Entity: Ephemeral Castle (Infrastructure Layer)

This page is the repository hub for the provider-specific infrastructure layer.

Overview

ephemeral-castle/ provisions and bootstraps the TazLab foundation layers. It defines the “Physical” layer (VMs, OS, Private Mesh) upon which the GitOps Layer operates.

Core Documentation for Agents

• Architecture: Infrastructure Architecture Overview.
• Execution: Terragrunt Layers.
• Automation: Rebirth Protocol (One-Shot Bootstrap).
• Networking: Tailnet Security (ACLs/Tags) and Tailscale Bridge.
• Secrets: Vault Runtime Architecture and Bootstrap/Restore.

Operational Resources

• Operator Cheat Sheet: Common commands for Proxmox, Terragrunt, and Tailscale.

Current System State (HD)

• Active Cluster: 1 CP + 1 Worker on Proxmox/Talos.
• Mesh Connectivity: All nodes join the tazlab.net tailnet via ephemeral OAuth keys.
• Durable Persistence: All state (Terraform, Raft) is backed up to S3 (tazlab-storage).