kaka
|
e76cb4c1b6
|
Reload active firewall gate without restarting required Docker and Tailscale services
|
2026-11-04 23:13:29 +08:00 |
|
kaka
|
db1bd78bec
|
Allow all private IPv4 traffic by default in Debian initialization firewall
|
2026-11-04 22:46:18 +08:00 |
|
kaka
|
56b506e54d
|
Fix Headplane credential failure handling and discover exact service
|
2026-11-04 21:44:00 +08:00 |
|
kaka
|
2a16c1bf7b
|
Add reusable protected Headplane preparation and login key issuance
|
2026-11-04 21:20:24 +08:00 |
|
kaka
|
8303c5b831
|
Keep baseline lock outside writable system lock directory
|
2026-11-04 18:58:25 +08:00 |
|
kaka
|
6c7d1be40a
|
Handle authorized Debian upgrades and verified BIOS GPT repair
|
2026-11-04 18:46:37 +08:00 |
|
kaka
|
3365c09c8d
|
Add repeatable preparation for dedicated Headscale hosts
|
2026-11-04 18:01:23 +08:00 |
|
kaka
|
9887d50f47
|
Separate Periphery runtime from configuration
|
2026-11-04 17:28:52 +08:00 |
|
kaka
|
873933af35
|
feat(host): add guarded Debian baseline and SSH transactions
|
2026-11-04 16:55:00 +08:00 |
|
kaka
|
62ef4b458c
|
feat(network): use Tailnet identities and guarded host firewall
|
2026-11-04 12:13:09 +08:00 |
|
kaka
|
7d7a69e686
|
perf(host-init): skip APT refresh when baseline packages are installed
|
2026-11-04 07:49:26 +08:00 |
|
kaka
|
f5f6104b7a
|
docs: record native bootstrap validation and Headscale tag contract
|
2026-11-04 07:18:59 +08:00 |
|
kaka
|
0b18353a2b
|
fix(tailscale): verify key-granted tags for Headscale enrollment
|
2026-11-04 07:00:31 +08:00 |
|
kaka
|
96ffd3d969
|
vendor: pin Tailscale 1.104.4 amd64 package
|
2026-11-04 06:46:23 +08:00 |
|
Codex
|
f89ab4634a
|
Initial native bootstrap release
|
2026-11-04 03:01:27 +08:00 |
|