kurogeek 7469976750 stellio: allow ssh over yggdrasil ...

The router service only opens SSH to the mgmt VLAN, the staging port
and the ZeroTier mesh. Also admit it on the yggdrasil interface (`ygg`,
as named by clan-core's service) so the box stays reachable when
ZeroTier is down. Interface-scoped, so a spoofed 200::/7 source on the
WAN never matches.

2026-10-02 07:53:47 +00:00

..

adhil

machines/all: machine description

2026-05-01 11:13:53 +07:00

alasia

machines/alasia: headscale server

2026-05-15 18:00:31 +07:00

almach

specify boot.zfs.forceImportRoot

2026-05-12 16:49:03 +07:00

alpheratz

specify boot.zfs.forceImportRoot

2026-05-12 16:49:03 +07:00

bosona

machines/bosona: nix fmt

2026-06-15 15:55:04 +07:00

buna

machines/buna: use wifi

2026-08-19 14:34:34 +07:00

canopus

machines/canopus: localhost -> sitename

2026-05-25 14:20:44 +07:00

cursa

nix fmt

2026-07-16 16:34:46 +07:00

deneb

deneb: add default_thai_company frappe app to poyerp

2026-09-15 16:18:30 +07:00

hadar

w-inventory: allow phone to access

2026-09-30 13:56:52 +07:00

mirach

specify boot.zfs.forceImportRoot

2026-05-12 16:49:03 +07:00

neptune

clancore bumped, zerotier migration

2026-06-16 15:01:21 +07:00

petra

specify boot.zfs.forceImportRoot

2026-05-12 16:49:03 +07:00

procyon

inputs: bump nixpkgs, frappix. migrate inventree

2026-06-15 16:36:18 +07:00

ramus

clancore bumped, zerotier migration

2026-06-16 15:01:21 +07:00

rana

specify boot.zfs.forceImportRoot

2026-05-12 16:49:03 +07:00

rigel

clancore bumped, zerotier migration

2026-06-16 15:01:21 +07:00

sirius

machines/stellio: a new whitehouse router that uses clanService/router from cnx-network

2026-09-23 15:31:57 +07:00

stellio

stellio: allow ssh over yggdrasil

2026-10-02 07:53:47 +00:00

tangra

machines/tangra: poyfestival.com website

2026-06-01 10:42:03 +07:00

vega

clancore bumped, zerotier migration

2026-06-16 15:01:21 +07:00

default.nix

inventory/borgbackup: init

2026-07-29 12:38:12 +07:00