Merge pull request 'feat: add externaldns hosts' (#37 ) from benvin/externaldns into master

Reviewed-on: #37
feat: add externaldns hosts
2025-11-22 23:24:38 +11:00 · 2025-11-21 23:12:07 +11:00 · 2025-11-01 14:29:44 +11:00 · 2025-11-01 13:59:57 +11:00 · 2025-11-01 12:34:22 +11:00 · 2025-11-01 00:51:58 +11:00
246 changed files with 2620 additions and 504 deletions
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@ -0,0 +1,32 @@
+---
+name: Build
+
+on:
+  pull_request:
+
+jobs:
+  build:
+    runs-on: almalinux-8
+    container:
+      image: git.unkin.net/unkin/almalinux9-actionsdind:latest
+      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Fetch master branch
+        run: |
+          git fetch origin master:master
+
+      - name: Show changed files
+        run: |
+          git diff --name-only master
+
+      - name: Run Terraform Plan
+        env:
+          VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
+        run: |
+          make plan
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@ -0,0 +1,26 @@
+---
+name: Deploy
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  deploy:
+    runs-on: almalinux-8
+    container:
+      image: git.unkin.net/unkin/almalinux9-actionsdind:latest
+      options: "--privileged --volume /etc/pki/tls/vault:/etc/pki/tls/vault:ro"
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+
+      - name: Run Terraform Apply
+        env:
+          VAULT_ROLEID: ${{ secrets.TERRAFORM_INCUS_VAULT_ROLEID }}
+        run: |
+          make apply
--- a/33
+++ b/33
@ -10,8 +10,27 @@ define vault_env
 	export PUPPET_CERT_CA=$$(vault kv get -field=public_key kv/service/puppet/certificates/ca) && \
 	export PUPPET_CERT_PUB=$$(vault kv get -field=public_key kv/service/puppet/certificates/terraform) && \
 	export PUPPET_CERT_PRIV=$$(vault kv get -field=private_key kv/service/puppet/certificates/terraform) && \
-	export TERRAGRUNT_EXCLUDE_DIR="templates/base" \
-	export $$(vault read -format=json kv/data/service/terraform/incus | jq -r '.data.data | to_entries[] | "\(.key)=\(.value)"')
+	export TG_QUEUE_EXCLUDE_DIR="templates/base" && \
+	export TG_PROVIDER_CACHE=1 && \
+	export TG_TF_PATH=terraform && \
+	eval "$$(vault read -format=json kv/data/service/terraform/incus \
+	  | jq -r '.data.data | to_entries[] | "export \(.key)=\(.value|@sh)"')" && \
+	export INCUS_CONFIG_DIR=$$(mktemp -d) && \
+	trap "rm -rf $$INCUS_CONFIG_DIR" EXIT && \
+	mkdir -p $$INCUS_CONFIG_DIR && \
+	mkdir -p $$INCUS_CONFIG_DIR/servercerts && \
+	printf '%s\n' "$$INCUS_CONF_INCUSIMAGES_CERT" > $$INCUS_CONFIG_DIR/servercerts/incus-images.crt && \
+	printf '%s\n' "$$INCUS_CONF_CONFIG_YAML" > $$INCUS_CONFIG_DIR/config.yml && \
+	if [ -f /etc/pki/tls/vault/certificate.crt ] && [ -f /etc/pki/tls/vault/private.key ]; then \
+		cp /etc/pki/tls/vault/certificate.crt $$INCUS_CONFIG_DIR/client.crt && \
+		cp /etc/pki/tls/vault/private.key $$INCUS_CONFIG_DIR/client.key; \
+	elif [ -f $$HOME/.config/incus/client.crt ] && [ -f $$HOME/.config/incus/client.key ]; then \
+		cp $$HOME/.config/incus/client.crt $$INCUS_CONFIG_DIR/client.crt && \
+		cp $$HOME/.config/incus/client.key $$INCUS_CONFIG_DIR/client.key; \
+	else \
+		printf '%s\n' "$$INCUS_CLIENT_CRT" > $$INCUS_CONFIG_DIR/client.crt && \
+		printf '%s\n' "$$INCUS_CLIENT_KEY" > $$INCUS_CONFIG_DIR/client.key; \
+	fi
 endef

 clean:
@ -23,20 +42,20 @@ clean:

 init:
 	@$(call vault_env) && \
-	terragrunt run-all --terragrunt-non-interactive init --upgrade
+	terragrunt run --all --non-interactive init -- -upgrade

 plan: init
 	@$(call vault_env) && \
-	terragrunt run-all --terragrunt-parallelism 8 --terragrunt-non-interactive plan
+	terragrunt run --all --parallelism 4 --non-interactive plan

