dtoro/oikos
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

inventory: real mesh state per host (no more placeholder netbird FQDNs)

Browse Source 
Audit against actual netbird+tailscale peer lists:
  - hubris is the only LXC-host on Netbird; only workstations + hubris
    have netbird entries
  - 10 LXCs+VMs have real Tailscale FQDNs: apps, jellyfin, paperless,
    gitea, nextcloud, elementsynapse, sophia, mule-images→muleimage,
    arriman→arr, haos→homeassistant
  - 7 hosts are LAN-only (no mesh block): nfs-export, caddy, claudio-bot,
    authentik, plato, mule-photos-new, zimaos
  - mac-mini's netbird FQDN corrected to the actual peer name
    (mac-mini-234-17.netbird.selfhosted)

Also: bin/homelab host_address() now prefers lan_ip first — universally
reachable from any LAN client and from any Netbird peer via the
192.168.8.0/24 network resource routed through hubris. Mesh FQDNs are
fallbacks for roaming workstations without a fixed lan_ip.

This makes 'homelab status' from republic show all backends 'ok' instead
of falsely reporting them 'down' against unresolvable netbird FQDNs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
root
2026-05-20 21:28:03 +02:00
parent e7a74f795d
commit 36a686d953
21 changed files with 56 additions and 103 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
bin/homelab
View File

@@ -55,18 +55,25 @@ def host(name: str) -> dict:
def host_address(name: str, prefer_lan: bool = False) -> str:
"""Best-effort single address for `name`.
Preference order is lan_ip first because:
- From any LAN client it's a direct route.
- From any Netbird peer it's routed through hubris's
192.168.8.0/24 network resource.
- From any Tailscale peer with subnet routing it works too.
Mesh FQDNs are fallbacks for hosts without a lan_ip (e.g. roaming
workstations).
"""
h = host(name)
mesh = h.get("mesh", {})
candidates = []
if prefer_lan and h.get("lan_ip"):
candidates.append(h["lan_ip"])
candidates.extend([
mesh.get("netbird", {}).get("fqdn") if isinstance(mesh.get("netbird"), dict) else None,
mesh.get("netbird", {}).get("ip") if isinstance(mesh.get("netbird"), dict) else None,
nb = mesh.get("netbird") if isinstance(mesh.get("netbird"), dict) else {}
ts = mesh.get("tailscale") if isinstance(mesh.get("tailscale"), dict) else {}
candidates = [
h.get("lan_ip"),
mesh.get("tailscale", {}).get("fqdn") if isinstance(mesh.get("tailscale"), dict) else None,
mesh.get("tailscale", {}).get("ip") if isinstance(mesh.get("tailscale"), dict) else None,
])
nb.get("fqdn"), nb.get("ip"),
ts.get("fqdn"), ts.get("ip"),
]
for c in candidates:
if c:
return c

3
hosts/apps.yaml
View File

@@ -9,10 +9,9 @@ host: hubris
pve_id: 105
lan_ip: 192.168.8.205
mesh:
netbird:
fqdn: apps.netbird.selfhosted
tailscale:
ip: 100.121.171.122
fqdn: apps
mesh_globals:
primary: netbird
accepted:

4
hosts/arriman.yaml
View File

@@ -9,8 +9,8 @@ host: hubris
pve_id: 122
lan_ip: 192.168.8.132
mesh:
netbird:
fqdn: arriman.netbird.selfhosted
tailscale:
fqdn: arr
mesh_globals:
primary: netbird
accepted:

3
hosts/authentik.yaml
View File

@@ -8,9 +8,6 @@ role: idp
host: hubris
pve_id: 124
lan_ip: 192.168.8.180
mesh:
netbird:
fqdn: authentik.netbird.selfhosted
mesh_globals:
primary: netbird
accepted:

3
hosts/caddy.yaml
View File

@@ -8,9 +8,6 @@ role: reverse-proxy
host: hubris
pve_id: 121
lan_ip: 192.168.8.175
mesh:
netbird:
fqdn: caddy.netbird.selfhosted
mesh_globals:
primary: netbird
accepted:

3
hosts/claudio-bot.yaml
View File

@@ -8,9 +8,6 @@ role: matrix-agent
host: hubris
pve_id: 123
lan_ip: 192.168.8.230
mesh:
netbird:
fqdn: claudio-bot.netbird.selfhosted
mesh_globals:
primary: netbird
accepted:

4
hosts/elementsynapse.yaml
View File

@@ -9,8 +9,8 @@ host: hubris
pve_id: 118
lan_ip: 192.168.8.239
mesh:
netbird:
fqdn: elementsynapse.netbird.selfhosted
tailscale:
fqdn: elementsynapse
mesh_globals:
primary: netbird
accepted:

