Add Trusted-LAN LocalSend receiver on NOMAD
Some checks failed
secret-guardrails / artifact-secret-scan (push) Has been cancelled
secret-guardrails / gitleaks (push) Has been cancelled

This commit is contained in:
Fizzlepoof
2026-05-26 02:44:18 +00:00
parent 0d7e133283
commit 0c33bedbae
8 changed files with 275 additions and 1 deletions

View File

@@ -213,6 +213,15 @@ These are expected to be managed by Wings/Pelican rather than a local compose fi
- The live `.env` is also backed up into the encrypted PD secrets repo as `env/technitium-nomad.env`
- Same-host checks from NOMAD to `10.5.30.9` are unreliable because the resolver sits behind macvlan networking; verify from another LAN peer instead
### LocalSend Trusted inbox
- Live stack path: `/opt/localsend-nomad`
- Repo source path: `/home/fizzlepoof/repos/truenas-stacks/localsend-nomad`
- Trusted bind IP: `10.5.1.16`
- Role: headless LocalSend receiver for Trusted-LAN handoff into `/home/fizzlepoof/private/inbox-secrets`
- Runtime model: standalone Docker Compose stack on a Trusted-LAN macvlan (`enp5s0.51`, VLAN 51) while the host stays on Servers (`10.5.30.7`)
- LocalSend listener ports: `53317/tcp`, `53317/udp`
- Same-host checks from NOMAD to `10.5.1.16` are unreliable because the receiver sits behind macvlan networking; verify from another Trusted-LAN peer instead
### MeshCore to MQTT relay
- Install date: 2026-05-18
- Install root: `/opt/mctomqtt`