Michal d08f68e28b PPPOE-HA: step 8 done -- model merged, zero drift ...

Both overrides are on kubernetes-deployment main (45033dd) and the
transition-scripts were applied to the boxes directly rather than left for an
unattended `pulumi up` to find. vyos:verify reports both routers in sync.

Also records the drill result in the header, since "deployed" and "proven to
fail over" are different claims and only the second one is worth much.

2026-09-06 09:42:12 +01:00

..

_unifi.py

fix(migration): apply the reviewed reservation plan, not a recomputed one

2026-08-16 14:31:30 +01:00

.gitignore

feat(migration): export UniFi config and generate VyOS DHCP+DNS from it

2026-08-15 01:33:00 +01:00

CUTOVER.md

feat(migration): peer link cabled and verified; conntrack-sync enabled in deltas

2026-08-17 00:37:16 +01:00

he-tunnel-follow

feat(vyos): reconciler that keeps the HE 6in4 tunnel on the live WAN

2026-08-21 02:04:43 +01:00

MANAGEMENT-VLAN-TAGGED.md

labsim: prove the tagged-Management fix for kea's wrong-pool offers

2026-09-02 14:03:44 +01:00

ppp-vrrp-gate.conf

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

PPPOE-HA.md

PPPOE-HA: step 8 done -- model merged, zero drift

2026-09-06 09:42:12 +01:00

pulumi-override-pppoe-gated.json

labsim: the session-control matrix was never setting session-control

2026-09-06 00:15:45 +01:00

RECOVERY-CARD-vlan1-move.md

migration: offline recovery card, and stop the leak test trusting a silent router

2026-09-02 14:30:35 +01:00

RECOVERY-CARD-wan-panic.md

wan-panic: a one-command revert that works with no internet and no Claude

2026-09-06 09:29:23 +01:00

unifi-export.py

feat(migration): export UniFi config and generate VyOS DHCP+DNS from it

2026-08-15 01:33:00 +01:00

unifi-reserve-all.py

fix(migration): apply the reviewed reservation plan, not a recomputed one

2026-08-16 14:31:30 +01:00

unifi-reserve.py

feat(migration): pin firewall management NICs and reserve them in UniFi

2026-08-15 22:12:42 +01:00

unifi-to-vyos.py

chore(migration): all DNS through VyOS to Google, NAS out of the path

2026-08-16 17:16:17 +01:00

vrrp-wan-apply

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

vrrp-wan-guard

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

vrrp-wan-guard.service

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

vrrp-wan-guard.timer

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

vrrp-wan-health

vrrp-wan: size GRACE from the measured hostile failover, not the theory

2026-09-06 00:25:00 +01:00

vrrp-wan-install

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

vrrp-wan-reconcile

vrrp-wan: a flap holdoff must not tear down a live WAN session

2026-09-06 00:04:41 +01:00

vrrp-wan-reconcile.service

vyos: move PPPoE off the config plane onto a gated systemd unit

2026-09-05 18:50:16 +01:00

vrrp-wan-reconcile.timer

vyos: WAN follows VRRP mastership, rehearsed in labsim

2026-09-02 18:02:58 +01:00

vrrp-wan-release

vyos: WAN follows VRRP mastership, rehearsed in labsim

2026-09-02 18:02:58 +01:00

vrrp-wan-take

vyos: WAN follows VRRP mastership, rehearsed in labsim

2026-09-02 18:02:58 +01:00

vrrp-wan.conf

labsim: both matrices green end to end, numbers reproduced

2026-09-06 00:42:01 +01:00

vyos002-catch.sh

migration: the watcher that caught vyos002, and what it found

2026-09-02 15:51:47 +01:00

vyos002-return.conf

migration: vyos001 converted in production, and the config vyos002 needs first

2026-09-02 15:26:21 +01:00

vyos-known-good

feat(vyos): pin a known-good config and restore it with one command

2026-08-21 01:46:43 +01:00

vyos-mode-delta.py

vrrp-wan: a flap holdoff must not tear down a live WAN session

2026-09-06 00:04:41 +01:00

vyos-unifi-switch

fix(migration): the backup has no WAN by design; stop failing it for that

2026-08-18 01:48:48 +01:00

wan-drill

wan-drill: run the failover drill unattended, because the operator goes offline

2026-09-06 09:35:05 +01:00

wan-drill-watchdog

wan-drill-watchdog: bound the blast radius of a failover drill

2026-09-06 09:34:05 +01:00

wan-panic

wan-panic: a one-command revert that works with no internet and no Claude

2026-09-06 09:29:23 +01:00