 vh
|
7ce398f069
|
feat(mesh): selective masquerade — exit nodes AND site-to-site source preservation both work
|
2026-09-06 00:16:18 -07:00 |
|
|
vh
|
b846a7c870
|
feat(mesh): advertise exit nodes at all three sites (SNAT re-enabled); usage + tradeoff documented
|
2026-09-06 00:09:43 -07:00 |
|
|
vh
|
815c283e44
|
feat(mesh): cutover COMPLETE — all three site-pairs on headscale, Site Magic + IPsec dormant
|
2026-09-06 00:05:18 -07:00 |
|
|
vh
|
d25c096b6a
|
feat(mesh): cut colo<->NH3 and colo<->ESH onto headscale (IPsec dormant); Site Magic pre-staged for operator UI disable
|
2026-09-06 00:01:43 -07:00 |
|
|
vh
|
e7f8d1f227
|
docs(mesh): ESH egress whitelisted in crowdsec (temporary, pending static IP)
|
2026-09-05 23:36:11 -07:00 |
|
|
vh
|
e88ec01726
|
docs(mesh): CrowdSec CGNAT false-ban incident — mesh bypasses it
|
2026-09-05 23:28:36 -07:00 |
|
|
vh
|
7382fdaa7b
|
docs(mesh): first roaming client (vhlk-mba26) verified
|
2026-09-05 22:58:23 -07:00 |
|
|
vh
|
a8a6f24b56
|
docs(mesh): return paths on all three gateways, verified; enrolment notes
|
2026-09-05 22:49:54 -07:00 |
|
|
vh
|
3ef87165df
|
feat(mesh): headscale control plane + three subnet routers provisioned; DNS entries; plan status
|
2026-09-05 22:32:23 -07:00 |
|
|
vh
|
e0759e41a3
|
ops: infra-ops identity bootstrapped on all four PVE hypervisors; docs updated
|
2026-09-05 21:52:40 -07:00 |
|
|
vh
|
1f504ce05a
|
docs(pfi): refresh pfi-pve guest inventory from live state; headscale mesh plan
|
2026-09-05 21:49:47 -07:00 |
|