Skip to content

docs: record Phase 0 owner answers in the zero trust plan - #497

Merged
MrCodeEU merged 3 commits into
mainfrom
docs/zero-trust-phase0-answers
Nov 4, 2026
Merged

MrCodeEU merged 3 commits into
mainfrom
docs/zero-trust-phase0-answers

Conversation

@MrCodeEU

@MrCodeEU MrCodeEU commented Nov 4, 2026

Copy link
Copy Markdown
Owner

Summary

Records the owner's Phase 0 answers in docs/ZERO_TRUST_PLAN.md and docs/ZERO_TRUST_INVENTORY.md. Docs only.

  • Public apps: kuma, forgejo, umami, projects and glucava stay public for now. Phase 7 revisits whether each should go behind Authelia or its replacement.
  • Guest WLAN: dropped, because no device fits it.
  • Home Assistant: Home Assistant OS can't run a Ziti tunneler and has no Tailscale SSH. In Phase 5, nuc's Ziti router or tunneler hosts Home Assistant's SSH, API (8123) and scrape target, and forwards them over the LAN. A Ziti add-on for Home Assistant OS is a possible alternative, still unverified.
  • Home Assistant SSH: it already answers on 100.100.10.200:22 via the Advanced SSH & Web Terminal add-on. No workstation key is authorized yet, so its listening sockets are still unmeasured.

Follow-up to #496

After the limit=mljr deploy (run 41849148196), all three vhosts now redirect to Authelia (checked from outside, 2026-11-04):

dash       302 https://auth.mljr.eu/?rd=https%3A%2F%2Fdash.mljr.eu%2F&rm=GET
nuc        302 https://auth.mljr.eu/?rd=https%3A%2F%2Fnuc.mljr.eu%2F&rm=GET
speedtest  302 https://auth.mljr.eu/?rd=https%3A%2F%2Fspeedtest.mljr.eu%2F&rm=GET

🤖 Generated with Claude Code

MrCodeEU and others added 3 commits November 4, 2026 15:40
kuma, forgejo, umami, projects and glucava stay public for now and are
revisited in Phase 7. The guest WLAN step is dropped (no device fits).
Home Assistant gets nuc-hosted Ziti services in Phase 5, since Home
Assistant OS can't run a tunneler and has no Tailscale SSH.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@MrCodeEU
MrCodeEU merged commit 6f24648 into main Nov 4, 2026
9 checks passed
@MrCodeEU
MrCodeEU deleted the docs/zero-trust-phase0-answers branch November 4, 2026 14:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant