docs(dns): document DNS zone layout for all three networks
Check NixOS configurations / eval-hosts (push) Failing after 14m52s

Adds a DNS Zones section to ip-addressing.md covering the three FreeIPA
zones (sweet.home / cluster.home / storage.home) with all A records and PTR
records as configured. Updates Stage 6 in network-cutover.md to reference
nfs.storage.home by DNS name rather than the raw VIP IP, and marks DNS as a
completed prerequisite for the HA storage cutover.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J8djTWdXVzXZc99iujU6T2
This commit is contained in:
2026-07-29 20:12:25 +10:00
co-authored by Claude Sonnet 4.6
parent 4f0b07031d
commit 944af9597d
2 changed files with 71 additions and 5 deletions
+9 -5
View File
@@ -338,9 +338,11 @@ temporarily use either.
## Stage 6 — HA storage cutover (docker NFS remount)
> **Prerequisite:** HA cluster fully deployed and `vip-storage` (192.168.20.229) serving
> NFS. docker CT must have eth1 on vmbr2 (already done). Final rsync from server.sweet.home
> to `/srv/ha-data` must be complete before this stage.
> **Prerequisites:**
> - HA cluster fully deployed and `vip-storage` (`nfs.storage.home` → 192.168.20.229) serving NFS ✓
> - DNS configured: `storage.home` zone populated, `nfs.storage.home` resolves to 192.168.20.229 ✓
> - docker CT has eth1 on vmbr2 (`docker.storage.home` → 192.168.20.225) ✓
> - Final rsync from server.sweet.home to `/srv/ha-data` complete before step 6b
docker.sweet.home currently NFS-mounts its persistent volumes from `server.sweet.home`
(`192.168.2.226:/tank/docker/...`). This stage moves those mounts to the HA cluster's
@@ -365,7 +367,7 @@ sudo rsync -av --delete /tank/docker/nextcloud-data/ wayne@<active-node-ip>:/srv
### 6b. Update docker NixOS config to mount from vip-storage
In `hosts/docker/host.nix` (or wherever the NFS mount fileSystems are declared), change
the NFS server from `server.sweet.home` / `192.168.2.226` to `192.168.20.229`:
the NFS server from `server.sweet.home` / `192.168.2.226` to `nfs.storage.home`:
```nix
# Before:
@@ -376,11 +378,13 @@ fileSystems."/mnt/docker/config" = {
# After:
fileSystems."/mnt/docker/config" = {
device = "192.168.20.229:/srv/ha-data/docker/config";
device = "nfs.storage.home:/srv/ha-data/docker/config";
...
};
```
Using the DNS name (`nfs.storage.home`) rather than the VIP IP means the mount
config survives a future VIP renumber without touching the NixOS config.
Repeat for all four docker shares (`config`, `databases`, `volumes`, `nextcloud-data`).
Then rebuild docker: