vh/esh-pfi-infrastructure
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(mesh): cutover COMPLETE — all three site-pairs on headscale, Site Magic + IPsec dormant

Browse Source
This commit is contained in:
vh
2026-09-06 00:05:18 -07:00
parent df8440e4b8
commit 815c283e44
2 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
persistent-memory.d/2026-09-06-headscale-cutover.md
+3 -1
View File
@@ -1,4 +1,6 @@
# 2026-09-06 — Headscale cutover: IPsec dormant, mesh primary; Site Magic pending operator
# 2026-09-06 — Headscale cutover COMPLETE: all three site-pairs on the mesh
**DONE.** Operator disabled Site Magic in the UI; NH3↔ESH re-homed to a DIRECT mesh path (8ms, no DERP). Full 6-direction matrix OPEN. Site Magic disabled, both IPsec tunnels dormant, headscale is the sole active site-to-site transport. ana-wg WG fallback untouched. Tunnels re-enablable for backup.
Operator goal (/goal): replace Site Magic + IPsec with headscale, tunnels dormant as backup;
"if paranoid, enable world-accessible SSH on the FortiGate first." Full detail + method +