sjat 602550fdaa docs(spec): M2 — provision askari via Terraform + Hetzner Cloud ... askari is provisioned as IaC: Terraform owns its existence too, generalizing ADR-006 from "Proxmox VM existence" to Proxmox + Hetzner (new hetznercloud/hcloud provider, hetzner_vm module, offsite stack with local state). CAX11 (ARM) in Helsinki on Debian 13, behind a TF-managed Hetzner Cloud Firewall (SSH-from-ubongo now; NetBird ports in M4). Token via TF_VAR_hcloud_token from vault.hetzner.token. Handoff stays ADR-009-shaped (tf_to_inventory.py extended to emit askari into offsite_hosts). State in the ADR-022 backup scope; DR via terraform import. Amends ADR-006/009/020/007/016. Point ROADMAP.md M2 at the spec. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-06-14 10:12:10 +02:00
..
plans	Add dev_env role: zsh/tmux/nvim for workstation-class hosts	2026-06-11 13:50:11 +02:00
specs	docs(spec): M2 — provision askari via Terraform + Hetzner Cloud	2026-06-14 10:12:10 +02:00