6 Commits

Author	SHA1	Message	Date
MichaelFisher1997	c516c8ba35	chore: disable VM tailscale bootstrap for now ... Remove tailscale auth/bootstrap from cloud-init and workflows, keeping VM provisioning focused on core network behind pfSense while preserving SSH key cloud-init setup.	2026-02-28 13:46:11 +00:00
MichaelFisher1997	93bba9fbfc	fix: make cloud-init tailscale bootstrap resilient ... Add retry loop for tailscale up during first boot and fallback without tag advertisement when tag auth is unavailable, so nodes still join tailnet.	2026-02-28 13:24:24 +00:00
MichaelFisher1997	8887a8bb87	refactor: move tailscale join fully into cloud-init ... Remove guest-agent enrollment workflow, pass TS auth key through Terraform variables/secrets, and run tailscale up with tag:k8s during cloud-init bootstrap alongside SSH key injection.	2026-02-28 13:13:34 +00:00
MichaelFisher1997	17834b3aa7	update: rotate SSH access via cloud-init secret ... Inject SSH public key through Terraform/cloud-init from Gitea secret so access can be rotated without rebuilding the template image.	2026-02-28 12:36:20 +00:00
MichaelFisher1997	e714a56980	update: switch Terraform to NixOS template workflow ... - Point clone_template to nixos-template and trim cloud-init to Nix-safe hostname/DNS only - Remove SSH/Tailscale cloud-init variables and workflow secret dependencies - Add reusable NixOS template-base config with bootloader, Tailscale, fish, and utility packages	2026-02-28 00:06:25 +00:00
MichaelFisher1997	79b535bb59	fix: code quality improvements ... - Remove duplicate variables (alpaca_count, llama_count) - Remove unused variables (vm_name, disk_type) - Fix outputs to use correct variable names - Fix cloud-init template to not overwrite source file - Fix hardcoded hostname in cloud-init template - Fix typo in SSH_KEY_PUBLIC description	2026-02-27 01:25:25 +00:00