vh 454b689a54 fix(nh3-svos): strip Tailscale-User-* and X-Forwarded-* as whole families at the SVOS front door ...

svos-dev review: the Caddyfile deleted named headers only. Prefix deletes cover the families; the named strays (Tailscale-Headers-Info, X-Real-IP, Forwarded, X-SVOS-Peer) stay. Wildcard semantics checked on a scratch Caddy (case-insensitive; look-alikes outside the family survive). Deployed, validated via systemd-run with EnvironmentFile, reloaded; deny tests re-run (403). README: safe validate recipe, pending acceptance list.

2026-10-05 19:35:10 -07:00

..

ana-docker

ops(ana-docker): docker-ce from bookworm repo (29.8.2); live-restore stale-socket lesson; docs

2026-10-05 13:31:30 -07:00

ana-filebot

servers: add new host dirs, refresh fleet snapshots, orientation doc

2026-04-24 21:56:46 -07:00

ana-nas

servers: add new host dirs, refresh fleet snapshots, orientation doc

2026-04-24 21:56:46 -07:00

ana-wg

servers: add new host dirs, refresh fleet snapshots, orientation doc

2026-04-24 21:56:46 -07:00

corviduo-dev

feat(corviduo): wire ratatoskr memory plane :8391 into personal Worldtree bifrost allowlist

2026-06-15 23:22:06 -07:00

esh-docker-vm

ops(esh-docker-vm): Homepage on https via a file-provider Traefik router; note the dead Route53 ACME resolver

2026-10-05 18:38:08 -07:00

esh-matter

feat(esh-matter): Matter server (matter.js 1.4.0) on a VLAN-90-only LXC for Home Assistant

2026-09-26 13:07:22 -07:00

esh-ml1

feat(litellm): embedder primary/failover split — qwen3-embedding on esh-ml1, new qwen3-embedding-bulk on nh3-ml1

2026-10-05 00:32:42 -07:00

esh-pve

ops(esh-pve): upgraded to PVE 9.2.21 / kernel 7.0.14-20 (one reboot, Prime on site); ESH cluster uniform on 9

2026-10-04 07:45:05 -07:00

esh-pve-2

ops(meshcentral): diagnose and fix HW Connect stuck at Setup (stale CIRA tunnel); add relay probe

2026-10-02 22:49:27 -07:00

esh-pve-nas

docs(esh): record the 2-node cluster, and that a dark tile is pvestatd

2026-08-18 06:43:02 -07:00

esh-vm-db

servers: add new host dirs, refresh fleet snapshots, orientation doc

2026-04-24 21:56:46 -07:00

fv-ml1

docs(fv-ml1): drop the stale 'docker still on zroot' line

2026-10-05 02:43:31 -07:00

irv-ml1

docs(irv-ml1, ana-docker): storage cleanup, text encoders on worktank, Traefik readTimeout 10m

2026-10-05 01:19:36 -07:00

nh3-albok

ops(beszel): native agents + hub registration for nh3-svos and nh3-albok; nh3-svos app/ingress notes

2026-10-05 19:04:13 -07:00

nh3-dev

ops(nh3-dev): grow root into the 378 GB disk online; swap moved to /swapfile

2026-10-02 07:33:36 -07:00

nh3-docker

Initial commit: PFI fleet inventory, stacks, tooling, and backup pipeline

2026-04-20 14:29:48 -07:00

nh3-extdev

feat(nh3-extdev): install pi (earendil-works) + wire /opt/externs client agents to GLM 5.2

2026-06-18 14:04:29 -07:00

nh3-ml1

feat(litellm): embedder primary/failover split — qwen3-embedding on esh-ml1, new qwen3-embedding-bulk on nh3-ml1

2026-10-05 00:32:42 -07:00

nh3-nas

servers: add new host dirs, refresh fleet snapshots, orientation doc

2026-04-24 21:56:46 -07:00

nh3-pve

ops: retire VM 101 (DC) and VM 104 (nh3-laser) from running + backups; infra-ops login on pbs-ana/pbs-nh3; nh3-pve-2 follow-ups verified done

2026-10-04 16:37:15 -07:00

nh3-pve-2

feat(nh3-svos): VM 111 on nh3-pve-2 for the new SVOS (svos-dev, Prime); generic cloud-init VM playbook

2026-10-05 18:59:53 -07:00

nh3-svos

fix(nh3-svos): strip Tailscale-User-* and X-Forwarded-* as whole families at the SVOS front door

2026-10-05 19:35:10 -07:00

pbs-ana

ops: retire VM 101 (DC) and VM 104 (nh3-laser) from running + backups; infra-ops login on pbs-ana/pbs-nh3; nh3-pve-2 follow-ups verified done

2026-10-04 16:37:15 -07:00

pbs-nh3

ops: retire VM 101 (DC) and VM 104 (nh3-laser) from running + backups; infra-ops login on pbs-ana/pbs-nh3; nh3-pve-2 follow-ups verified done

2026-10-04 16:37:15 -07:00

pfi-gx10

docs(pfi-gx10,nh3-pve): AC-restore patch validated; nh3-pve OOB held blind until next NH3 visit (NanoKVM → gx10, MS-01 → own vPro)

2026-09-25 13:34:17 -07:00

pfi-postgres

servers/pfi-postgres: drop stale "Known weak password (rotate)" section

2026-05-14 15:34:02 -07:00

pfi-pteradactyl

ops(pfi-pteradactyl): docker.io/containerd upgraded (manual dockerd + wings restart); docs

2026-10-05 14:18:57 -07:00

pfi-pve

ops: phasefinal.com moved to Cloudflare Pages; pfi-ana-webhost destroyed and removed from inventory, DNS and the FortiGate

2026-10-04 17:28:29 -07:00

pfi-tacticalrmm

ops(pfi-tacticalrmm): *.phasefinal.com renews via dns-cloudflare (was manual; 16 days from expiry)

2026-10-05 08:43:15 -07:00

sf-ana-container

servers: add new host dirs, refresh fleet snapshots, orientation doc

2026-04-24 21:56:46 -07:00

sf-r630

servers: add new host dirs, refresh fleet snapshots, orientation doc

2026-04-24 21:56:46 -07:00

sfsrv-ana

servers: add new host dirs, refresh fleet snapshots, orientation doc

2026-04-24 21:56:46 -07:00

vm-esh-nas

fix(restic): vm-esh-nas off env-file too; infra-ops now provisioned there

2026-09-27 01:56:04 -07:00