sjat/boma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

new-host runbook: mesh VPN resolved to NetBird (ADR-016)

Browse source
This commit is contained in:
sjat 2026-06-05 11:52:22 +02:00
parent ed9fdcc10a
commit cd62c5e098
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
docs/runbooks/new-host.md
View file

@ -128,8 +128,8 @@ provisioned manually. Rationale, hardware target, and recovery model: ADR-015.
make collections # Ansible collections make collections # Ansible collections
rbw login && rbw unlock # vault password from Vaultwarden (see rotate-secrets.md) rbw login && rbw unlock # vault password from Vaultwarden (see rotate-secrets.md)
``` ```
4. Join the mesh VPN (choice deferred — see ADR-015) so it is reachable over SSH 4. Join the mesh VPN — NetBird, self-hosted on `askari` (ADR-016) — so it is
from elsewhere. reachable over SSH from elsewhere.
5. Add `ubongo` to `inventories/<env>/hosts.yml` under the `control` group. 5. Add `ubongo` to `inventories/<env>/hosts.yml` under the `control` group.
Because `ubongo` is not in `local.vms`, this is the only case where editing Because `ubongo` is not in `local.vms`, this is the only case where editing