T

Will Anderson e1996d4396 Switch to gluetun native ProtonVPN port forwarding (VPN_PORT_FORWARDING=on)

Replaces DIY natpmpc sidecar with gluetun's built-in NAT-PMP handling for the protonvpn
provider. The natpmpc UDP response was being dropped by gluetun's firewall since conntrack
doesn't track stateless UDP from the gateway. With VPN_PORT_FORWARDING=on, gluetun handles
the NAT-PMP exchange internally and exposes the port at :8000/v1/openvpn/portforwarded.
Helper sidecar now just polls that endpoint.

2026-04-11 09:57:07 -05:00

docs

Fix gitea_domain variable and add VPN/Headscale infrastructure

2026-03-25 08:44:20 -05:00

servers/legion

Switch to gluetun native ProtonVPN port forwarding (VPN_PORT_FORWARDING=on)

2026-04-11 09:57:07 -05:00

.gitignore

Initial commit — migrate legion Terraform from infrastructure repo

2026-03-23 07:35:03 -05:00

Agents.md

docs: sync infrastructure docs with actual running state

2026-03-25 15:59:12 -05:00

README.md

fix: gitea runner workingDir, README updates, monitoring domain

2026-03-24 12:55:29 -05:00

README.md

infrastructure

Personal infrastructure-as-code for Legion (k3s home server) and supporting tooling.

Doc	What it covers
`AGENTS.md`	Full reference: machines, secrets, services, domains, namespaces, common operations
`servers/legion/README.md`	What's running on Legion and how deployment works
`servers/legion/RUNBOOK.md`	Disaster recovery — full restore from scratch

Quick start

cd servers/legion
direnv allow
terraform plan
terraform apply

Push to servers/ to deploy app changes via Argo CD.