Service hinzufügen

Lab-HTTP (Caddy)

1. just lab-ipam → freie IP
2. net/lab/hosts/.nix:
     ipv4 = "192.168.200.x";
     dns = {
       name = "….lab";
       target = "reverse-proxy";
       upstream = "http://IP:PORT";
     };
3. nix build .#nixosConfigurations.lab-gateway.config.system.build.toplevel
4. colmena apply --on lab-gateway

Lab non-HTTP

dns = { name = "….lab"; };  # target default = direct
# oder dns = false;        # nur IP reservieren
# danach lab-gateway deploy (DNS)

Öffentlich

net/dns/groupdir.de.nix (staticRecords):
  scope = "public" | "both"
→ nix eval … > generated-records.tf.json
→ tofu -chdir=tofu/dns plan / apply

Host-Config

Paket/Dienst/User: nixos/modules + Host-Config, dann colmena apply --on HOST.