-apply:
+apply: init
 	@$(call vault_env) && \
-	terragrunt run-all --terragrunt-parallelism 5 --terragrunt-non-interactive apply
+	terragrunt run --all --parallelism 2 --non-interactive apply

 output:
 	@$(call vault_env) && \
 	rm -f tf_outputs.json && \
-	terragrunt run-all --terragrunt-parallelism 10 --terragrunt-non-interactive output -json >> tf_outputs.json
+	terragrunt run --all --parallelism 10 --non-interactive output -json >> tf_outputs.json

 hiera:
 	@echo "Setting up virtual environment with uv..."
--- a/config/globals/profiles.yaml
+++ b/config/globals/profiles.yaml
@ -1,4 +1,3 @@
-# special devices
 gpu:
  description: "Pass-through Intel GPU"
  project: null
@ -160,6 +159,16 @@ shared_apps_jellyfin:
      properties:
        source: /shared/apps/jellyfin
        path: /shared/apps/jellyfin
+shared_apps_maildata:
+  description: "Mount /shared/apps/maildata directly into the container"
+  project: null
+  config: {}
+  devices:
+    - type: disk
+      name: maildata-shared
+      properties:
+        source: /shared/apps/maildata
+        path: /shared/apps/maildata

 # storage
 disk10:
@ -296,6 +305,16 @@ net_dmz1_eth1:
    limits.memory.enforce: hard
    limits.memory.swap: false
  devices: []
+2core3072:
+  description: "2 cores, 3GB RAM"
+  project: null
+  config:
+    boot.autostart: true
+    limits.cpu: 2
+    limits.memory: 3072MB
+    limits.memory.enforce: hard
+    limits.memory.swap: false
+  devices: []
 2core4096:
  description: "2 cores, 4GB RAM"
  project: null
@ -306,6 +325,16 @@ net_dmz1_eth1:
    limits.memory.enforce: hard
    limits.memory.swap: false
  devices: []
+2core6144:
+  description: "2 cores, 6GB RAM"
+  project: null
+  config:
+    boot.autostart: true
+    limits.cpu: 2
+    limits.memory: 6144MB
+    limits.memory.enforce: hard
+    limits.memory.swap: false
+  devices: []
 4core4096:
  description: "4 cores, 4GB RAM"
  project: null
@ -316,6 +345,16 @@ net_dmz1_eth1:
    limits.memory.enforce: hard
    limits.memory.swap: false
  devices: []
+4core6144:
+  description: "4 cores, 6GB RAM"
+  project: null
+  config:
+    boot.autostart: true
+    limits.cpu: 4
+    limits.memory: 6144MB
+    limits.memory.enforce: hard
+    limits.memory.swap: false
+  devices: []
 4core8192:
  description: "4 cores, 8GB RAM"
  project: null
--- a/config/instances/ausyd1nxvm2000/config.yaml
+++ b/config/instances/ausyd1nxvm2000/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
  - name: hashicorp-vault
    type: disk
--- a/config/instances/ausyd1nxvm2000/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2000/terragrunt.hcl
@ -27,21 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-  #before_hook "load_node_Venv" {
-  #  commands = ["apply", "plan", "destroy", "init"]
-  #  execute  = ["bash", "-c", "../../../../../../ci/set_node_env.sh"]
-  #}
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -54,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2001/config.yaml
+++ b/config/instances/ausyd1nxvm2001/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
  - name: hashicorp-vault
    type: disk
--- a/config/instances/ausyd1nxvm2001/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2001/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2002/config.yaml
+++ b/config/instances/ausyd1nxvm2002/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
  - name: hashicorp-vault
    type: disk
--- a/config/instances/ausyd1nxvm2002/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2002/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2003/config.yaml
+++ b/config/instances/ausyd1nxvm2003/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
  - name: hashicorp-vault
    type: disk
--- a/config/instances/ausyd1nxvm2003/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2003/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2004/config.yaml
+++ b/config/instances/ausyd1nxvm2004/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 disk_devices:
  - name: hashicorp-vault
    type: disk
--- a/config/instances/ausyd1nxvm2004/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2004/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2005/config.yaml
+++ b/config/instances/ausyd1nxvm2005/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
  consul:
    pool: fastpool
--- a/config/instances/ausyd1nxvm2005/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2005/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2006/config.yaml
+++ b/config/instances/ausyd1nxvm2006/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
  consul:
    pool: fastpool
--- a/config/instances/ausyd1nxvm2006/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2006/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2007/config.yaml
+++ b/config/instances/ausyd1nxvm2007/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
  consul:
    pool: fastpool
--- a/config/instances/ausyd1nxvm2007/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2007/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2008/config.yaml
+++ b/config/instances/ausyd1nxvm2008/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
  consul:
    pool: fastpool
--- a/config/instances/ausyd1nxvm2008/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2008/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2009/config.yaml
