Commit Graph
3 Commits
Author SHA1 Message Date
marvin a09b327ca9 Expose only the console; node binds 8081 guest-internal
The console routes to nodes (rendezvous), so it is the single public
port: server -> :8081 (no host forward), console -> :8080, 8090
forward dropped. Verified: node unreachable from host, routed
workstream creation lands on turnstone-vm-main at 127.0.0.1:8081,
route/command proxy works, cluster view tracks the workstream.
2026-09-28 22:20:15 +02:00
marvin 5560055c29 Run turnstone-console alongside the server
Console (cluster dashboard + admin panel) starts as a background
daemon under marvin on :8090, sharing the same config.toml and SQLite
DB (WAL multi-writer). Forwarded via run.sh and exposed through
tailcat; same login as the server.
2026-09-28 21:35:38 +02:00
marvin 299e412518 Add scripts/expose.sh: tailcat tunnel for remote access
tailcat (Tailscale data plane, no control plane) forwards the VM's
web UI and SSH ports to another machine via a stable saved-key
address; outbound-only, so it works through the nested slirp NAT.
2026-09-26 16:32:29 +02:00