Renew hosts with direct WireGuard routes first and public URLs as fallbacks

This commit is contained in:
gib committed 2026-11-01 13:25:39 -05:00
1 parent 42b6a4920c
commit 277683d5ee
2 files changed
+13 -11

No files matched your search

+3 -3
View File
@@ -37,9 +37,9 @@ Operators use the `wristcode` CLI inside the container, on junior.gib:
t3 auth pairing create --scope orchestration:read --scope orchestration:operate --label "WristCode gateway"
podman exec -it wristcode-gateway wristcode host add https://t3mac.gbrown.org <credential> --label "Mac mini"
# A host reachable more than one way, such as a laptop with a VPN route, lists fallbacks.
# The gateway tries them in order when the first does not answer.
podman exec -it wristcode-gateway wristcode host add https://t3laptop.gbrown.org <credential> --label "Laptop" --alt-url https://t3laptopvpn.gbrown.org
# A host reachable more than one way lists fallbacks, preferred first. The gateway uses the
# first route that answers: here a direct WireGuard address, then the public URL.
podman exec -it wristcode-gateway wristcode host add http://desktop.gib:3773 <credential> --label "Desktop" --alt-url https://t3desktop.gbrown.org
# Pair a watch: enter the printed code on the watch within 5 minutes.
podman exec -it wristcode-gateway wristcode pair