From 610b096840d6080caa0b34bf76280aec60b2924d Mon Sep 17 00:00:00 2001 From: dtoro Date: Mon, 6 Jul 2026 13:41:52 +0200 Subject: [PATCH] Add Technitium DNS record for oikos.hubris.network MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit A record -> 192.168.8.175 (Caddy's LAN IP), created via Technitium's REST API (login -> createToken -> zones/records/add) in a single in-memory call. Neither the admin credential nor the resulting session/ API token was ever printed to output or written to disk, and the token wasn't persisted anywhere after the call completed — it existed only for the lifetime of that one process. Verified: dig @192.168.8.2 +short oikos.hubris.network -> 192.168.8.175. End-to-end confirmation that DNS + Caddy + the Authentik gate are all wired correctly: curl https://oikos.hubris.network/ now returns a 302 (the forward-auth redirect firing before the not-yet-deployed backend would even matter) instead of failing to resolve/connect. This closes out every part of the console rollout except the actual apps-side bootstrap (oikos/console/deploy/README.md "One-time setup"), which remains pending direct operator execution. Co-Authored-By: Claude Fable 5 --- ledger/2026-07.jsonl | 1 + oikos/console/deploy/README.md | 7 ++++++- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/ledger/2026-07.jsonl b/ledger/2026-07.jsonl index 0d8b4e9..31faa0a 100644 --- a/ledger/2026-07.jsonl +++ b/ledger/2026-07.jsonl @@ -1,3 +1,4 @@ {"ts": "2026-07-06T11:05:35+00:00", "agent": "mac-mini", "entity": "host:teddycloud", "action": "activate", "risk": "config_mutation", "verification": "homelab node teddycloud relations", "result": "ok"} {"ts": "2026-07-06T11:15:04+00:00", "agent": "mac-mini", "entity": "repo:Homelab-Docs", "action": "register-webhook", "risk": "config_mutation", "result": "ok", "notes": "webhook id 14 for oikos-console deploy"} {"ts": "2026-07-06T11:29:56+00:00", "agent": "mac-mini", "entity": "service:caddy", "action": "add-site-block", "risk": "config_mutation", "verification": "curl -s https://git.hubris.network (unrelated route still healthy after reload)", "result": "ok", "notes": "oikos.hubris.network -> 192.168.8.205:8091, Authentik-gated, in dtoro/caddy-conf@c195142"} +{"ts": "2026-07-06T11:40:28+00:00", "agent": "mac-mini", "entity": "host:dns", "action": "add-record", "risk": "config_mutation", "verification": "dig @192.168.8.2 +short oikos.hubris.network", "result": "ok", "notes": "oikos.hubris.network A -> 192.168.8.175 (Caddy LAN IP), via Technitium API, no token persisted"} diff --git a/oikos/console/deploy/README.md b/oikos/console/deploy/README.md index 8124c48..92f6e07 100644 --- a/oikos/console/deploy/README.md +++ b/oikos/console/deploy/README.md @@ -32,7 +32,12 @@ webhook on `dtoro/Homelab-Docs`, port :9831. unreachable once deployed. Now binds `0.0.0.0`, matching `homelab-mcp`'s convention (trust boundary is LAN/mesh + the Authentik gate, not the bind address). -- **DNS entry: not yet done.** +- **DNS entry: done.** `oikos.hubris.network` A record added via + Technitium's REST API (login → createToken → zones/records/add, all + in one in-memory call; the session/API token was never printed or + written to disk, and wasn't persisted anywhere after the call + completed). Verified: `dig @192.168.8.2 +short oikos.hubris.network` + → `192.168.8.175`. ## One-time setup on apps (105)