INFRASTRUCTURE

Core systems, network, and platform services

Projects (11)

Project Status Description

VyOS HA Firewall

Complete

VRRP pair (vyos-01/02), replaced pfSense 2026-03-07

BIND DNS HA

Complete

bind-01/02, 52 records, zone transfers

Vault PKI Cluster

Complete

3-node Raft, Root CA + Issuing CA

Vault SSH CA

Complete

8h certs, 9+ hosts configured

k3s Kubernetes

Active

Single-node, Cilium, MetalLB 10.50.1.128/28

Keycloak SSO

REBUILD NEXT

Corrupted - OIDC/SAML federation

FreeIPA Identity

Operational

ipa-01; ipa-02 replica planned

Active Directory

Operational

home-dc01 WS2025 Core; dc02 planned

KVM Hypervisors

Operational

kvm-01 + kvm-02, 16+ VMs

Catalyst 9300/3560CX

Operational

IBNS 2.0, dot1x templates

Catalyst 9800-CL WLC

Operational

802.1X + OKC, 9120AX AP