admin/felhom.eu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(ops): Tailscale makes the N100 (felhom-pve) location-independent

Browse Source 
felhom-pve joins the tailnet as a host package (100.70.170.35, expiry
disabled); DooPlex already advertised 192.168.0.0/24 via its GitOps k3s
tailscale pod (100.107.87.53). ssh felhom-pve now targets the tailnet IP
(direct-over-LAN at home, tunnel when away); felhom-pve-lan = LAN fallback.
--accept-dns=false on the host. Host converted static->DHCP (reservation
keeps .162 at home). Measured: --accept-routes hairpins the local subnet
at home -> travel-only opt-in. PBS is offsite (own WireGuard tunnel), needs
none of this. Recorded not fixed: controller<->agent plane hard-pinned to
192.168.0.162 (agent listen_addr + guest bootstrap.json) -> not yet portable
off-LAN. No code changed. Full doc: documentation/operations/tailscale.md

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XMForrE4c1wZxd9LukxYVt
This commit is contained in:
authentik Default Admin
2026-07-19 13:30:39 +02:00
parent 97249099d6
commit 83c47eaf23
5 changed files with 222 additions and 171 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CONTEXT.md
+13
View File
@@ -3,6 +3,19 @@
> Created with the REUSE.md rollout (2026-07-03). Authoritative history: `hub/CHANGELOG.md` (hub),
> `website/CHANGELOG.md`, `scripts/CHANGELOG.md`; end-of-task detail in `REPORT.md`.
- **2026-07-19 — N100 MADE LOCATION-INDEPENDENT via Tailscale.** `felhom-pve` (the N100) joined the
tailnet as a host package (`100.70.170.35`, expiry disabled); DooPlex already advertised
`192.168.0.0/24` via its GitOps k3s `admin-system/tailscale` pod (`100.107.87.53`). `ssh felhom-pve`
now targets the tailnet IP (direct-over-LAN at home, tunnel when away); `felhom-pve-lan` =
`192.168.0.162` fallback. `--accept-dns=false` on the host (pi-hole split-horizon preserved). The
host was converted **static→DHCP** (reservation MAC `68:1d:ef:5d:a6:64`→`.162` keeps home behaviour).
**Measured spike:** `--accept-routes` on the N100 *while on `192.168.0.0/24`* hairpins the local
subnet (table 52 overrides `main`) → kept OFF, it's a travel-only opt-in. **PBS is offsite** (its own
WireGuard tunnel to Hetzner, not the home LAN) so it needs none of this. **Recorded, NOT fixed:** the
controller↔agent plane is hard-pinned to `192.168.0.162` (`felhom-agent` `listen_addr` +
guest `bootstrap.json`), so the box is reachable + backs up off-LAN but its local operator plane is
not yet portable. Full doc: `documentation/operations/tailscale.md`. No code changed.
- **2026-07-19 — CC WORKFLOW MIGRATED TO DOOPLEX.** Claude Code now runs natively on DooPlex
(192.168.0.180, Debian 13, `kisfenyo`) in a tmux session, working directly in
`/mnt/5_hdd/felhom.eu/git/<repo>`. **DooPlex is now the canonical CC environment; the Windows