5 Commits

Include renames

Author	SHA1	Message	Date
vh	454b689a54	fix(nh3-svos): strip Tailscale-User-* and X-Forwarded-* as whole families at the SVOS front door ... svos-dev review: the Caddyfile deleted named headers only. Prefix deletes cover the families; the named strays (Tailscale-Headers-Info, X-Real-IP, Forwarded, X-SVOS-Peer) stay. Wildcard semantics checked on a scratch Caddy (case-insensitive; look-alikes outside the family survive). Deployed, validated via systemd-run with EnvironmentFile, reloaded; deny tests re-run (403). README: safe validate recipe, pending acceptance list.	2026-10-05 19:35:10 -07:00
vh	ce398685c0	feat(nh3-svos): mesh-only front door for svos.phasefinal.com (Caddy + WhoIs fail-closed auth), headscale extra record	2026-10-05 19:31:41 -07:00
vh	9175fbd539	feat(qemu-ga): failure-propagating fsfreeze dispatcher; enabled on nh3-svos (hooks were never run)	2026-10-05 19:25:14 -07:00
vh	36289f701a	ops(beszel): native agents + hub registration for nh3-svos and nh3-albok; nh3-svos app/ingress notes	2026-10-05 19:04:13 -07:00
vh	d7e845eb64	feat(nh3-svos): VM 111 on nh3-pve-2 for the new SVOS (svos-dev, Prime); generic cloud-init VM playbook	2026-10-05 18:59:53 -07:00