eece58 Update vars via generator zerotier for machine mx1

7f5227d2e2 Update vars via generator tor_tor for machine mx1

ebf4efe5c9 Update vars via generator state-version for machine mx1

Compare 13 commits »

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 17:28:01 +07:00

9c8a2abf3f Bind VictoriaLogs on IPv6 so the mesh can ship journald to it

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 17:09:38 +07:00

0eb883061b Keep systemd-journal-upload retrying instead of failing a deploy

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 16:53:56 +07:00

d4a171640b Add VictoriaLogs for centralized journald across all hosts

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 15:42:14 +07:00

c7b0f206c8 Alert on and chart blackbox DNS probe failures

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 15:37:47 +07:00

54f607d063 Add blackbox exporter for outside-in DNS probes

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 15:17:13 +07:00

0544bf95e5 Add vmalert rules for failed and stale backups

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 15:13:48 +07:00

1ea5bda23f Add CNX Backups dashboard and document the backup setup

ed746b58c3 Update vars via generator borgbackup for machine ns1

Compare 2 commits »

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 15:07:01 +07:00

044891927b Back up Knot DNSSEC keystore from ns1 to control via borgbackup

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 14:51:33 +07:00

7ae3221b83 Add Active alerts panel to the top of the CNX DNS dashboard

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 14:49:34 +07:00

4c7c74836d Add vmalert alerting rules for DNS and host health

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 14:26:23 +07:00

a7d4c0e567 Add mdBook infra runbook served by Caddy on control

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 12:15:45 +07:00

3a8fe660a5 Swap ZeroTier external members: drop Alex/Alex-gateway, add alex-nixos

9aa83d70a2 Admit external ZeroTier members to the mesh by node id

Compare 2 commits »

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 11:53:57 +07:00

848c4ec47d Read mesh host map from clan zerotier vars instead of hardcoding

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 10:51:54 +07:00

8ac96b2d10 Enable IPv6 dialing for VictoriaMetrics scrapes

grabowski pushed to main at B4L/cnx-network-clan

2026-06-17 10:30:16 +07:00

1405605eac Remove key(s) for user berwn from secrets

ad0c47e046 Add key(s) for user berwn to secrets

fb7b269f68 Update vars via generator grafana-admin for machine control

Compare 3 commits »