4
hosts/gitea.yaml
View File

@@ -9,8 +9,8 @@ host: hubris
pve_id: 104
lan_ip: 192.168.8.121
mesh:
netbird:
fqdn: gitea.netbird.selfhosted
tailscale:
fqdn: gitea
mesh_globals:
primary: netbird
accepted:

4
hosts/haos.yaml
View File

@@ -8,8 +8,8 @@ role: home-automation
host: hubris
pve_id: 108
mesh:
netbird:
fqdn: haos.netbird.selfhosted
tailscale:
fqdn: homeassistant
mesh_globals:
primary: netbird
accepted:

4
hosts/jellyfin.yaml
View File

@@ -9,8 +9,8 @@ host: hubris
pve_id: 101
lan_ip: 192.168.8.206
mesh:
netbird:
fqdn: jellyfin.netbird.selfhosted
tailscale:
fqdn: jellyfin
mesh_globals:
primary: netbird
accepted:

2
hosts/mac-mini.yaml
View File

@@ -7,7 +7,7 @@ os: macos
role: dev
mesh:
netbird:
fqdn: mac-mini.netbird.selfhosted
fqdn: mac-mini-234-17.netbird.selfhosted
mesh_globals:
primary: netbird
accepted:

4
hosts/mule-images.yaml
View File

@@ -9,8 +9,8 @@ host: hubris
pve_id: 120
lan_ip: 192.168.8.136
mesh:
netbird:
fqdn: mule-images.netbird.selfhosted
tailscale:
fqdn: muleimage
mesh_globals:
primary: netbird
accepted:

3
hosts/mule-photos-new.yaml
View File

@@ -8,9 +8,6 @@ role: photo-management
host: hubris
pve_id: 127
lan_ip: 192.168.8.181
mesh:
netbird:
fqdn: mule-photos-new.netbird.selfhosted
mesh_globals:
primary: netbird
accepted:

4
hosts/nextcloud.yaml
View File

@@ -9,8 +9,8 @@ host: hubris
pve_id: 114
lan_ip: 192.168.8.224
mesh:
netbird:
fqdn: nextcloud.netbird.selfhosted
tailscale:
fqdn: nextcloud
mesh_globals:
primary: netbird
accepted:

3
hosts/nfs-export.yaml
View File

@@ -8,9 +8,6 @@ role: storage-export
host: hubris
pve_id: 102
lan_ip: 192.168.8.200
mesh:
netbird:
fqdn: nfs-export.netbird.selfhosted
mesh_globals:
primary: netbird
accepted:

4
hosts/paperless.yaml
View File

@@ -9,8 +9,8 @@ host: hubris
pve_id: 103
lan_ip: 192.168.8.130
mesh:
netbird:
fqdn: paperless.netbird.selfhosted
tailscale:
fqdn: paperless
mesh_globals:
primary: netbird
accepted:

3
hosts/plato.yaml
View File

@@ -8,9 +8,6 @@ role: app
host: hubris
pve_id: 126
lan_ip: 192.168.8.190
mesh:
netbird:
fqdn: plato.netbird.selfhosted
mesh_globals:
primary: netbird
accepted:

1
hosts/republic-laptop.yaml
View File

@@ -13,6 +13,5 @@ mesh_globals:
accepted:
- netbird
- tailscale
age_pubkey: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
mcp_endpoint: https://mcp.hubris.network/sse
secrets_issuance_endpoint: https://secrets.hubris.network/issue

4
hosts/sophia.yaml
View File

@@ -9,8 +9,8 @@ host: hubris
pve_id: 119
lan_ip: 192.168.8.157
mesh:
netbird:
fqdn: sophia.netbird.selfhosted
tailscale:
fqdn: sophia
mesh_globals:
primary: netbird
accepted:

3
hosts/zimaos.yaml
View File

@@ -7,9 +7,6 @@ os: linux
role: nas-frontend-eval
host: hubris
pve_id: 100
mesh:
netbird:
fqdn: zimaos.netbird.selfhosted
mesh_globals:
primary: netbird
accepted:

