sjat/boma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
264 commits 3 branches 0 tags 2.7 MiB
Commit graph

3 commits

Author SHA1 Message Date
sjat
1ee343dfca feat(tf): open Caddy 80/443 + NetBird 3478 on askari (public_web) 
hetzner_vm gains a public_web bool (default false); offsite sets it true. Firewall
adds 80/443 tcp + 3478 udp from anywhere (SSH-from-ubongo preserved). For M4 Caddy
+ NetBird.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-14 17:38:51 +02:00
sjat
09b0aad342 fix(tf): cloud-init heredoc column-0 + firewall uses ubongo's WAN IP 
Review catches: (1) <<-EOT strips by the closing marker's indent, so the
cloud-config body must match it (2 spaces) for '#cloud-config' to land at column
0; (2) the Hetzner Cloud Firewall filters public traffic, so ssh_admin_cidrs is
ubongo's WAN/egress IP, not its LAN address — a private CIDR would lock SSH out of
the live VPS.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-14 12:19:45 +02:00
sjat
bbc287900a feat(tf): hetzner_vm module (server + firewall + ssh key + cloud-init) 
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-14 12:03:01 +02:00