fscotto/infra
1
0
Fork 0
mirror of https://github.com/fscotto/infra.git synced 2026-09-28 03:03:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore(aegis): remove local TLS configuration

Browse Source
This commit is contained in:
Fabio Scotto di Santolo
2026-09-05 16:28:22 +02:00
parent f07391c404
commit e47e435421
5 changed files with 50 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
AGENTS.md
View File

@@ -163,8 +163,7 @@ The dotfile vars follow the same split: `desktop_common_dotfiles` carries mode-i
`aegis_lan_subnet` and `aegis_adguard_web_port` host-specific; SSH permits only the declared
key-authenticated users, never root or password authentication. Keep Apple IDs and other
credentials in Vault and use `no_log` for their rendering.
- `aegis_adguard_web_port` defaults to `80`; the playbook also permits HTTPS on `443` and DNS-over-TLS on `853/tcp`. The initial AdGuard
Home wizard port `3000` is intentionally unmanaged: open and close it manually only while
- `aegis_adguard_web_port` defaults to `80`. The initial AdGuard Home wizard port `3000` is intentionally unmanaged: open and close it manually only while
completing initial setup. Disable the local systemd-resolved stub through `profile_aegis` before
AdGuard binds port 53; keep
`/etc/resolv.conf` linked to `/run/systemd/resolve/resolv.conf` so Aegis retains router-provided DNS.