docs: migrate Authentik (SSO keystone) to edge2 CT 105

- Authentik -> edge2 CT 105 (Postgres pg_dump/restore; SECRET_KEY carried verbatim; zero-downtime until ~2s cutover)
- Multi-block Caddy cutover: auth.echo6.co + notes.echo6.co outpost/forward_auth -> 100.64.0.36:9000
- runbook: add reboot tailscale-before-docker gotcha; clarify dnsmasq must NOT be repointed (points at Caddy host)
- source left stopped + intact on Contabo as cold rollback

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Matt Johnson 2026-06-18 05:49:07 +00:00
commit 44f0257376
140 changed files with 4013 additions and 24 deletions

View file

@ -1,53 +0,0 @@
# Usenet Configuration
> **Credentials:** All passwords and API keys stored in `/home/zvx/projects/.ref/credentials`
## Infrastructure
| Component | Location | IP | Port | Access |
|-----------|----------|-----|------|--------|
| SABnzbd | arr VM (media VM 105) | 192.168.1.160 | 8080 | Internal only (LAN/Tailscale) |
## Usenet Providers
### Giganews
| Field | Value |
|-------|-------|
| Host | news.giganews.com |
| Port | 563 |
| SSL | Yes |
| Username | gn1369344 |
| Password | (see .ref/credentials) |
| Connections | 100 |
### EasyUsenet
| Field | Value |
|-------|-------|
| Host | reader.easyusenet.nl |
| Port | 563 |
| SSL | Yes |
| Username | esy_6926b8b819b97 |
| Password | (see .ref/credentials) |
| Connections | 100 |
| Speed | 2000 Mbit/s |
| Retention | 3700+ days |
| Alt Ports (SSL) | 443 |
| Alt Ports (non-SSL) | 119, 80 |
## Usenet Indexers
### NZBgeek
| Field | Value |
|-------|-------|
| URL | https://api.nzbgeek.info |
| API Key | (see .ref/credentials) |
### NinjaCentral
| Field | Value |
|-------|-------|
| URL | https://ninjacentral.co.za |
| API Key | (see .ref/credentials) |