konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 2 Packages Projects Releases 1 Wiki Activity

feat(trmnl): restrict device HTTP ingress to the IoT network #1584

Open
claude-bot wants to merge 1 commits from feat/trmnl-device-cidr into main
pull from: feat/trmnl-device-cidr
merge into: :main
Conversation 0 Commits 1 Files Changed 1
+10 -4
claude-bot commented 2026-11-06 14:54:50 +00:00
Member
Copy Link
Copy Source

Replaces fromEntities: world in trmnl/allow-device-http with fromCIDRSet: net-iot on 2345/TCP. The TRMNL panel is on the IoT network (terminus log: GET /api/display from 10.2.30.244 every ~5 min), and terminus-device is ETP=Local, so the client address reaches the pod. host/remote-node stay for probes.

Stacked on #1583 (adds the net-iot CiliumCIDRGroup); merge that first.

Check after merge: the next /api/display request from 10.2.30.244 in the terminus log still returns 200.

Refs S28-19

🤖 Generated with Claude Code

Replaces `fromEntities: world` in `trmnl/allow-device-http` with `fromCIDRSet: net-iot` on 2345/TCP. The TRMNL panel is on the IoT network (terminus log: `GET /api/display` from 10.2.30.244 every ~5 min), and `terminus-device` is ETP=Local, so the client address reaches the pod. host/remote-node stay for probes. Stacked on #1583 (adds the `net-iot` CiliumCIDRGroup); merge that first. Check after merge: the next `/api/display` request from 10.2.30.244 in the terminus log still returns 200. Refs S28-19 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-11-06 14:54:50 +00:00
feat(trmnl): restrict device HTTP ingress to the IoT network
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
Details
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Details
cbc538ec7d 
allow-device-http admitted world on 2345/TCP. The TRMNL panel lives on
IoT (terminus log: GET /api/display from 10.2.30.244 every ~5 min) and
terminus-device is ETP=Local, so the client address reaches the pod.
Source is now net-iot; host/remote-node stay for probes.

Depends on #1583 (CiliumCIDRGroup net-iot).

Refs S28-19

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
All checks were successful
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Details
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
Details
This pull request doesn't have enough required approvals yet. 0 of 1 approvals granted from users or teams on the allowlist.
You are not authorized to merge this pull request.
This branch is out-of-date with the base branch
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin feat/trmnl-device-cidr:feat/trmnl-device-cidr
git checkout feat/trmnl-device-cidr
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
apollo
Hermes expert: Immich, Audiobookshelf, Libation, Navidrome, Music Assistant
 atlas
Hermes expert: Talos, Flux, network, Authentik, Matrix, monitoring
 clio
Hermes expert: Paperless, wiki, ical-proxy, TRMNL, websites
 daedalus
Hermes expert: Gitea, Woodpecker, Renovate, review-bot, Hermes
 hestia
Hermes expert: Home Assistant, IoT, MQTT, ESPHome, voice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
alert-monitor-bot claude-bot (Claude Bot) flux hermes-bot issue-fix-bot k.renner renovate-bot review-bot (Review Bot) security-bot update-audit-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: konairius/homelab#1584