One-command vault edit (replace flossfw.public_key) + wireguard-server
redeploy + verify handshake, for when the TaPPaaS operator sends their
WireGuard public key.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
How to publish HTTP services as <svc>.mf01.makerfloss.eu (VPS-terminated
TLS, wg1 inner hop, mf01 internal Traefik). Built + verified 2026-06-09.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Scaffold for troubleshooting MakerFLOSS hosts at the makerspace.
Reference + thin runbooks model — authoritative data stays in the
source repos (AnsibleBaobabV4, MakerFLOSS_Mikrotik, MakerFLOSS).
- access.md: reach paths for mamba-on-LAN and fisi-tunneling-in
(netbird on-demand, VPS bastion, ProxyJump via kuku->mamba),
with the isolation rule.
- network-map.md: subnet pointers + open question on makerspace
addressing (10.2.30/172.17.3/10.0.0).
- runbooks/switch-crs310.md: CRS310 connectivity + lockout recovery.
- incidents/: dated log scaffold.
- CLAUDE.md: operating rules for this repo.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
