0 Fork 0

Files

T

jakman85andClaude Opus 4.8 e9d738b705 vpn_egress_gateway: commit the ansible-vault host VPN creds vault (ADR-0015)

The node-tunnel PIA credentials (username/password/.ovpn) live host-side in Ansible vault per
docs/07. The encrypted vault.yml was provisioned but never committed, so the vpn.egress.gateway
playbook was not reproducible from a fresh checkout. Commit it (ansible-vault encrypted; the
vault password stays out of the repo via ansible.cfg vault_password_file).

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-08-24 15:00:58 -05:00

ansible

vpn_egress_gateway: commit the ansible-vault host VPN creds vault (ADR-0015)

2026-08-24 15:00:58 -05:00

cloud-init

Phase 1 (author-only): node provisioning IaC — tofu + cloud-init + Ansible (T-1.1/1.2/1.3)

2026-08-16 01:21:00 -05:00

devcontainer

devcontainer: set KUBECONFIG + persist SOPS age key to host

2026-08-16 22:31:51 -05:00

tofu

iac: harden node lifecycle — tofu for_each + self-contained ansible rejoin

2026-08-16 19:42:12 -05:00

cluster.sh

Phase 1 checkpoint: status/resume doc + cluster helper + toolchain note

2026-08-16 02:18:39 -05:00

PHASE1-SCOPE.md

Phase 1: host Gitea as the bootstrap GitOps source (resolves source-URL)

2026-08-16 01:26:47 -05:00

PHASE1-STATUS.md

Phase 1 checkpoint: status/resume doc + cluster helper + toolchain note

2026-08-16 02:18:39 -05:00

README.md

Scope Phase 1: dev/test cluster bring-up on local KVM

2026-08-16 00:48:48 -05:00

README.md

infra/ — Phase 1 node provisioning (local KVM)

OpenTofu (libvirt) + cloud-init + Ansible bring up the 3-node k3s/Cilium cluster. See PHASE1-SCOPE.md. Spec: ../home-network-k3s/docs/02-environments-and-provisioning.md.