T

Will Anderson 087c5a79f4 Add native DNS-over-TLS (DoT) on dot.nook.family:853

- ddclient.tf: dynamic DNS daemon that keeps dot.nook.family A record
  pointing at the home public IP via Cloudflare API (updates every 5m)
- adguard.tf: cert-manager Certificate for dot.nook.family via DNS-01,
  updated TLS config block with DoT paths and port 853
- apps/adguard.yaml: mount adguard-dot-tls secret, expose port 853,
  init container enforces TLS/DoT settings on every restart
- adguard.tf: fix stale neuralplatform.dev → neuralplatform.ai rewrite

Android Private DNS: set to dot.nook.family
Router: forward TCP 853 → 192.168.68.77

2026-03-24 09:27:21 -05:00

servers/legion

Add native DNS-over-TLS (DoT) on dot.nook.family:853

2026-03-24 09:27:21 -05:00

.gitignore

Initial commit — migrate legion Terraform from infrastructure repo

2026-03-23 07:35:03 -05:00

Agents.md

Move AdGuard to dns.nook.family, fix Agents.md service domains

2026-03-23 10:43:38 -05:00

README.md

Restructure: servers/legion/ layout, rename repo to infrastructure

2026-03-23 07:38:42 -05:00

README.md

infrastructure

Personal infrastructure-as-code — servers, networking, DNS, and config.

Structure

servers/legion/ — Legion k3s cluster (Terraform)

Usage

cd servers/legion
direnv allow   # loads credentials from ~/Secrets/credentials/infrastructure.env
terraform plan
terraform apply