Michal c392bb9233 window: option (b) mac-sources has no VyOS knob; noted for the attended decision ...

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DMVzWZgiKW2wquf5z8S1yH

2026-09-06 22:37:23 +01:00

..

drill-evidence

The drill evidence was silently gitignored by *.log

2026-09-06 15:22:09 +01:00

window-evidence

window: option (b) mac-sources has no VyOS knob; noted for the attended decision

2026-09-06 22:37:23 +01:00

_unifi.py

fix(migration): apply the reviewed reservation plan, not a recomputed one

2026-08-16 14:31:30 +01:00

.gitignore

feat(migration): export UniFi config and generate VyOS DHCP+DNS from it

2026-08-15 01:33:00 +01:00

CUTOVER.md

feat(migration): peer link cabled and verified; conntrack-sync enabled in deltas

2026-08-17 00:37:16 +01:00

he-tunnel-follow

IPv6 follows master, deployed: vyos002 has a tunnel and a gate that holds it shut

2026-09-06 14:46:44 +01:00

MANAGEMENT-VLAN-TAGGED.md

labsim: prove the tagged-Management fix for kea's wrong-pool offers

2026-09-02 14:03:44 +01:00

ppp-vrrp-gate.conf

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

PPPOE-HA.md

The drill evidence was silently gitignored by *.log

2026-09-06 15:22:09 +01:00

pulumi-override-he-tunnel-both.json

IPv6 model merged: mark the staging record, and what the merge caught

2026-09-06 15:07:40 +01:00

pulumi-override-pppoe-gated.json

labsim: the session-control matrix was never setting session-control

2026-09-06 00:15:45 +01:00

RECOVERY-CARD-vlan1-move.md

migration: offline recovery card, and stop the leak test trusting a silent router

2026-09-02 14:30:35 +01:00

RECOVERY-CARD-wan-panic.md

wan-panic: a one-command revert that works with no internet and no Claude

2026-09-06 09:29:23 +01:00

unifi-export.py

feat(migration): export UniFi config and generate VyOS DHCP+DNS from it

2026-08-15 01:33:00 +01:00

unifi-reserve-all.py

fix(migration): apply the reviewed reservation plan, not a recomputed one

2026-08-16 14:31:30 +01:00

unifi-reserve.py

feat(migration): pin firewall management NICs and reserve them in UniFi

2026-08-15 22:12:42 +01:00

unifi-to-vyos.py

chore(migration): all DNS through VyOS to Google, NAS out of the path

2026-08-16 17:16:17 +01:00

vif53-pin-boot-disable

vif53-pin-boot-disable: get disable into config.boot without losing the WAN

2026-09-06 10:31:56 +01:00

vlan2-v6-apply

VLAN 2 IPv6 applied to production: RA proven, MAC reservations do NOT match

2026-09-06 22:36:47 +01:00

vlan2-v6-watchdog

VLAN 2 IPv6 applied to production: RA proven, MAC reservations do NOT match

2026-09-06 22:36:47 +01:00

vrrp-wan-apply

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

vrrp-wan-guard

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

vrrp-wan-guard.service

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

vrrp-wan-guard.timer

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

vrrp-wan-health

vrrp-wan: size GRACE from the measured hostile failover, not the theory

2026-09-06 00:25:00 +01:00

vrrp-wan-install

IPv6 was never HA, and the WAN becoming HA is what exposed it

2026-09-06 14:30:44 +01:00

vrrp-wan-reconcile

IPv6 was never HA, and the WAN becoming HA is what exposed it

2026-09-06 14:30:44 +01:00

vrrp-wan-reconcile.service

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

vrrp-wan-reconcile.timer

vyos: WAN follows VRRP mastership, rehearsed in labsim

2026-09-02 18:02:58 +01:00

vrrp-wan-release

vyos: WAN follows VRRP mastership, rehearsed in labsim

2026-09-02 18:02:58 +01:00

vrrp-wan-take

vyos: WAN follows VRRP mastership, rehearsed in labsim

2026-09-02 18:02:58 +01:00

vrrp-wan.conf

labsim: both matrices green end to end, numbers reproduced

2026-09-06 00:42:01 +01:00

vyos002-catch.sh

migration: the watcher that caught vyos002, and what it found

2026-09-02 15:51:47 +01:00

vyos002-return.conf

migration: vyos001 converted in production, and the config vyos002 needs first

2026-09-02 15:26:21 +01:00

VYOS-IMAGE-UPGRADE.md

IPv6 was never HA, and the WAN becoming HA is what exposed it

2026-09-06 14:30:44 +01:00

vyos-known-good

feat(vyos): pin a known-good config and restore it with one command

2026-08-21 01:46:43 +01:00

vyos-mode-delta.py

vrrp-wan: a flap holdoff must not tear down a live WAN session

2026-09-06 00:04:41 +01:00

vyos-unifi-switch

fix(migration): the backup has no WAN by design; stop failing it for that

2026-08-18 01:48:48 +01:00

wan-drill

IPv6 was never HA, and the WAN becoming HA is what exposed it

2026-09-06 14:30:44 +01:00

wan-drill-watchdog

wan-drill-watchdog: bound the blast radius of a failover drill

2026-09-06 09:34:05 +01:00

wan-panic

wan-panic: a one-command revert that works with no internet and no Claude

2026-09-06 09:29:23 +01:00