Adds edge-2.iot.renner.uno as a second bare-metal edge host (base roles only, no peripherals).
Inventory: [edge_host] and [ssh_ca]. Not in zwave_gateway / heating_can. Not in ssh_keys_managed yet.
NTP: member of the VRRP group via edge_host, BACKUP with priority 60 (edge-1 stays at 70).
MQTT bridge: edge_mqtt_bridge_account defaults to inventory_hostname_short. The bridge client id is derived from it: edge-1 keeps edge1-bridge, edge-2 gets edge2-bridge.
Cluster: register account edge-2 (same delivery and ACL as edge-1). The mqtt-account-controller-egress CNP allows edge-2.iot.renner.uno:8443.
Loki: edge-2 ships with the existing edge-host login. Hosts are told apart by the host label (inventory_hostname).
ssh-ca: installs sudo before the Claude sudo rules (the edge-host base install has none). DSM is skipped.
Adds `edge-2.iot.renner.uno` as a second bare-metal edge host (base roles only, no peripherals).
- Inventory: `[edge_host]` and `[ssh_ca]`. Not in `zwave_gateway` / `heating_can`. Not in `ssh_keys_managed` yet.
- NTP: member of the VRRP group via `edge_host`, BACKUP with priority 60 (edge-1 stays at 70).
- MQTT bridge: `edge_mqtt_bridge_account` defaults to `inventory_hostname_short`. The bridge client id is derived from it: edge-1 keeps `edge1-bridge`, edge-2 gets `edge2-bridge`.
- Cluster: register account `edge-2` (same delivery and ACL as edge-1). The `mqtt-account-controller-egress` CNP allows `edge-2.iot.renner.uno:8443`.
- Loki: edge-2 ships with the existing edge-host login. Hosts are told apart by the `host` label (`inventory_hostname`).
- ssh-ca: installs `sudo` before the Claude sudo rules (the edge-host base install has none). DSM is skipped.
Refs YouTrack S28-16.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
edge-2.iot.renner.uno joins [edge_host] (base roles only, no peripherals)
and [ssh_ca], and the NTP VRRP group as BACKUP with priority 60, below
edge-1.
The MQTT bridge account follows the host's short name instead of a fixed
edge-1, and the bridge client id is derived from it (edge-1 keeps
edge1-bridge). The register gets the account edge-2, and the controller's
egress policy allows edge-2's credential endpoint on 8443.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Adds
edge-2.iot.renner.unoas a second bare-metal edge host (base roles only, no peripherals).[edge_host]and[ssh_ca]. Not inzwave_gateway/heating_can. Not inssh_keys_managedyet.edge_host, BACKUP with priority 60 (edge-1 stays at 70).edge_mqtt_bridge_accountdefaults toinventory_hostname_short. The bridge client id is derived from it: edge-1 keepsedge1-bridge, edge-2 getsedge2-bridge.edge-2(same delivery and ACL as edge-1). Themqtt-account-controller-egressCNP allowsedge-2.iot.renner.uno:8443.hostlabel (inventory_hostname).sudobefore the Claude sudo rules (the edge-host base install has none). DSM is skipped.Refs YouTrack S28-16.
🤖 Generated with Claude Code