4e10e58d58
URL-executable, idempotent bootstrap for Docker VMs (Ubuntu/Debian/RHEL): - ParentNodeBootstrapper.sh: base tooling, Docker+Compose v2, Tailscale or NetBird (key-gated registration), EDGE-PROXY-EXTERNAL/INTERNAL networks, Nginx UI edge proxy (host-mode 80/443, VPN-bound dashboard, ACME relay to HTTPChallengePort 9180), Dockhand with provisioned backup destination, default HTTPS routes (/nginxui/, /dockhand/) behind a generated self-signed cert, Webmin, iptables VMBOOT-* firewall, fail2ban on public hosts, weekly shuf-randomized patch/reboot cron, /custom skeleton with run logs (keep 3) - ChildNodeBootstrapper.sh: same baseline plus Hawser agent (standard/edge mode) and Webmin agent role; no public service ports - Auto-updates via Dockhand labels (dockhand.update; URL labels commented) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
4 lines
46 B
Plaintext
4 lines
46 B
Plaintext
* text=auto
|
|
*.sh text eol=lf
|
|
*.md text eol=lf
|