Forward tcp/33022 (FORWARD, LIBVIRT_INP/OUT, PREROUTING DNAT to
192.168.123.21) so the GitLab remote is reachable, add nginx vhosts
for docker-dev-22 and czechultimate.cz, and route fuj-management
through the k8s gateway. Also record saint's eno0 interface config.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Document the psmf host (DNS, second tailscale netns instance, nginx
vhosts, migration plan) and add the docker-dev-22 psmf-data-sync
service plus the storage-23 pg_hba.conf entry it needs.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
- docker-30/zot: add Zot OCI registry with on-demand sync to docker.io,
registry.k8s.io, ghcr.io, quay.io
- kubernetes-kvm-terraform: wire Kanidm OIDC via structured
AuthenticationConfiguration; add reference apiserver manifest and
join-node-02 helper
- servers: reorganize shadow/ under servers/, add saint vhost config and
utility-101 VM definition, add shadow hrajfrisbee.cz vhost and
storage-23 notes
- experiments: add notes and configs for e2b dev VM, kata + firecracker
on kube, microsandbox, orb-stack k3s (terraform + cloud-init), rke2
- vms/docker: document tailscale + node-exporter setup
- blog: stub post on Gateway API
- chore: gitignore tmp/, smtp_password, and the two local-only
credential caches; add per-project .claude/settings.json
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
