From 787aa3b8e169d7028d9c7c949d10df58f1375d83 Mon Sep 17 00:00:00 2001 From: sjat Date: Fri, 5 Jun 2026 11:50:53 +0200 Subject: [PATCH] STATUS: record NetBird mesh (coordinator + base enrollment) --- STATUS.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/STATUS.md b/STATUS.md index 200cf29..07d74e7 100644 --- a/STATUS.md +++ b/STATUS.md @@ -53,6 +53,8 @@ So `make deploy PLAYBOOK=site` currently **fails** on a clean clone — the `bas | CIS hardening (Debian L1+L2 + Docker) | ADR-002 / TODO 15 | Implemented by the (unbuilt) `base`/`docker_host` roles; brings AppArmor + AIDE as baseline. L2 partitions affect VM provisioning (ADR-006) | | Network IDS + security alerting | ADR-002 / TODO 15 | Suricata on OPNsense + AIDE/`auditd`/`fail2ban` alerting into the monitoring stack; not built | | `ubongo` — physical control / AI-worker host | ADR-015 | Replaces the cluster control VM with a dedicated always-on x86 box outside the cluster. Decision recorded; box not yet acquired/installed, not in inventory. | +| NetBird mesh — coordinator on `askari` | ADR-016 | Self-hosted NetBird control plane (management/signal/relay) on askari; replaces ADR-007 WireGuard. Decision recorded; not deployed (askari + service-role machinery not built). | +| NetBird agent enrollment in `base` | ADR-016 | Every Linux host joins the mesh via the base role (setup keys in vault); SSH allowed only on `wt0`. Designed; base role not built. | ## Keeping this honest