Commit graph

110 commits

Author SHA1 Message Date
3f487fd52b
feat(build-server): build crystal binaries statically on home.server
The 2022 binaries link libpcre.so.3, which Debian 13 no longer ships.
crystal now comes from the openSUSE repo of the node's Debian release
and links with --static, so the result runs on any release; the build
runs locally instead of cross-compiling through the build-agent.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh
2026-10-23 11:50:22 +02:00
3b4ebda91d
feat(home.router): emergency uplink via carina VLAN instead of pppoe
VLAN 52 "carina" on sfp-sfpplus7 of the rack switch, routed and
masqueraded by home.router via 192.168.178.1; pppoe and the rolf test
VLAN are commented out for now.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh
2026-10-23 11:34:21 +02:00
8a70691fea
feat(users): add mwiegand-agent login for agent sessions
Every linux node gets the user with the ssh-grant agent key and
passwordless sudo; the key only works while a grant is active.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh
2026-10-23 11:29:35 +02:00
43f0c57438
groups: add applications/left4me
Single bundle group; pulls in bundles/left4me. Joined by nodes that run
the L4D2 game-server platform. nftables and systemd come in via the
debian-13 group on Debian-13 nodes, so this group needs only the
left4me bundle itself.
2026-05-10 18:08:36 +02:00
04558a9189
docs: scaffold agent-friendly entry points (Phase 1)
introduces a balanced set of agent + human docs:

- root AGENTS.md (with CLAUDE.md symlink) — 5-rule quickstart,
  layout map, mental model, use-case keyed example pointers.
- docs/agents/conventions.md — vault/demagify, eval-loader
  constraints, group inheritance, naming, do-not-touch list,
  suspension idioms, working-style notes.
- docs/agents/commands.md — repo-specific deltas to the fork's
  bw runbook (apt-key offline-verify, *.py_ suspended-node
  visibility, vault-echo rule).
- per-area AGENTS.md for bundles/, nodes/, groups/, libs/,
  hooks/, data/, items/, bin/ — mechanism-focused, no enumeration.
- bundles/AGENTS.template.md — per-bundle doc template with
  optional `## Writes into` section for cross-namespace reactors.

bundlewrap-language reference (item types, dep keywords, reactors,
runbook, three-tier safety envelope) is not duplicated here; we
link out to the fork's AGENTS.md instead.

bw test still green. all internal links resolve. Phase 0 invariants
preserved (libs/hooks docstrings, bin/* # purpose: headers).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-10 15:44:45 +02:00
cb19c38376
update home.server to trixie 2026-03-07 14:41:59 +01:00
1dc6fab755
routeros better port error monitoring 2025-12-16 17:53:03 +01:00
b81c9e9763
allow snmp at home 2025-12-16 16:43:39 +01:00
bd639cd6cb
routeros_health 2025-12-13 18:47:43 +01:00
75657d2423
more routeros grafana 2025-12-13 16:29:20 +01:00
4a4167e0b6
routeros grafana discards and errors 2025-12-13 15:31:09 +01:00
463cf8783c
mikrotik: more port config 2025-12-03 22:30:42 +01:00
5a8dc7e313
nodes/home.backups.py: use own vlan for wakeonlan to not have 2 ips in same network 2025-12-03 22:06:22 +01:00
c41e6f8240
debian 13 2025-08-09 12:43:59 +02:00
460f809403
more routeros 2025-07-01 11:30:57 +02:00
0e6a705d3f
routeros switches ok 2025-07-01 11:30:57 +02:00
d54eff344f
routeros wip 2025-07-01 11:30:37 +02:00
d3b8e2e414
mailman 2025-06-29 12:37:09 +02:00
85daf26174
routeros 2025-06-29 12:32:18 +02:00
8d941ebef4
open fw for iperf 2025-06-29 12:24:59 +02:00
d755267dd9
proxmox 2025-06-29 12:24:50 +02:00
67d5a4bff8
TOTAL FACKUP 2024-11-23 09:52:22 +01:00
ab87fe6f96
freescout 2024-09-05 21:57:33 +02:00
e3fe0eeb79
wp 2024-02-08 10:46:27 +01:00
637ab05590
apt source multiple urls 2023-08-01 12:15:49 +02:00
83cc936c82
apt key variables 2023-07-31 21:12:15 +02:00
e1e1920ffb
apt new sources format 2023-07-31 21:00:17 +02:00
49498c0ca9
update debian apt keys 2023-07-04 23:11:54 +02:00
5e66318c38
debian 12 preps 2023-06-26 19:37:21 +02:00
d8963141fc
release -> codename 2023-04-20 11:09:08 +02:00
f167643980
backup-freshness-check: check local and offsite backup 2023-03-02 18:20:10 +01:00
801a8bcf5f
left4dead: only individual server workshop downloads 2022-12-03 19:51:13 +01:00
6c84dfa678
apply macbook 2022-11-26 12:24:27 +01:00
6b0e92447a
left4dead 2022-10-06 14:42:52 +02:00
50fed682eb
backup /etc 2022-09-18 22:58:56 +02:00
283f2da099
remove debian 10, use https in sources.list 2022-09-11 23:46:06 +02:00
c64aa70b49
nftables 2022-09-09 19:50:42 +02:00
mwiegand
f7cac0eedf new seperate ssh keys for private repo 2022-09-06 11:50:40 +02:00
mwiegand
4e25dc000c change ssh key 2 2022-08-31 12:30:09 +02:00
mwiegand
eb3069359d change ssh key 2022-08-31 12:25:40 +02:00
mwiegand
a545a74242 icinga 2022-08-31 12:02:40 +02:00
mwiegand
ee3625311b htop 2022-08-09 16:50:46 +02:00
mwiegand
6706d04298 ckn user 2022-06-01 10:42:35 +02:00
mwiegand
7588741b30 debian 12 2022-05-04 20:50:03 +02:00
mwiegand
e85afeb656 fix agetty path on older systems 2022-03-07 18:04:55 +01:00
mwiegand
b1e5992f05 group home 2022-02-15 09:39:11 +01:00
mwiegand
d12b446f34 wol + 2022-02-12 17:15:15 +01:00
mwiegand
98ba428bb7 wol-sleeper 2022-02-12 16:58:44 +01:00
mwiegand
b579dc4928 autologin 2022-02-12 15:20:00 +01:00
mwiegand
254af0c72b raspberrymatic-cert 2022-02-06 20:34:17 +01:00