- Frankfurt am Main, Germany
- https://berz.dev
-
Open-source enthusiast, process automator, and IT system operator. Email: pberz@mailbox.org
-
Joined on
2025年01月17日
93d553cb00
feat: NixOS-Modul für iroh-ssh Fork (nixos-rebuild switch support)
1e20ec47a7
fix: opnsense-setup.sh — use --allow-file (not --allowed-nodes)
32f7e979a7
fix: multi-WAN — keep 0.0.0.0 default, add per-IP with set_prefix_len only
f547f8a738
fix: multi-WAN bind — use real prefix_len for all interfaces, not 0
5b6673fdf9
fix: use ip.is_link_local() instead of missing is_link_local() on Interface (if-addrs 0.7)
4729d450b3
berz: auto multi-interface binding — one socket per local IP
48604be0bb
opnsense: FreeBSD RC-basierter iroh-ssh Setup (kein systemd)
66195add89
bootstrap: add --no-allowlist (open server) mode + docs
b2438dbd7d
bootstrap(server): robuster openssh-server-Check (warnen, nicht installieren)
9989155c87
relay: auf iroh.hcnbg1.berz.systems:8443 umstellen (alter VM-Relay gelöscht)
e765244aec
multi-relay (Weg 1): client tries each relay; one knob = relay_hosts
82d627dd61
freebsd: cross-compilation setup für OPNsense (clang-18 + lld, x86_64-unknown-freebsd)
d1c902b96b
berz: default to own relay when no --relay-url given
d90accf8a9
client: try each configured relay (relay redundancy)
1edf7a5e10
Fork: Woodpecker CI + maintenance docs; drop GitHub Actions
e1c64e43f1
berz: optional fail-closed NodeID allowlist (+ usable client, safe logging)
80b2ee327a
src: default to own relay (sync mit fork v1.0.0-fork.8)
7b1295a23b
bootstrap: S3-Binary + offener Server-Modus (--no-allowlist); Doku entschärft
39cc58684a
iroh-ssh (berzdev fork): source + bootstrap one-liner + Codeberg CI
feat: add mTLS client certificate support
Thanks for the thorough review! I've pushed two follow-up commits addressing all three bugs and adding the custom CA support:
952d866720
feat: add custom CA certificate support (-tls-ca / FORGEJO_TLS_CA)
25fa43a513
fix: address mTLS review feedback