补回旧工作区中仅存于本地的 Backstage OIDC、DNS 与 agent 说明

清理 chore/recover-old-workspace 时发现以下内容已在线上使用，却只存在于未提交的工作区： - Authelia `backstage` OIDC client（与 helm 现网 values 逐键比对一致；仅含 pbkdf2 哈希，与既有 client 写法相同）。 - `backstage.ad.ddupan.top` A 记录（现网已解析到 192.168.10.127）。 - CLAUDE.md：VyOS `cli-shell-api showConfig` 尾随节点名不会过滤、会输出含密钥的完整配置。 - .agents/skills/homelab-knowledge：让 agent 查询与维护 homelab-wiki 的技能说明。 Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-01 17:30:07 +00:00
parent 69d3476a6b
commit 45437f27d0
4 changed files with 96 additions and 0 deletions
@@ -50,6 +50,9 @@ netboot.xyz appliance — i.e. the single point of failure for most of the lab.
 - Network devices (VyOS) use `ansible.netcommon.network_cli`, not ssh/python — they have no
  Python interpreter. Prefer `vyos_config` with explicit `set` lines over the collection's
  resource modules, which lag upstream syntax.
+  ⚠ `cli-shell-api showConfig --show-active-only --show-cfg1 load-balancing` 在现场并未
+  限定为 LB 子树，而是输出完整配置（含密钥）。不要把尾随节点名当作过滤条件；
+  先在路由器端严格提取所需配置段，再返回输出，不将完整配置送入工具日志。
  ⚠ A set-lines-only role **cannot change a multi-value node** — `set` appends. Changing
  e.g. `option wins-server` or `name-server` leaves the old value live *and* saved to
  `config.boot`; the diff only shows the addition, so it reads as a clean replace. Grep the