Archived
beatzaplentyandClaude Sonnet 4.6
78fdf3d94c
- Document bidirectional LAN ↔ Tailscale routing via tailscale-router (static route on router for 100.64.0.0/10, subnet advertisement into Tailnet) - Document DNS proxy chain: FreeIPA conditional forwarder for *.ts.net → tailscale-router → MagicDNS; reverse for *.sweet.home from Tailscale clients - Remove stale pihole.sweet.home from IP table (decommissioned) - Fix freeipa role: remove Pi-hole IP from ipa_dns_forwarder, document ts.net conditional forwarder as a post-install step - Fix inventory: remove Pi-hole forwarder IP, add ts.net forwarder note Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UvNjoxTWEDkhXsd1Dq2ETP
20 lines
869 B
YAML
20 lines
869 B
YAML
---
|
|
# freeipa role defaults — all overridable in inventory host_vars or group_vars.
|
|
# Most values come from the per-host inventory (see hosts.yml).
|
|
|
|
ipa_realm: "SWEET.HOME"
|
|
ipa_domain: "sweet.home"
|
|
|
|
# Set these per-host in inventory/hosts.yml:
|
|
# ipa_hostname: "domain-controller.sweet.home"
|
|
# ipa_ip: "192.168.2.253"
|
|
# ipa_dns_forwarder: "<router_gateway_ip>" # upstream resolver for non-sweet.home queries
|
|
#
|
|
# Note: the conditional forwarder for *.ts.net → tailscale-router (192.168.2.222)
|
|
# is configured post-install via `ipa dnsforwardzone-add tail13f623.ts.net --forwarder=192.168.2.222`.
|
|
# This is what allows LAN clients to resolve Tailscale hostnames through FreeIPA.
|
|
# The NixOS tailscale-router build type configures the other direction automatically.
|
|
|
|
# Swap file created if no swap exists (FreeIPA needs headroom during install)
|
|
ipa_swap_size_mb: 2048
|