torjus/nixos-servers
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity

docs: mark ns1 migration to OpenTofu as complete
Some checks failed
Run nix flake check / flake-check (push) Failing after 1s
Details

Browse Source 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Torjus Håkestad
2026-02-07 23:34:44 +01:00
parent 735b8a9ee3
commit 003d4ccf03
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
docs/plans/host-migration-to-opentofu.md
View File

@@ -9,13 +9,13 @@ hosts are decommissioned or deferred.
## Current State ## Current State
Hosts already managed by OpenTofu: `vault01`, `testvm01`, `testvm02`, `testvm03`, `ns2` Hosts already managed by OpenTofu: `vault01`, `testvm01`, `testvm02`, `testvm03`, `ns2`, `ns1`
Hosts to migrate: Hosts to migrate:
| Host | Category | Notes | | Host | Category | Notes |
|------|----------|-------| |------|----------|-------|
| ns1 | Stateless | Primary DNS, recreate | | ~~ns1~~ | ~~Stateless~~ | ✓ Complete |
| nix-cache01 | Stateless | Binary cache, recreate | | nix-cache01 | Stateless | Binary cache, recreate |
| http-proxy | Stateless | Reverse proxy, recreate | | http-proxy | Stateless | Reverse proxy, recreate |
| nats1 | Stateless | Messaging, recreate | | nats1 | Stateless | Messaging, recreate |
@@ -75,11 +75,11 @@ Migrate stateless hosts in an order that minimizes disruption:
1. **nix-cache01** — low risk, no downstream dependencies during migration 1. **nix-cache01** — low risk, no downstream dependencies during migration
2. **nats1** — low risk, verify no persistent JetStream streams first 2. **nats1** — low risk, verify no persistent JetStream streams first
3. **http-proxy** — brief disruption to proxied services, migrate during low-traffic window 3. **http-proxy** — brief disruption to proxied services, migrate during low-traffic window
4. **ns1** — ns2 already migrated, verify AXFR works after ns1 migration 4. ~~**ns1** — ns2 already migrated, verify AXFR works after ns1 migration~~ ✓ Complete
~~For ns1/ns2: migrate ns2 first (secondary), verify AXFR works, then migrate ns1.~~ ns2 ~~For ns1/ns2: migrate ns2 first (secondary), verify AXFR works, then migrate ns1.~~ Both ns1
migration complete. All hosts use both ns1 and ns2 as resolvers, so ns1 being down briefly and ns2 migration complete. Zone transfer (AXFR) verified working between ns1 (primary) and
during migration is tolerable. ns2 (secondary).
## Phase 3: Stateful Host Migration ## Phase 3: Stateful Host Migration