0 Fork 0

Files

T

jakman85andClaude Opus 4.8 3df5071bd1 Codify host firewall + Gitea bootstrap as IaC (hands-off rebuild)

Per operator: the firewalld rule (VM->host:3000 for the Flux<-Gitea source) must be
IaC, not a manual command (R-ENV-01, R-PLAT-04).
- infra/ansible/playbooks/host-prereqs.yml: idempotent firewalld open on the libvirt
  zone (localhost play, become; no extra collection).
- bootstrap/gitea/bootstrap-gitea.sh: now fully automates admin + public repo + push
  (was manual instructions) — idempotent; creds stay 0600 on host, never committed.
Applying host-prereqs still needs host sudo (I lack non-interactive sudo); with
passwordless become a destroy/rebuild is fully unattended.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

2026-08-16 14:52:08 -05:00

ansible

Codify host firewall + Gitea bootstrap as IaC (hands-off rebuild)

2026-08-16 14:52:08 -05:00

cloud-init

Phase 1 (author-only): node provisioning IaC — tofu + cloud-init + Ansible (T-1.1/1.2/1.3)

2026-08-16 01:21:00 -05:00

devcontainer

Phase 1 checkpoint: status/resume doc + cluster helper + toolchain note

2026-08-16 02:18:39 -05:00

tofu

Phase 1 (author-only): node provisioning IaC — tofu + cloud-init + Ansible (T-1.1/1.2/1.3)

2026-08-16 01:21:00 -05:00

cluster.sh

Phase 1 checkpoint: status/resume doc + cluster helper + toolchain note

2026-08-16 02:18:39 -05:00

PHASE1-SCOPE.md

Phase 1: host Gitea as the bootstrap GitOps source (resolves source-URL)

2026-08-16 01:26:47 -05:00

PHASE1-STATUS.md

Phase 1 checkpoint: status/resume doc + cluster helper + toolchain note

2026-08-16 02:18:39 -05:00

README.md

Scope Phase 1: dev/test cluster bring-up on local KVM

2026-08-16 00:48:48 -05:00

README.md

infra/ — Phase 1 node provisioning (local KVM)

OpenTofu (libvirt) + cloud-init + Ansible bring up the 3-node k3s/Cilium cluster. See PHASE1-SCOPE.md. Spec: ../home-network-k3s/docs/02-environments-and-provisioning.md.