2025-10-17 - 2026-10-17
Overview
30 Pull requests merged by 1 user
Merged
#30 Describe how the GitHub mirror shows the wordmark
Merged
#29 Restart dnsmasq after a render, since a reload never applied one
Merged
#28 Deploy new programs without going through setup
Merged
#27 Have the tool check the arrangement, rather than the operator
Merged
#26 Give each runner pool the allowlist it could actually run
Merged
#25 Make removing a name actually revoke it
Merged
#24 Strip comments where every name arrives, not at one source
Merged
#23 Make trusting a repository something you can do in one command
Merged
#22 Give the privileged tier a working v1 to v2 path, and link the upgrade docs
Merged
#21 Install the upgrade tool on the privileged tier, which never got it
Merged
#20 Fix a tool that could not find itself, and a note that told you not to
Merged
#19 Version the deployed state, so an existing runner can be brought forward
Merged
#18 Bound the LAN over IPv6, and over the range a tailnet uses
Merged
#17 Send the reader between the two halves, in the order that works
Merged
#15 Bring across what the sister project grew, and write down the threat model
Merged
#16 Add the badge and the maturity disclaimer
Merged
#14 Give a DHCP runner the two rules its lease actually needs
Merged
#12 Pin the workflow to main, and put the wordmark on the README
Merged
#13 State plainly that there is no support, and where to send a vulnerability
Merged
#10 Name the tiers after what a job gets, and put the reader first
Merged
#11 Build the runners, rather than listing what to type
Merged
#9 Do not install a resolver on a host that will never run one
Merged
#8 Say how to automate the rollback, and what order to snapshot in
Merged
#7 Stop pointing at resolvectl on hosts that do not have it
Merged
#6 Install the docker client, and check it is there
Merged
#5 Say that a root password costs you sudo
Merged
#4 Build the sacrificial runner host, not just harden one
Merged
#3 Give the install block a pasteable clone URL
Merged
#2 Own CI hardening end to end: firewall, resolver and network from install.sh
Merged
#1 Add install.sh, and report configuration problems usefully