coreos: sish edge config for production

- sish config mirrors kubernetes/base/sish (HTTP by Host on :80, SNI passthrough
  on :443, raw TCP on 22 and 20000-20099), single tenant via bind-any-host,
  domain tunnel.traberph.de
- host key and connector key provisioned from gitignored coreos/.secrets/
- MemoryMax=256M for sish
- Zincati reboot window 03:00-04:00 UTC, daily sish update within v2 with rollback
- ignore *.ign (contains the host key)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

This commit is contained in:

traberph

2026-10-05 19:11:30 +02:00

co-authored by

Claude Opus 5.5

parent 8688bd91d3

commit adb68d5146

2 changed files with 150 additions and 22 deletions

.gitignore

View File

@@ -11,3 +11,6 @@ kubeconfig
 # Retired dev edge credentials (cirrus_dev), kept locally only
 old/
 # Ignition output embeds the secrets above
 *.ign