- Manage tail8d86e.ts.net ACLs, tags, and DNS via Pulumi + Python - State stored in Pulumi Cloud (free tier) to avoid circular dependency - OAuth authentication via 1Password for secure credential management - mise tasks: tailnet-preview, tailnet-up Two-layer approach: - Layer 1 (Pulumi): Tailnet-wide config (ACLs, tags, DNS) - Layer 2 (Ansible): Node-local tailscale serve config (unchanged) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
3 lines
128 B
TOML
3 lines
128 B
TOML
[tools]
|
|
"pipx:ansible-core" = { version = "latest", uvx = "true", uvx_args = "--with botocore --with boto3" }
|
|
pulumi = "latest"
|