new-host runbook: mesh VPN resolved to NetBird (ADR-016)

This commit is contained in:
sjat 2026-06-05 11:52:22 +02:00
parent ed9fdcc10a
commit cd62c5e098

View file

@ -128,8 +128,8 @@ provisioned manually. Rationale, hardware target, and recovery model: ADR-015.
make collections # Ansible collections
rbw login && rbw unlock # vault password from Vaultwarden (see rotate-secrets.md)
```
4. Join the mesh VPN (choice deferred — see ADR-015) so it is reachable over SSH
from elsewhere.
4. Join the mesh VPN — NetBird, self-hosted on `askari` (ADR-016) — so it is
reachable over SSH from elsewhere.
5. Add `ubongo` to `inventories/<env>/hosts.yml` under the `control` group.
Because `ubongo` is not in `local.vms`, this is the only case where editing