Erich Blume a45a78b478 Convert wiki-links to title-based format (#89 )

## Summary
- Add `doc-card-titles` mise task to enumerate all doc cards by title/id and detect duplicates
- Remove redundant aliases from zk cards where alias matched the id
- Rename `reference/storage/postgresql.md` title to "PostgreSQL Storage" to avoid duplicate with `reference/services/postgresql.md`
- Convert all 175 path-based wiki-links `[[reference/path|Title]]` to title-based `[[Title]]` format
- Add pre-commit hook to check for duplicate card titles on doc changes

## Deployment and Testing
- [x] Pre-commit hooks pass
- [x] `mise run doc-card-titles` shows no duplicates
- [ ] Verify wiki-links work correctly in Quartz build

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/89

2026-02-03 15:04:38 -08:00

1.6 KiB

Raw Blame History

aliases

Pulumi Tailnet IaC Management Log

Pulumi manages the tail8d86e.ts.net tailnet configuration, including ACLs, tags, and DNS settings.

Architecture

Two-layer approach:

Layer 1 (Pulumi): Tailnet-wide config - ACLs, tags, DNS (this card)
Layer 2 (Ansible): Node-local tailscale serve config - see tailscale_serve role

Service Details

State backend: Pulumi Cloud (https://app.pulumi.com/eblume/blumeops-tailnet)
Stack: tail8d86e
Config directory: pulumi/ in blumeops repo
Policy file: pulumi/policy.hujson (HuJSON with comments)

Authentication

Uses OAuth client stored in 1Password (blumeops vault):

Client configured with scopes: acl, dns, devices, services
Auto-applies tag:blumeops to IaC-managed resources

Useful Commands

# Preview changes
mise run tailnet-preview

# Apply changes
mise run tailnet-up

# View current state
mise run tailnet-preview

# Pass additional args
mise run tailnet-up -- --yes

Making ACL Changes

Edit pulumi/policy.hujson in the blumeops repo
Run mise run tailnet-preview to see what will change
Run mise run tailnet-up to apply
Commit and push

What's Managed

Currently managed by Pulumi:

ACL policy (tailscale:index:Acl)

Can be added later:

DNS nameservers (tailscale:index:DnsNameservers)
DNS search paths (tailscale:index:DnsSearchPaths)
Tailnet settings (tailscale:index:TailnetSettings)

Log

Wed Jan 15 2026

Initial setup with Pulumi + Python
Imported existing ACL from Tailscale
State stored in Pulumi Cloud (free tier)
OAuth authentication via 1Password

1.6 KiB Raw Blame History