+++ b/config/instances/ausyd1nxvm2009/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
 storage_volumes:
  consul:
    pool: fastpool
--- a/config/instances/ausyd1nxvm2009/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2009/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2010/config.yaml
+++ b/config/instances/ausyd1nxvm2010/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
--- a/config/instances/ausyd1nxvm2010/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2010/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2011/config.yaml
+++ b/config/instances/ausyd1nxvm2011/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
--- a/config/instances/ausyd1nxvm2011/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2011/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2012/config.yaml
+++ b/config/instances/ausyd1nxvm2012/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
--- a/config/instances/ausyd1nxvm2012/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2012/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2013/config.yaml
+++ b/config/instances/ausyd1nxvm2013/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
--- a/config/instances/ausyd1nxvm2013/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2013/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2014/config.yaml
+++ b/config/instances/ausyd1nxvm2014/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
--- a/config/instances/ausyd1nxvm2014/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2014/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2015/config.yaml
+++ b/config/instances/ausyd1nxvm2015/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
--- a/config/instances/ausyd1nxvm2015/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2015/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2016/config.yaml
+++ b/config/instances/ausyd1nxvm2016/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
--- a/config/instances/ausyd1nxvm2016/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2016/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2017/config.yaml
+++ b/config/instances/ausyd1nxvm2017/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
--- a/config/instances/ausyd1nxvm2017/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2017/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2018/config.yaml
+++ b/config/instances/ausyd1nxvm2018/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
--- a/config/instances/ausyd1nxvm2018/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2018/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2019/config.yaml
+++ b/config/instances/ausyd1nxvm2019/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
--- a/config/instances/ausyd1nxvm2019/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2019/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2020/config.yaml
+++ b/config/instances/ausyd1nxvm2020/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
--- a/config/instances/ausyd1nxvm2020/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2020/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2021/config.yaml
+++ b/config/instances/ausyd1nxvm2021/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
--- a/config/instances/ausyd1nxvm2021/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2021/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2022/config.yaml
+++ b/config/instances/ausyd1nxvm2022/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core4096
--- a/config/instances/ausyd1nxvm2022/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2022/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2023/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2023/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2024/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2024/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2025/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2025/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2026/config.yaml
+++ b/config/instances/ausyd1nxvm2026/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  nomad_server:
    pool: fastpool
--- a/config/instances/ausyd1nxvm2026/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2026/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2027/config.yaml
+++ b/config/instances/ausyd1nxvm2027/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  nomad_server:
    pool: fastpool
--- a/config/instances/ausyd1nxvm2027/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2027/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2028/config.yaml
+++ b/config/instances/ausyd1nxvm2028/config.yaml
@ -4,7 +4,7 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  nomad_server:
    pool: fastpool
--- a/config/instances/ausyd1nxvm2028/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2028/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2029/config.yaml
+++ b/config/instances/ausyd1nxvm2029/config.yaml
@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
--- a/config/instances/ausyd1nxvm2029/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2029/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2030/config.yaml
+++ b/config/instances/ausyd1nxvm2030/config.yaml
