Overlord ii planar topology - #11

Merged

DarthPJB merged 96 commits into

mainfrom

overlord-ii-planar-topology

Aug 3, 2026

Commits on Jul 30, 2026

feat(planar-topology): Phases 0-5 — planar JSON topology + dormant registry pipeline
John Bargman
committed
cbd78f0
fix(planar-topology): Phases 4-1.0 + 4-1.1 — genNginx two-arg fix + vhostPlanes canonical
John Bargman
committed
1fa5b4f
fix(planar-topology): Phase 4-1.2 — fix all 8 registry data errors
John Bargman
committed
5d0a528
fix(planar-topology): Phases 4-1.3 + 4-1.4 — fix validator inversion + WAN detection
John Bargman
committed
f52faf2
fix(planar-topology): Phase 4-1.5 — remove dead code + clean up ceremony
John Bargman
committed
29748cd
refactor(planar-topology): Phase 5-1.0 — remove _legacy from all JSON
John Bargman
committed
bc21d94
feat(planar-topology): Phase 5-1.1 — rename vhosts, add exporters, require interface
John Bargman
committed
a9c8952
fix(planar-topology): add exportersShape validator to mkRegistry.nix
John Bargman
committed
69dc31b
feat(planar-topology): Phase 5-1.2 — populate exporters + vhosts in JSON
John Bargman
committed
67d445b
feat(planar-topology): Phase 5-1.3.1 — topology-derive.nix foundation module
John Bargman
committed
04c590b
test(planar-topology): Phase 5-1.3.2 — topology-derive unit tests + mkRegistry exclusion
John Bargman
committed
380efc3
docs(planar-topology): PONR-0 baseline + fidelity inventory
John Bargman
committed
15bd06e
fix(planar-topology): PONR-1 fidelity — topology-derive matches baseline managed keys
John Bargman
committed
693e797
fix(planar-topology): PONR-2 neutralize competing nginx/exporter producers
John Bargman
committed
716b9bd
feat(planar-topology): PONR-3 wire topology-derive + full golden green
John Bargman
committed
e48e66d
feat(planar-topology): PONR — topology-derive wired, goldens green
John Bargman
committed
3e0688d
docs(planar-topology): Record PONR freeze SHA 7af771c
John Bargman
committed
baf54c0
docs: PONR freeze tip SHA
John Bargman
committed
dc73c5e
fix(planar-topology): restore full system eval — nginx user stub + webroot paths
John Bargman
committed
0352034
docs: update PONR-FREEZE — awaiting deployment tests
John Bargman
committed
18ec8fd
docs: review fixes plan — RF-0 through RF-2 (incorporated Q1-Q4 decisions)
John Bargman
committed
bf35b67
fix(planar-topology): RF-0 — clean up JSON data quality
John Bargman
committed
632f5e4
fix(planar-topology): RF-0 listenAddresses fix + golden regen
John Bargman
committed
b850b01
feat(planar-topology): RF-1 — populate routes, wireguard, firewall, dns in cortex-alpha.json
John Bargman
committed
e6a8684
feat(planar-topology): RF-2 — Tailscale ACL drift validator + full verification
John Bargman
committed
8b36ec6
refactor(planar-topology): M-0 — derive topoIp from JSON registry
John Bargman
committed
a2cafcb
refactor(planar-topology): M-1 — WireGuard from JSON registry
John Bargman
committed
63d42f4
refactor(planar-topology): M-2 — firewall/DNS/forwarding/tailscale/WireGuard from JSON
John Bargman
committed
7142a16
refactor(planar-topology): M-3 — delete legacy topology files
John Bargman
committed
99f736e
refactor(planar-topology): delete shared.nix — all consumers use JSON registry
John Bargman
committed
f1f0dc8
chore: gitignore documentation/2026-* review directories
John Bargman
committed
a9a9f2f
fix(checks): network-config golden check as build-time derivation + golden refresh
John Bargman
committed
cb21977
fix(LINDA): use pkgs.xrandr instead of deprecated pkgs.xorg.xrandr
John Bargman
committed
849112b
fix(staging): resolve review blockers — remote-worker coordinates, Tailscale, dead code, golden refresh
John Bargman
committed
b696580
fix: rename machines/beta → machines/beta-one to match flake config name
John Bargman
committed
8fba3aa
check: add --fail flag to deadnix check, capture current output
John Bargman
committed
a51eff2
docs: add deadnix cleanup plan
John Bargman
committed
6459e66
docs: update deadnix plan with adversarial review synthesis
John Bargman
committed
ba588e4
deadnix: remove unused let bindings (lib/)
John Bargman
committed
1298374
deadnix: remove unused bindings (modules/, modifier_imports/)
John Bargman
committed
94524d1
deadnix: remove unused bindings (server_services/)
John Bargman
committed
1faec22
deadnix: remove unused mkLibVirtImage binding (flake.nix)
John Bargman
committed
749ac28
deadnix: remove unused bindings (tests/)
John Bargman
committed
8b24db1
deadnix: prefix unused lambda args with _ (Phase 2)
John Bargman
committed
834a3fb
deadnix: add --no-lambda-arg flag with audit comment (Phase 3)
