Brad Swain b118d4ed79 Inject cloud-init SSH rule on wake for Tailscale-locked snapshots ...

When waking a droplet hibernated with Tailscale lockdown, the snapshot's
UFW rules block SSH on eth0 while Tailscale is logged out — creating a
deadlock where SSH is needed to re-setup Tailscale but is blocked by the
firewall. Fix by injecting a cloud-init user_data script that opens SSH
on eth0 at first boot, which is cleaned up when lock_down_to_tailscale()
resets UFW during Tailscale re-setup.

Also adds wait_for_ssh() to verify SSH reachability before attempting
Tailscale setup (replacing a blind sleep), and enhances the security
warning when --no-tailscale is used with a previously locked snapshot.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-24 10:18:36 -05:00

..

templates

Add Jinja2 template validation test and pre-commit hook (#45)

2026-02-24 14:23:39 +01:00

__init__.py

Initial commit

2026-01-29 21:53:58 -05:00

api.py

Inject cloud-init SSH rule on wake for Tailscale-locked snapshots

2026-03-24 10:18:36 -05:00

cloudinit.py

Initial commit

2026-01-29 21:53:58 -05:00

config.py

Update default Ubuntu image to 25.10 and extract slug constants (#48)

2026-03-23 10:01:13 +01:00

lock.py

Initial commit

2026-01-29 21:53:58 -05:00

main.py

Inject cloud-init SSH rule on wake for Tailscale-locked snapshots

2026-03-24 10:18:36 -05:00

ssh_config.py

Fix known_hosts removal for hashed entries (#28)

2026-01-30 15:58:05 -05:00

ui.py

Initial commit

2026-01-29 21:53:58 -05:00

version_check.py

Initial commit

2026-01-29 21:53:58 -05:00