@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
--- a/config/instances/ausyd1nxvm2030/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2030/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2031/config.yaml
+++ b/config/instances/ausyd1nxvm2031/config.yaml
@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
--- a/config/instances/ausyd1nxvm2031/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2031/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2032/config.yaml
+++ b/config/instances/ausyd1nxvm2032/config.yaml
@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
--- a/config/instances/ausyd1nxvm2032/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2032/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2033/config.yaml
+++ b/config/instances/ausyd1nxvm2033/config.yaml
@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
--- a/config/instances/ausyd1nxvm2033/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2033/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2034/config.yaml
+++ b/config/instances/ausyd1nxvm2034/config.yaml
@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_dmz1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
--- a/config/instances/ausyd1nxvm2034/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2034/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2035/config.yaml
+++ b/config/instances/ausyd1nxvm2035/config.yaml
@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
--- a/config/instances/ausyd1nxvm2035/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2035/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2036/config.yaml
+++ b/config/instances/ausyd1nxvm2036/config.yaml
@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
--- a/config/instances/ausyd1nxvm2036/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2036/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2037/config.yaml
+++ b/config/instances/ausyd1nxvm2037/config.yaml
@ -4,5 +4,5 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes: {}
--- a/config/instances/ausyd1nxvm2037/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2037/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2038/config.yaml
+++ b/config/instances/ausyd1nxvm2038/config.yaml
@ -4,10 +4,10 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  prometheus:
    pool: fastpool
    path: /data
    config:
-      size: 50GB
+      size: 100GB
--- a/config/instances/ausyd1nxvm2038/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2038/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2039/config.yaml
+++ b/config/instances/ausyd1nxvm2039/config.yaml
@ -4,10 +4,10 @@ cobbler_mgmt_classes:
 profiles:
  - disk10
  - net_com1_eth0
-  - 2core2048
+  - 2core3072
 storage_volumes:
  prometheus:
    pool: fastpool
    path: /data
    config:
-      size: 50GB
+      size: 100GB
--- a/config/instances/ausyd1nxvm2039/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2039/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2040/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2040/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2041/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2041/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2042/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2042/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2043/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2043/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2044/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2044/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2045/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2045/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2046/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2046/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2047/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2047/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2048/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2048/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2049/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2049/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2050/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2050/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2051/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2051/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2052/config.yaml
+++ b/config/instances/ausyd1nxvm2052/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 4core4096
+  - 4core6144
--- a/config/instances/ausyd1nxvm2052/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2052/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2053/config.yaml
+++ b/config/instances/ausyd1nxvm2053/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 4core4096
+  - 4core6144
--- a/config/instances/ausyd1nxvm2053/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2053/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2054/config.yaml
+++ b/config/instances/ausyd1nxvm2054/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 4core4096
+  - 4core6144
--- a/config/instances/ausyd1nxvm2054/terragrunt.hcl
+++ b/config/instances/ausyd1nxvm2054/terragrunt.hcl
@ -27,17 +27,15 @@ dependencies {
  paths = ["${get_repo_root()}/config/nodes/${local.node_name}"]
 }