John Bargman
committed
95fa068
deadnix: remove WIP interfaceConfig/prefixLengthFromSubnet
John Bargman
committed
72c056b
fix: formatting in samba_server.nix
John Bargman
committed
b1ec079
docs: resolve stale overlord tasks, delete hedgedoc.nix
John Bargman
committed
10a1be7
docs: correct F4 description, audit F5/F6 details
John Bargman
committed
cde254e
docs: consolidate documentation, remove stale topology references
John Bargman
committed
fbafcbf
docs: add F6 getExe conversion plan
John Bargman
committed
25f537c
refactor: convert LINDA getExe patterns
John Bargman
committed
4121322
refactor: convert machine/environment getExe patterns
John Bargman
committed
461f3cb
refactor: convert input-methods getExe pattern
John Bargman
committed
6562339
refactor: convert LINDA scream getExe pattern
John Bargman
committed
58d87b7
refactor: convert core-router and energy_saving getExe patterns
John Bargman
committed
fe5621e
refactor: convert game server getExe patterns
John Bargman
committed
f08a55e
refactor: convert lib getExe patterns
John Bargman
committed
40278d6
refactor: convert credential and service getExe patterns
John Bargman
committed
af15f3e
refactor: convert test assertion getExe patterns
John Bargman
committed
09884dc
docs: archive completed/planning docs to opencode/
John Bargman
committed
ddd4da4
docs: complete documentation cleanup — fix stale refs, deduplicate, archive completed docs
John Bargman
committed
ad8a585
docs: mark F6 getExe plan complete
John Bargman
committed
4abf722
docs: archive completed F6 getExe plan to opencode/
John Bargman
committed
5cf6b77
docs: add F5 writeShellApplication conversion plan
John Bargman
committed
5ec904f
refactor: convert bargman-greeter-vm-serial to writeShellApplication
John Bargman
committed
625cde7
refactor: convert mkRunners askpass to writeShellApplication
John Bargman
committed
281e9e8
refactor: convert gitlab-credentials to writeShellApplication, fix SC2086
John Bargman
committed
a926ba9
fix: restore lib.getExe in gitlab-credentials, fix PD#19 in netrc-copy
John Bargman
committed
a3fef64
refactor: convert github-runner writeShellScript to writeShellApplication
John Bargman
committed
7076592
refactor: convert sysdiag to writeShellApplication, fix PD#19
John Bargman
committed
f31dee0
fix: formatting in sysdiag.nix and flake.nix
John Bargman
committed
bc92101
docs: mark F5 writeShellApplication plan complete
John Bargman
committed
4849b96
baseline for next phase - Rollback target for RC7
John Bargman
committed
d15a5f6
feat(overlord-ii): close three generator gaps (B4 prep)
John Bargman
committed
6c385b4
docs: topology generator principle stated in every document
John Bargman
committed
6759e23
feat(overlord-ii): topology-derive uses pure generators via specialArgs
John Bargman
committed
b2265cd
feat(overlord-ii): backup pipeline 1:1 replacement via topology JSON
John Bargman
committed
561646f
B3: Wire genWireguard into mktopology.nix
John Bargman
committed
67ebec6
feat(overlord-ii): implement mktopology — flake-level topology-to-config
John Bargman
committed
e95d98c
fmt
John Bargman
committed
02909e7
fix(overlord-ii): fix flake check — golden regeneration and webroot path
John Bargman
committed
a80b557
docs: add topology architecture diagram with Mermaid
John Bargman
committed
ac1d396
docs: improve topology architecture diagram and add migration pattern
John Bargman
committed
35555de
refactor: rename check-network to validate-goldens — separate topology from golden tests
John Bargman
committed
c29d2a4
fix(ci): suppress evaluation warnings in generate-ci-workflow
John Bargman
committed
c97b940
fix: remove stale locale/tailscale.nix import from remote-worker
John Bargman
committed
82a0104
fix: apply nginx-overhaul changes after rebase
John Bargman
committed
465f6ae

Commits on Jul 31, 2026

Merge remote-tracking branch 'origin/main' into overlord-ii-planar-topology
John Bargman
committed
8fc119e

Commits on Aug 1, 2026

feat: resolve B1 — derive interface IPs from topology via genNetwork.nix
John Bargman
committed
f9500e2
format and topofix
John Bargman
committed
f95a860

Commits on Aug 2, 2026

fix: restore squaremap public access on gaming-host-1
John Bargman
committed
2e87494
feat: add genForwarding.nix — restore NAT masquerade for LAN clients
John Bargman
committed
7e2cd02

Commits on Aug 3, 2026

feat: add genTailscale + genMonitoring — complete topology pipeline
John Bargman
committed
6b975f5
fmt
John Bargman
committed
08f6c62
fix: revert remote-worker carmelsite listen addresses to main behavior
John Bargman
committed
8bb790e