Will Anderson 48106b27ec vault: cut over to GCE Raft HA cluster, retire nook.family media stack ...

- dns-neuralplatform.tf: add vault.neuralplatform.ai A record → 34.54.164.21 (GCP LB)
  DNS-only (not proxied) so GCP managed TLS cert can provision correctly
- main.tf: remove vault.neuralplatform.ai from Cloudflare tunnel ingress
  (now served directly via GCP Global HTTPS LB)
- main.tf: remove watch.nook.family, jellyfin.nook.family, bazarr.nook.family
  from tunnel ingress (nook.family media stack retired; infra is Neuron-focused)

GCE Vault cluster already initialized and running (3-node Raft, active since
2026-05-04T16:05). Secrets migrated 48/48 from k3s vault. ESO ClusterSecretStore
validated against new vault. k3s vault-0 is now superseded.

2026-05-04 16:40:03 -05:00

..

gcp

vault: GCE Raft HA cluster replacing defunct Legion k3s deployment

2026-05-04 10:17:12 -05:00

legion

vault: cut over to GCE Raft HA cluster, retire nook.family media stack

2026-05-04 16:40:03 -05:00