-terraform {
-  source = "${get_repo_root()}/modules/instance"
-}

 generate "incus" {
  path      = "incus.tf"
  if_exists = "overwrite_terragrunt"
  contents  = <<-EOF
    provider "incus" {
-      generate_client_certificates = true
+      generate_client_certificates = false
      accept_remote_certificate    = true
+      config_dir = "${get_env("INCUS_CONFIG_DIR")}"

      remote {
        name    = "${basename(get_terragrunt_dir())}"
@ -50,3 +48,7 @@ generate "incus" {
    }
  EOF
 }
+terraform {
+  source = "${get_repo_root()}/modules/instance"
+}
+
--- a/config/instances/ausyd1nxvm2055/config.yaml
+++ b/config/instances/ausyd1nxvm2055/config.yaml
@ -4,4 +4,4 @@ cobbler_mgmt_classes:
 profiles:
  - disk20
  - net_com1_eth0
-  - 4core4096
+  - 4core6144
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Ben Vincent	8076bbc08d	Merge pull request 'feat: add externaldns hosts' (#37 ) from benvin/externaldns into master Some checks failed Deploy / deploy (push) Failing after 1m26s Details Reviewed-on: #37	2025-11-22 23:24:38 +11:00
Ben Vincent	ba9c2b639e	feat: add externaldns hosts All checks were successful Build / build (pull_request) Successful in 1m48s Details - two slaves, one master	2025-11-21 23:12:07 +11:00
Ben Vincent	707f84ebd0	Merge pull request 'fix: correct config.yaml to config.yml' (#36 ) from benvin/deploy_failures into master Some checks failed Deploy / deploy (push) Failing after 57s Details Reviewed-on: #36	2025-11-01 14:29:44 +11:00
Ben Vincent	d955d86808	fix: correct config.yaml to config.yml All checks were successful Build / build (pull_request) Successful in 1m47s Details - ensure terraform can find the correct config.yml	2025-11-01 13:59:57 +11:00
Ben Vincent	68b8b6a599	Merge pull request 'feat: add dovecot backend servers' (#35 ) from benvin/dovecot into master Some checks failed Deploy / deploy (push) Failing after 59s Details Reviewed-on: #35	2025-11-01 12:34:22 +11:00
Ben Vincent	ec94cc8f54	feat: add dovecot backend servers All checks were successful Build / build (pull_request) Successful in 2m58s Details - add three backend dovecot servers - add shared maildata cephfs subvolume	2025-11-01 00:51:58 +11:00
Ben Vincent	cc8c585dbd	Merge pull request 'feat: add mail::gateway nodes' (#34 ) from benvin/mta_services into master All checks were successful Deploy / deploy (push) Successful in 2m28s Details Reviewed-on: #34	2025-10-19 19:52:47 +11:00
Ben Vincent	c80f3a53a0	feat: add mail::gateway nodes All checks were successful Build / build (pull_request) Successful in 2m1s Details - add three postfix gateway instances in the dmz	2025-10-19 18:36:34 +11:00
Ben Vincent	ffbb91891e	Merge pull request 'feat: use INCUS_GLOBAL_CONF value' (#33 ) from benvin/incus_global_config into master All checks were successful Deploy / deploy (push) Successful in 2m41s Details Reviewed-on: #33	2025-10-18 00:03:49 +11:00
Ben Vincent	5e090e9de5	feat: enable access to vault certificate All checks were successful Build / build (pull_request) Successful in 1m52s Details - puppet now automatically trusts vault certs for some clients - ensure build job can access vault certs, or use client.* in .config/incus	2025-10-17 23:49:34 +11:00
Ben Vincent	cd9b965016	Merge pull request 'feat: manage incus config.yaml/incus-images from vault' (#32 ) from benvin/incus-images-vault into master Some checks failed Deploy / deploy (push) Failing after 1m45s Details Reviewed-on: #32	2025-10-17 16:15:26 +11:00
Ben Vincent	0b99805b09	chore: reduce parallelism All checks were successful Build / build (pull_request) Successful in 1m34s Details - reduce plan to 4 - reduce apply to 2 - build servers only have two cores currently	2025-10-17 15:58:41 +11:00
Ben Vincent	66d1f8fab8	feat: manage incus config.yaml/incus-images from vault All checks were successful Build / build (pull_request) Successful in 1m44s Details - use configuration data from Vault to generate config.yaml - use configuration data from Vault to generate incus-images certificate	2025-10-17 15:52:59 +11:00
Ben Vincent	0ca4fc0cf0	Merge pull request 'feat: add ausyd1nxvm2120 a testhost' (#31 ) from benvin/testhost into master Some checks failed Deploy / deploy (push) Failing after 1m53s Details Reviewed-on: #31	2025-10-17 15:33:04 +11:00
Ben Vincent	8eb05e1efa	feat: add ausyd1nxvm2120 a testhost All checks were successful Build / build (pull_request) Successful in 1m45s Details - add testhost, will be used to verify puppet -> openvox migration - change build -> deploy in deploy job	2025-10-17 15:29:00 +11:00
