| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2026-06-30 | f3s/cert-manager: doc relayd TCP passthrough, drop obsolete cert export | Paul Buetow | |
| relayd on the CARP VIP no longer terminates TLS — it forwards raw TLS to Traefik, which terminates via the f3s-lan-tls ingress secret. The old "export cert to relayd" steps were stale and misleading. Add the restart-not-reload pitfall (a stale relayd process serving an expired cached keypair caused the 2026-06-30 LAN-cert outage). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> | |||
| 2026-04-13 | always Alwyas | Paul Buetow | |
| 2026-02-05 | Add LAN access via CARP and relayd | Paul Buetow | |
| - Add cert-manager for self-signed TLS certificates - Create wildcard cert for *.f3s.lan.buetow.org - Add LAN ingress to Navidrome (navidrome.f3s.lan.buetow.org) - Document FreeBSD relayd configuration for LAN access - Add comprehensive setup guide LAN access uses existing CARP VIP (192.168.1.138) on f0/f1 with relayd forwarding HTTP/HTTPS to k3s Traefik NodePorts. External access via OpenBSD relayd continues unchanged. | |||
 |
index : conf | |
| Configuration files for the automation of my personal infrastructure (servers, laptops, workstations, phones)! |
| summaryrefslogtreecommitdiff |