71
inventory.yaml
View File

@@ -119,8 +119,8 @@ hosts:
lan_ip: 192.168.8.206
public_host: media.hubris.network
mesh:
netbird:
fqdn: jellyfin.netbird.selfhosted
tailscale:
fqdn: jellyfin
mounts:
- /mnt/library
age_pubkey: ''
@@ -131,10 +131,6 @@ hosts:
os: linux
role: storage-export
lan_ip: 192.168.8.200
mesh:
netbird:
fqdn: nfs-export.netbird.selfhosted
age_pubkey: ''
paperless:
kind: lxc
pve_id: 103
@@ -144,8 +140,8 @@ hosts:
lan_ip: 192.168.8.130
public_host: paperless.hubris.network
mesh:
netbird:
fqdn: paperless.netbird.selfhosted
tailscale:
fqdn: paperless
mounts:
- /mnt/library
age_pubkey: ''
@@ -159,8 +155,8 @@ hosts:
public_host: git.hubris.network
backend_port: 3000
mesh:
netbird:
fqdn: gitea.netbird.selfhosted
tailscale:
fqdn: gitea
mounts:
- /mnt/library
notes:
@@ -176,10 +172,9 @@ hosts:
public_hosts:
- artifacto.hubris.network
mesh:
netbird:
fqdn: apps.netbird.selfhosted
tailscale:
ip: 100.121.171.122
fqdn: apps
mounts:
- /mnt/library
runs:
@@ -197,8 +192,8 @@ hosts:
lan_ip: 192.168.8.224
public_host: cloud.hubris.network
mesh:
netbird:
fqdn: nextcloud.netbird.selfhosted
tailscale:
fqdn: nextcloud
mounts:
- /mnt/library
age_pubkey: ''
@@ -211,9 +206,8 @@ hosts:
lan_ip: 192.168.8.239
public_host: matrix.hubris.network
mesh:
netbird:
fqdn: elementsynapse.netbird.selfhosted
age_pubkey: ''
tailscale:
fqdn: elementsynapse
sophia:
kind: lxc
pve_id: 119
@@ -222,8 +216,8 @@ hosts:
role: workshop
lan_ip: 192.168.8.157
mesh:
netbird:
fqdn: sophia.netbird.selfhosted
tailscale:
fqdn: sophia
mounts:
- /mnt/library
age_pubkey: ''
@@ -236,8 +230,8 @@ hosts:
lan_ip: 192.168.8.136
public_host: photos.hubris.network
mesh:
netbird:
fqdn: mule-images.netbird.selfhosted
tailscale:
fqdn: muleimage
mounts:
- /mnt/library
age_pubkey: ''
@@ -254,10 +248,6 @@ hosts:
peers:
- authentik
- gitea
mesh:
netbird:
fqdn: caddy.netbird.selfhosted
age_pubkey: ''
arriman:
kind: lxc
pve_id: 122
@@ -270,8 +260,8 @@ hosts:
- qbit.hubris.network
- sab.hubris.network
mesh:
netbird:
fqdn: arriman.netbird.selfhosted
tailscale:
fqdn: arr
mounts:
- /mnt/library
age_pubkey: ''
@@ -282,9 +272,6 @@ hosts:
os: linux
role: matrix-agent
lan_ip: 192.168.8.230
mesh:
netbird:
fqdn: claudio-bot.netbird.selfhosted
notes:
- Reads /opt/homelab-context/ on startup
age_pubkey: age1xmkeq968areza2necqyq0065dpeegngzyr6dhagh0n6pl33lccfqe5mqn9
@@ -298,10 +285,6 @@ hosts:
public_host: auth.hubris.network
notes:
- 'Also hosts split-horizon dnsmasq: /etc/dnsmasq.d/hubris-split.conf'
mesh:
netbird:
fqdn: authentik.netbird.selfhosted
age_pubkey: ''
plato:
kind: lxc
pve_id: 126
@@ -310,9 +293,6 @@ hosts:
role: app
lan_ip: 192.168.8.190
public_host: plato.hubris.network
mesh:
netbird:
fqdn: plato.netbird.selfhosted
mounts:
- /mnt/library/documents/plato
age_pubkey: ''
@@ -324,10 +304,6 @@ hosts:
role: photo-management
lan_ip: 192.168.8.181
public_host: photos-new.hubris.network
mesh:
netbird:
fqdn: mule-photos-new.netbird.selfhosted
age_pubkey: ''
zimaos:
kind: vm
pve_id: 100
@@ -335,10 +311,6 @@ hosts:
os: linux
role: nas-frontend-eval
public_host: zimaos.hubris.network
mesh:
netbird:
fqdn: zimaos.netbird.selfhosted
age_pubkey: ''
haos:
kind: vm
pve_id: 108
@@ -346,9 +318,8 @@ hosts:
os: linux
role: home-automation
mesh:
netbird:
fqdn: haos.netbird.selfhosted
age_pubkey: ''
tailscale:
fqdn: homeassistant
republic-laptop:
kind: workstation
os: linux
@@ -356,14 +327,13 @@ hosts:
mesh:
netbird:
fqdn: republic-laptop.netbird.selfhosted
age_pubkey: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
mac-mini:
kind: workstation
os: macos
role: dev
mesh:
netbird:
fqdn: mac-mini.netbird.selfhosted
fqdn: mac-mini-234-17.netbird.selfhosted
notes:
- Only macOS in the fleet. Bootstrap uses launchd.
age_pubkey: ''
@@ -374,4 +344,3 @@ hosts:
mesh:
netbird:
fqdn: ludo-mini.netbird.selfhosted
age_pubkey: ''