README h3 -> h2

This commit is contained in:
Dominik Moritz Roth 2025-08-24 18:47:00 +02:00
parent bb0514469d
commit 50c56ad5f7

View File

@ -6,7 +6,7 @@
Secure AlmaLinux (RHEL) Server setup with LUKS encryption, Tang, TPM and RAID1 for Hetzner Dedicated Servers. Secure AlmaLinux (RHEL) Server setup with LUKS encryption, Tang, TPM and RAID1 for Hetzner Dedicated Servers.
### Features ## Features
- AlmaLinux Server base - AlmaLinux Server base
- Full disk encryption with LUKS - Full disk encryption with LUKS
@ -16,7 +16,7 @@ Secure AlmaLinux (RHEL) Server setup with LUKS encryption, Tang, TPM and RAID1 f
- SSH key-only access with early boot SSH via dropbear - SSH key-only access with early boot SSH via dropbear
- Best-in-class terminal: zsh + powerlevel10k + evil tmux - Best-in-class terminal: zsh + powerlevel10k + evil tmux
### Unlock Strategy ## Unlock Strategy
1. **Automatic unlock via Tang/TPM** (default): 1. **Automatic unlock via Tang/TPM** (default):
- Configure TPM2 and/or Tang servers in post-install.sh - Configure TPM2 and/or Tang servers in post-install.sh
@ -28,7 +28,7 @@ Secure AlmaLinux (RHEL) Server setup with LUKS encryption, Tang, TPM and RAID1 f
- Enter LUKS passphrase when prompted (twice, once per disk) - Enter LUKS passphrase when prompted (twice, once per disk)
- Used when automatic unlock fails or is not configured - Used when automatic unlock fails or is not configured
### Install ## Install
Boot your Hetzner server into rescue mode and run: Boot your Hetzner server into rescue mode and run:
@ -53,14 +53,14 @@ The installer will:
Encrypted network and storage pool using [Nebula](https://github.com/slackhq/nebula) mesh VPN and [GlusterFS](https://www.gluster.org/) distributed filesystem. Encrypted network and storage pool using [Nebula](https://github.com/slackhq/nebula) mesh VPN and [GlusterFS](https://www.gluster.org/) distributed filesystem.
### Features ## Features
- **Encrypted mesh network** - All traffic encrypted via Nebula overlay (192.168.100.0/24) - **Encrypted mesh network** - All traffic encrypted via Nebula overlay (192.168.100.0/24)
- **Distributed storage** - Data replicated across all storage nodes - **Distributed storage** - Data replicated across all storage nodes
- **Simple joining** - Single preshared secret + lighthouse endpoint - **Simple joining** - Single preshared secret + lighthouse endpoint
- **Flexible nodes** - Full nodes (replicate data) or remote nodes (no storage) - **Flexible nodes** - Full nodes (replicate data) or remote nodes (no storage)
### Setup ## Setup
```bash ```bash
wget -qO- https://git.dominik-roth.eu/dodox/nullpoint/raw/branch/master/cluster-setup.sh | sudo bash wget -qO- https://git.dominik-roth.eu/dodox/nullpoint/raw/branch/master/cluster-setup.sh | sudo bash