Ben Vincent	1d9684f403	Merge pull request 'fix: deploy job cant pull master' (#30 ) from benvin/deploy_job_fix into master Some checks failed Deploy / build (push) Failing after 2m9s Details Reviewed-on: #30	2025-10-17 15:12:48 +11:00
Ben Vincent	464e3c9c5d	fix: deploy job cant pull master All checks were successful Build / build (pull_request) Successful in 2m27s Details - dont try pull the master branch in the deploy job	2025-10-17 15:02:56 +11:00
Ben Vincent	bd3eb6e8c7	Merge pull request 'feat: add build job' (#29 ) from benvin/build_job into master Some checks failed Deploy / build (push) Failing after 5s Details Reviewed-on: #29	2025-10-17 15:01:36 +11:00
Ben Vincent	b6b01cb70d	feat: add build job All checks were successful Build / build (pull_request) Successful in 2m23s Details - add build job that runs `make plan` - add deploy job that runs `make apply` - ensure make-plan also runs init target - enable provider caching - enable creating client.crt/client.key - trap EXIT to cleanup temp directory	2025-10-17 13:30:04 +11:00
Ben Vincent	3f386b4e21	Merge pull request 'chore: upgrade terragrunt/tofu' (#28 ) from benvin/upgrade into master Reviewed-on: #28	2025-10-17 07:49:04 +11:00
Ben Vincent	4a298bde81	chore: upgrade terragrunt/tofu - fix makefile to work with opentofu and terragrunt 0.90.0 - cleanup comments - rename template/base/terragrunt.hcl	2025-10-17 07:47:29 +11:00
Ben Vincent	cc4e5248da	Merge pull request 'chore: change all 2GB hosts to 3GB' (#27 ) from benvin/default_3gb into master Reviewed-on: #27	2025-08-13 13:25:55 +10:00
Ben Vincent	56145c57e2	chore: change all 2GB hosts to 3GB - minimum required for dnf makecache to not cause a random oom	2025-08-13 13:25:10 +10:00
Ben Vincent	09ace1dd43	Merge pull request 'chore: upgrade memory for haproxy' (#26 ) from benvin/haproxymem into master Reviewed-on: #26	2025-08-11 22:54:40 +10:00
Ben Vincent	ee1d28099e	chore: upgrade memory for haproxy - more failures from dnf	2025-08-11 22:54:05 +10:00
Ben Vincent	59bc523793	Merge pull request 'feat: add s3 interface' (#25 ) from benvin/rgw into master Reviewed-on: #25	2025-08-10 19:55:49 +10:00
Ben Vincent	f90f6166ae	feat: add s3 interface - add 5 ceph rgw containers	2025-08-10 19:55:01 +10:00
Ben Vincent	496e05b730	Merge pull request 'feat: add new profiles, up memory' (#24 ) from benvin/puppetmem into master Reviewed-on: #24	2025-08-09 14:43:05 +10:00
Ben Vincent	67846f5908	feat: add new profiles, up memory - add new profiles for 3 and 6GB RAM - upgrade puppet hosts to 6GB RAM	2025-08-09 14:42:16 +10:00
Ben Vincent	2d4b7fb9c8	Merge pull request 'chore: memory increase' (#23 ) from benvin/memory-upgrades into master Reviewed-on: #23	2025-08-08 23:45:32 +10:00
Ben Vincent	f0c6909a25	chore: memory increase - dnf is causing some oom events, needs a little more memory	2025-08-08 23:40:37 +10:00
Ben Vincent	8a8b33eaad	Merge pull request 'victorialogs' (#22 ) from victorialogs into master Reviewed-on: #22	2025-08-08 23:16:54 +10:00
Ben Vincent	5befbcd14e	feat: add victorialogs systems - 5 vlstorage - 3 vlselect - 3 vlinsert - 2 vlagent	2025-08-08 23:15:50 +10:00
Ben Vincent	8a0e7a7620	feat: add victorialogs roles - add vl* roles to boilerplate	2025-08-07 20:37:47 +10:00
Ben Vincent	b8fac526b6	Merge pull request 'chore: failing dnf updates as out of memory' (#21 ) from benvin/memory_changes into master Reviewed-on: #21	2025-08-02 10:11:58 +10:00
Ben Vincent	a6db4c2d19	chore: failing dnf updates as out of memory - increase memory for redis instances - increase memory for grafana instances	2025-08-02 10:05:03 +10:00
Ben Vincent	f0271546bc	Merge pull request 'feat: bump memory for glauth' (#20 ) from benvin/glauth_memory into master Reviewed-on: #20	2025-07-27 13:43:43 +10:00
Ben Vincent	8471742131	feat: bump memory for glauth - puppet has oom'ed a few times now	2025-07-27 13:43:06 +10:00
Ben Vincent	7b3d224b64	Merge pull request 'feat: add cache path for vmselect' (#19 ) from benvin/vmselect-cache into master Reviewed-on: #19	2025-07-20 16:01:13 +10:00
Ben Vincent	7c1c385ab5	feat: add cache path for vmselect - for use by the cacheDataPath	2025-07-20 16:00:28 +10:00
Ben Vincent	791edafa26	Merge pull request 'chore: increase prometheus storage' (#18 ) from benvin/prometheus_storage into master Reviewed-on: #18	2025-07-19 12:36:37 +10:00
Ben Vincent	57c41108de	chore: increase prometheus storage - both instances are close to 100% full	2025-07-19 12:35:49 +10:00