GilmanLab Infra

This repository contains infrastructure configuration, provisioning automation, and supporting repository tooling for the GilmanLab homelab.

The first active project is network/vyos, which holds the VyOS gateway configuration and validation flow. Additional infrastructure domains can be added as separate Moon projects without reworking the repository baseline.

Quick Start

Prerequisites:

• moon 2.x
• python3
• access to the sibling secrets/ repo when working with secret-backed flows

Validate the current repository:

moon ci --summary minimal

Run the current VyOS validation target directly:

moon run network-vyos:check

Current Projects

• aws/lab-foundation: OpenTofu for the base VPC, DNS, and KMS primitives in the lab AWS account
• aws/subnet-router: OpenTofu for the AWS EC2 subnet router that joins Tailscale using AWS workload identity federation
• network/tailscale: Tailscale DNS settings managed via OpenTofu
• network/vyos: VyOS gateway automation, config, and static validation
• security/pki/root-ca: OpenTofu for the offline-by-policy root CA KMS key

Support

• Questions and design discussion: GitHub Discussions
• Non-security bugs: GitHub Issues
• Vulnerabilities: follow SECURITY.md

Contributing

See CONTRIBUTING.md.