Add ADRs for static backbone network and NixOS containers #214

Open

fabianhauser wants to merge 1 commit from adr-nixos-containers into main

fabianhauser commented

2026-11-01 21:12:05 +00:00

Owner

Two ADRs describing the target design for containers, derived from the review of the jellyfin branch, which will be reworked to match.

0001: a static WireGuard backbone between the physical hosts, carrying routed prefixes (wgautomesh resets peers to their /32).
0002: NixOS (nspawn) containers with routed IPs, ephemeral roots, idmapped state, credentials, knot DNS and kanidm SSO integration.
Agree on 10.249.0.0/24 for the backbone and 10.246.0.0/24 for host-agnostic container IPs
Agree that lindberg has no backbone endpoint (keepalive only) and cyprianspitz needs a new port forward on calanda
Agree on the proposed qois.containers.<name> interface

Two ADRs describing the target design for containers, derived from the review of the `jellyfin` branch, which will be reworked to match. - 0001: a static WireGuard `backbone` between the physical hosts, carrying routed prefixes (`wgautomesh` resets peers to their `/32`). - 0002: NixOS (nspawn) containers with routed IPs, ephemeral roots, idmapped state, credentials, knot DNS and kanidm SSO integration. - [ ] Agree on `10.249.0.0/24` for the backbone and `10.246.0.0/24` for host-agnostic container IPs - [ ] Agree that `lindberg` has no backbone endpoint (keepalive only) and `cyprianspitz` needs a new port forward on `calanda` - [ ] Agree on the proposed `qois.containers.<name>` interface

fabianhauser added 1 commit

2026-11-01 21:12:05 +00:00

Add ADRs for static backbone network and NixOS containers

CI / build (push) Successful in 2m10s

Details

CI / deploy (docs-ops.qo.is) (push) Has been skipped

Details

CI / deploy (system-physical) (push) Has been skipped

Details

CI / deploy (system-vm) (push) Has been skipped

Details

CI / deploy-ci (push) Has been skipped