netbird-server: drop vestigial reverse-SSH tunnel #72

2026-06-27T10:05:38Z

k.renner commented

2026-06-27 10:05:38 +00:00

Part of the post-ingress-migration cleanup (Tier 2 — dead-code half).

netbird-tunnel.service.j2 is a reverse-SSH (autossh) tunnel template that is never instantiated by any task in the netbird-server role, and its target netbird_auth_ingress_host=10.2.45.100 is the Caddy HA keepalived VIP that was destroyed in #70. The VPS now reaches homelab auth over the NetBird mesh (netbird-ingress DaemonSet → Traefik fd99::86), so the tunnel mechanism is dead.

Removes the template and its only-consumer vars (netbird_auth_tunnel_port, netbird_auth_ingress_host, netbird_auth_ingress_port, netbird_tunnel_ssh_key). Verified those vars are referenced nowhere except the deleted template.

🤖 Generated with Claude Code

Part of the post-ingress-migration cleanup (Tier 2 — dead-code half). `netbird-tunnel.service.j2` is a reverse-SSH (`autossh`) tunnel template that is **never instantiated** by any task in the netbird-server role, and its target `netbird_auth_ingress_host=10.2.45.100` is the Caddy HA keepalived VIP that was destroyed in #70. The VPS now reaches homelab auth over the NetBird mesh (netbird-ingress DaemonSet → Traefik `fd99::86`), so the tunnel mechanism is dead. Removes the template and its only-consumer vars (`netbird_auth_tunnel_port`, `netbird_auth_ingress_host`, `netbird_auth_ingress_port`, `netbird_tunnel_ssh_key`). Verified those vars are referenced nowhere except the deleted template. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

k.renner added 1 commit 2026-06-27 10:05:38 +00:00

netbird-server: drop vestigial reverse-SSH tunnel

ci/woodpecker/push/deploy-netbird-server Pipeline was successful

Details

facbb859ad

The netbird-tunnel.service.j2 reverse-SSH tunnel template was never
instantiated by any task in the role, and its target
netbird_auth_ingress_host=10.2.45.100 was the Caddy HA keepalived VIP,
destroyed in PR #70. The VPS reaches homelab auth over the NetBird mesh
now (netbird-ingress DaemonSet -> Traefik fd99::86), so the tunnel is
dead. Remove the template and its only-consumer vars
(netbird_auth_tunnel_port/ingress_host/ingress_port, netbird_tunnel_ssh_key).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

k.renner merged commit 7ce80e80a6 into master

2026-06-27 10:37:34 +00:00

k.renner referenced this issue from a commit

2026-06-27 10:37:35 +00:00

Merge pull request 'netbird-server: drop vestigial reverse-SSH tunnel' (#72) from netbird-drop-vestigial-tunnel into master

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: konairius/homelab#72