feat/vpn-nordlynx #4

Merged
Augspies merged 5 commits from feat/vpn-nordlynx into main 2026-09-03 07:20:46 +02:00
Owner
No description provided.
UDP 1194 to NordVPN is throttled/fragment-dropped on the ISP path;
TCP 443 is the known-good fallback (5.96 MB/s, 0% loss, verified
2026-09-01). This is the rollback target for the NordLynx switch.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
WireGuard runs in kernel space and uses UDP 51820, avoiding both the
UDP 1194 throttling seen on the OpenVPN path and TCP-over-TCP overhead.
Rollback: git revert this commit -> returns to OpenVPN over TCP 443.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
All 15 live PVs moved; data relocated with matching dir names under
/m/appdata (same filesystem, no copying). minecraft-backup.sh and
/m/compose/justfile paths updated out-of-band.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- site.yaml: expatgibs prod+staging tasks -> single bgutil task
- production overlay: base/pv/ingress/generators removed, bgutil only
- namespaces.yaml: drop forgejo, expatgibs-staging, virtualatty-*
- clusters/local: remove hygiene kustomization (broken 60d; forgejo
  and virtualatty are remote-cluster items now)
- vars.yaml: remove expatgibs secret targets

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Augspies/kube!4
No description provided.