inventory: real mesh state per host (no more placeholder netbird FQDNs)

Audit against actual netbird+tailscale peer lists:
  - hubris is the only LXC-host on Netbird; only workstations + hubris
    have netbird entries
  - 10 LXCs+VMs have real Tailscale FQDNs: apps, jellyfin, paperless,
    gitea, nextcloud, elementsynapse, sophia, mule-images→muleimage,
    arriman→arr, haos→homeassistant
  - 7 hosts are LAN-only (no mesh block): nfs-export, caddy, claudio-bot,
    authentik, plato, mule-photos-new, zimaos
  - mac-mini's netbird FQDN corrected to the actual peer name
    (mac-mini-234-17.netbird.selfhosted)

Also: bin/homelab host_address() now prefers lan_ip first — universally
reachable from any LAN client and from any Netbird peer via the
192.168.8.0/24 network resource routed through hubris. Mesh FQDNs are
fallbacks for roaming workstations without a fixed lan_ip.

This makes 'homelab status' from republic show all backends 'ok' instead
of falsely reporting them 'down' against unresolvable netbird FQDNs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

hosts/apps.yaml

@@ -9,10 +9,9 @@ host: hubris
 pve_id: 105
 lan_ip: 192.168.8.205
 mesh:
-  netbird:
-    fqdn: apps.netbird.selfhosted
   tailscale:
     ip: 100.121.171.122
+    fqdn: apps
 mesh_globals:
   primary: netbird
   accepted:

hosts/arriman.yaml

@@ -9,8 +9,8 @@ host: hubris
 pve_id: 122
 lan_ip: 192.168.8.132
 mesh:
-  netbird:
-    fqdn: arriman.netbird.selfhosted
+  tailscale:
+    fqdn: arr
 mesh_globals:
   primary: netbird
   accepted:

hosts/authentik.yaml

@@ -8,9 +8,6 @@ role: idp
 host: hubris
 pve_id: 124
 lan_ip: 192.168.8.180
-mesh:
-  netbird:
-    fqdn: authentik.netbird.selfhosted
 mesh_globals:
   primary: netbird
   accepted:

hosts/caddy.yaml

@@ -8,9 +8,6 @@ role: reverse-proxy
 host: hubris
 pve_id: 121
 lan_ip: 192.168.8.175
-mesh:
-  netbird:
-    fqdn: caddy.netbird.selfhosted
 mesh_globals:
   primary: netbird
   accepted:

hosts/claudio-bot.yaml

@@ -8,9 +8,6 @@ role: matrix-agent
 host: hubris
 pve_id: 123
 lan_ip: 192.168.8.230
-mesh:
-  netbird:
-    fqdn: claudio-bot.netbird.selfhosted
 mesh_globals:
   primary: netbird
   accepted:

hosts/elementsynapse.yaml

@@ -9,8 +9,8 @@ host: hubris
 pve_id: 118
 lan_ip: 192.168.8.239
 mesh:
-  netbird:
-    fqdn: elementsynapse.netbird.selfhosted
+  tailscale:
+    fqdn: elementsynapse
 mesh_globals:
   primary: netbird
   accepted:

hosts/gitea.yaml

@@ -9,8 +9,8 @@ host: hubris
 pve_id: 104
 lan_ip: 192.168.8.121
 mesh:
-  netbird:
-    fqdn: gitea.netbird.selfhosted
+  tailscale:
+    fqdn: gitea
 mesh_globals:
   primary: netbird
   accepted:

hosts/haos.yaml

@@ -8,8 +8,8 @@ role: home-automation
 host: hubris
 pve_id: 108
 mesh:
-  netbird:
-    fqdn: haos.netbird.selfhosted
+  tailscale:
+    fqdn: homeassistant
 mesh_globals:
   primary: netbird
   accepted:

hosts/jellyfin.yaml

@@ -9,8 +9,8 @@ host: hubris
 pve_id: 101
 lan_ip: 192.168.8.206
 mesh:
-  netbird:
-    fqdn: jellyfin.netbird.selfhosted
+  tailscale:
+    fqdn: jellyfin
 mesh_globals:
   primary: netbird
   accepted:

hosts/mac-mini.yaml

@@ -7,7 +7,7 @@ os: macos
 role: dev
 mesh:
   netbird:
-    fqdn: mac-mini.netbird.selfhosted
+    fqdn: mac-mini-234-17.netbird.selfhosted
 mesh_globals:
   primary: netbird
   accepted:

hosts/mule-images.yaml

@@ -9,8 +9,8 @@ host: hubris
 pve_id: 120
 lan_ip: 192.168.8.136
 mesh:
-  netbird:
-    fqdn: mule-images.netbird.selfhosted
+  tailscale:
+    fqdn: muleimage
 mesh_globals:
   primary: netbird
   accepted:

hosts/mule-photos-new.yaml

@@ -8,9 +8,6 @@ role: photo-management
 host: hubris
 pve_id: 127
 lan_ip: 192.168.8.181
-mesh:
-  netbird:
-    fqdn: mule-photos-new.netbird.selfhosted
 mesh_globals:
   primary: netbird
   accepted:

hosts/nextcloud.yaml

@@ -9,8 +9,8 @@ host: hubris
 pve_id: 114
 lan_ip: 192.168.8.224
 mesh:
-  netbird:
-    fqdn: nextcloud.netbird.selfhosted
+  tailscale:
+    fqdn: nextcloud
 mesh_globals:
   primary: netbird
   accepted:

hosts/nfs-export.yaml

@@ -8,9 +8,6 @@ role: storage-export
 host: hubris
 pve_id: 102
 lan_ip: 192.168.8.200
-mesh:
-  netbird:
-    fqdn: nfs-export.netbird.selfhosted
 mesh_globals:
   primary: netbird
   accepted:

hosts/paperless.yaml

@@ -9,8 +9,8 @@ host: hubris
 pve_id: 103
 lan_ip: 192.168.8.130
 mesh:
-  netbird:
-    fqdn: paperless.netbird.selfhosted
+  tailscale:
+    fqdn: paperless
 mesh_globals:
   primary: netbird
   accepted:

hosts/plato.yaml

@@ -8,9 +8,6 @@ role: app
 host: hubris
 pve_id: 126
 lan_ip: 192.168.8.190
-mesh:
-  netbird:
-    fqdn: plato.netbird.selfhosted
 mesh_globals:
   primary: netbird
   accepted:

hosts/republic-laptop.yaml

@@ -13,6 +13,5 @@ mesh_globals:
   accepted:
   - netbird
   - tailscale
-age_pubkey: age1vf8h7s8mqsn2q5eadgpdupsj4mwn8zguc77d85ws3xj40sl9rgksx2rxw6
 mcp_endpoint: https://mcp.hubris.network/sse
 secrets_issuance_endpoint: https://secrets.hubris.network/issue

hosts/sophia.yaml

@@ -9,8 +9,8 @@ host: hubris
 pve_id: 119
 lan_ip: 192.168.8.157
 mesh:
-  netbird:
-    fqdn: sophia.netbird.selfhosted
+  tailscale:
+    fqdn: sophia
 mesh_globals:
   primary: netbird
   accepted:

hosts/zimaos.yaml

@@ -7,9 +7,6 @@ os: linux
 role: nas-frontend-eval
 host: hubris
 pve_id: 100
-mesh:
-  netbird:
-    fqdn: zimaos.netbird.selfhosted
 mesh_globals:
   primary: netbird
   accepted: