From df07062cd1f143ee7439a0abec2d08c288994a2e Mon Sep 17 00:00:00 2001 From: Nik Afiq Date: Fri, 24 Jul 2026 12:18:00 +0900 Subject: [PATCH] fix: restore nik4nao.home.arpa DNS entry -- wrongly removed as "orphaned" This points at nik-debian's raw IP (192.168.7.183) for a host-level SMB/Samba share, not a Kubernetes Service. Stage 3 removed it based on "no Certificate/ Ingress/IngressRoute references it" -- the wrong test for a non-HTTP, non-Kubernetes service that was never going to have one. Broke real SMB access. Restored to both Pi-hole values files in their original position. Co-Authored-By: Claude Sonnet 5 --- REFACTOR_PLAN.md | 9 ++++++++- values/pihole-debian.yaml | 1 + values/pihole.yaml | 1 + 3 files changed, 10 insertions(+), 1 deletion(-) diff --git a/REFACTOR_PLAN.md b/REFACTOR_PLAN.md index 9d3044c..14da434 100644 --- a/REFACTOR_PLAN.md +++ b/REFACTOR_PLAN.md @@ -176,7 +176,14 @@ Per the "trace references before declaring obsolete" rule — **none of the invisible to Argo CD. The only things that look genuinely obsolete or redundant are: -- `nik4nao.home.arpa` DNS entry (both pihole values files) — no backing resource found anywhere. +- ~~`nik4nao.home.arpa` DNS entry~~ — **WRONG, corrected 2026-07-23**: this + points at `192.168.7.183` (nik-debian's raw IP) for a host-level SMB/Samba + share, not a Kubernetes Service — there was never going to be a + Certificate/Ingress/IngressRoute for it, so "no K8s resource references it" + was the wrong test entirely. It was removed from both pihole values files + and broke real SMB access; restored. Lesson: that specific check only + proves a hostname isn't routed through Traefik, not that it's unused — + doesn't apply to raw-IP entries for non-HTTP/non-K8s services. - `ansible/ansible.cfg` — not obsolete exactly, but its only real-world effect today is negative (breaks documented commands); candidate for deletion/merge into the root cfg. - `ansible/roles/nvidia/templates/k3s-containerd-config.toml.j2` — orphaned template, either finish wiring it up or remove it once GPU passthrough status is confirmed live. - `.DS_Store` at repo root and in `config/` — should never have been committed; harmless but should be `git rm --cached`. diff --git a/values/pihole-debian.yaml b/values/pihole-debian.yaml index 630904f..e53b34a 100644 --- a/values/pihole-debian.yaml +++ b/values/pihole-debian.yaml @@ -37,6 +37,7 @@ dnsmasq: - address=/gitea.home.arpa/192.168.7.77 - address=/pihole.home.arpa/192.168.7.77 - address=/home.arpa/192.168.7.77 + - address=/nik4nao.home.arpa/192.168.7.183 - address=/dashy.home.arpa/192.168.7.77 - address=/jellyfin.home.arpa/192.168.7.77 - address=/qbittorrent.home.arpa/192.168.7.77 diff --git a/values/pihole.yaml b/values/pihole.yaml index d900011..cd3ca12 100644 --- a/values/pihole.yaml +++ b/values/pihole.yaml @@ -68,6 +68,7 @@ dnsmasq: - address=/gitea.home.arpa/192.168.7.77 - address=/pihole.home.arpa/192.168.7.77 - address=/home.arpa/192.168.7.77 + - address=/nik4nao.home.arpa/192.168.7.183 - address=/dashy.home.arpa/192.168.7.77 - address=/jellyfin.home.arpa/192.168.7.77 - address=/qbittorrent.home.arpa/192.168.7.77