7ee609913973c74f02c782da5b16e430bcda97d8
SPF / DKIM / DMARC for neurontechnologies.ai are managed via the Cloudflare API rather than Terraform because the cloudflare_record provider rewrites name="@" on apply, which forces replacement of the apex SPF record and opens a propagation gap. A duplicate (malformed-quoted) apex SPF that was causing Gmail to fail SPF was also removed via the API; the surviving record is the canonical one and is documented here for traceability.
infrastructure
Personal infrastructure-as-code for Legion (k3s home server) and supporting tooling.
| Doc | What it covers |
|---|---|
AGENTS.md |
Full reference: machines, secrets, services, domains, namespaces, common operations |
servers/legion/README.md |
What's running on Legion and how deployment works |
servers/legion/RUNBOOK.md |
Disaster recovery — full restore from scratch |
Quick start
cd servers/legion
direnv allow
terraform plan
terraform apply
Push to servers/ to deploy app changes via Argo CD.
Languages
HCL
78.4%
Shell
17.5%
Python
2.6%
Dockerfile
1.5%