2 Commits

Include renames

Author	SHA1	Message	Date
beatzaplentyandClaude Sonnet 4.6	8c86144694	docs(ha): update docs to reflect implemented network segmentation ... ip-addressing.md: - Storage-client network purpose updated: NFS primary, iSCSI available - Protocol separation box updated: NFS on both VIPs (each CIDR-restricted); iSCSI on VLAN 20 only but not in active use - docker role updated to NFS client (not iSCSI initiator) - vip-storage description updated to NFS + iSCSI endpoint ha-network-audit.md: - Implementation status header added noting all audit items resolved - Records decisions that diverged from original recommendations (VLAN renumbering, dual VIP, NFS-over-iSCSI for docker/swarm) - Notes deferred items (STONITH, iSCSI ACLs) network-cutover.md: - New Stage 6: HA storage cutover — docker NFS remount from server.sweet.home to vip-storage (192.168.20.229), final rsync steps, and server.sweet.home decommission procedure - Former Stage 6 (final cleanup) renumbered to Stage 7 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J8djTWdXVzXZc99iujU6T2	2026-07-29 19:04:42 +10:00
beatzaplentyandClaude Sonnet 4.6	4444398cac	fix(network): wire correct IPs throughout and add cutover plan ... variables.nix: - HA server LAN IPs: .200/.201/.202 → .228/.227/.229 (from ip-addressing.md) - Add haServer1StorageIp (.228), haServer2StorageIp (.227) for 192.168.4.0/29 - Add haStorageCidr for firewall rules ha-server host.nix (both nodes): - Add ens19 interface on storage subnet (/29) - Fix defaultGateway: 192.168.2.1 → 192.168.2.254 - Fix nameservers: 192.168.2.1/8.8.8.8 → domainControllerIp (.253) cluster-config.nix: - DRBD replication addresses: LAN IPs → storage IPs (keep replication off LAN) - Corosync ring_addrs: LAN IPs → storage IPs - Firewall: add haStorageCidr to allowed sources docs/network-cutover.md: step-by-step cutover plan with rollback at every stage Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-07-27 12:32:54 +10:00