Erich Blume c5d82b0942 Trust k3s CNI interfaces in ringtail NixOS firewall ... The NixOS firewall was blocking pod-to-host TCP traffic because only tailscale0 was trusted. Pods could ping the host but not reach the API server (port 6443), breaking Tailscale Ingress TLS cert refresh and all ringtail services (authentik, frigate, ntfy, ollama). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>		2026-03-03 11:15:02 -08:00
..
configuration.nix	Trust k3s CNI interfaces in ringtail NixOS firewall	2026-03-03 11:15:02 -08:00
disk-config.nix	Add NixOS configuration for ringtail workstation (#207)	2026-02-18 08:24:25 -08:00
flake.lock	Update ringtail flake inputs	2026-02-27 15:22:29 -08:00
flake.nix	Use nix eval instead of dagger for nix runner version extraction	2026-02-20 23:21:16 -08:00
hardware-configuration.nix	Add NixOS configuration for ringtail workstation (#207)	2026-02-18 08:24:25 -08:00
k3s-registries.yaml	Add k3s, 1Password Connect, and systemd nix-container-builder to ringtail (#209)	2026-02-18 21:15:30 -08:00