b633fe5b4d
Codex bootstrapped this as an uncommitted, parallel identity/control plane under domain2 (lukasrosier.com) alongside the router migration; committing it now that it's been exercised together this session: - LLDAP admin login verified against a freshly rotated, pinix-only admin secret (pinixLldapAdmin.age, distinct from the lldapAdmin secret shared with blunix -- rotating one no longer risks the other). - Dex OIDC discovery and the LDAP connector work end-to-end through Traefik (dex.lukasrosier.com, head.lukasrosier.com). - Headscale's OIDC `allowed_groups` gate is intentionally not set yet: any account in this still-empty LLDAP directory may register a node for now. Re-add the "intern" gate once real accounts exist and the bootstrap is done. - tnix successfully joined headscale-pinix via a pre-auth key as a second, parallel tailscale identity (not yet made declarative). Not committed: tailnet-dns.nix (a separate, more speculative netns'd resolver experiment for this tailnet, untouched today) and its default.nix import. This remains a parallel control plane during bootstrap -- see docs/pinix-identity-stack.md. tailscale.nix on tnix/pinix, the existing blunix-controlled tailnet, and 0ff.space DNS are unchanged. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01C5FvfdKcQjEFQ4aLrepcS1
11 lines
No EOL
563 B
Text
11 lines
No EOL
563 B
Text
age-encryption.org/v1
|
||
-> ssh-ed25519 brFltw FvcFjAoce0zZjIytqsXYsUqPZ4Q1bXDHiaUKJ86MzRQ
|
||
PYSM6QrXso6EjoW98t2w9YBM4aDt2+WIyjgYXdSN6hc
|
||
-> ssh-ed25519 ZBSv2g NMPcjDL9VUHQl8A4DMWrTKJs9Q3TwgOf5UOMWgRkt0c
|
||
Rryo+ywMqlct1OjaBRYQacSJiximp3GsDpn+Vr2ogNA
|
||
-> ssh-ed25519 SCJdcw H9hSbbwMODtksz4IEk0QkT4eOGBHg0FmC1jt7vHXcAM
|
||
jCplWbEC38isVK09FifWBTMsmtf5a+6onoBbKl6wORM
|
||
-> ssh-ed25519 JDJqCg iosAwg0hkZrWJpZF6OKW/XVxPkbtP85tAUl8y/reRUY
|
||
CoB45k8+EoZgbyahtICvCR2G/pFWYIsjfGrmp5VCCRY
|
||
--- NCmxdHiRX/s46oVfzotsewkjbFg7tHA3P3DFDNXNEsw
|
||
.‡ªþg81Â5ÇŸµTLìÙ¦t"
|
||
"<22>ê)ˆí<CB86>´zoÖD¢™C' ._ÂœK
|
||
PRîYUïÖ |