How to publish HTTP services as <svc>.mf01.makerfloss.eu (VPS-terminated
TLS, wg1 inner hop, mf01 internal Traefik). Built + verified 2026-06-09.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- data ports give 10.2.30.0/24 (sjat got .227), gw 10.2.30.1
- 10.2.30.0/24 and 10.0.0.0/24 inter-route via makerspace router
- note mf04 IP drift: actual 10.0.0.183, host_vars says .184
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Scaffold for troubleshooting MakerFLOSS hosts at the makerspace.
Reference + thin runbooks model — authoritative data stays in the
source repos (AnsibleBaobabV4, MakerFLOSS_Mikrotik, MakerFLOSS).
- access.md: reach paths for mamba-on-LAN and fisi-tunneling-in
(netbird on-demand, VPS bastion, ProxyJump via kuku->mamba),
with the isolation rule.
- network-map.md: subnet pointers + open question on makerspace
addressing (10.2.30/172.17.3/10.0.0).
- runbooks/switch-crs310.md: CRS310 connectivity + lockout recovery.
- incidents/: dated log scaffold.
- CLAUDE.md: operating rules for this repo.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
