1d06b28064
- keepalived: pg_role='standby' hat Vorrang vor role für BACKUP-Bestimmung - keepalived-master.sh: gecrasht Dienste beim MASTER-Übergang starten (nicht nur reload) - confighash: ip_addresses per Interface-Name hashen statt per FK (Cross-Node-Drift-Fix) - TOTP/2FA: RFC 6238 — Setup-Flow, QR-Code, Admin-Disable; two-step Login - Firewall-UI: Enterprise-Design — auto-Beschreibung, icon-only Actions, zero-hit Indikator - fe80-Filter: Link-local IPv6 aus NTP/DNS Listen-Dropdowns entfernen - VIP-Dashboard, Dual-Path VRRP, GW-Tracking (Migrations 0033/0034) - Forward Proxy + DNS erweiterte Einstellungen (Migrations 0031/0032) - unbound-control: edgeguard in unbound-Gruppe via postinst Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
19 lines
756 B
SQL
19 lines
756 B
SQL
-- +goose Up
|
|
-- Dual-path VRRP + Gateway-Tracking für Split-Brain-Schutz.
|
|
-- hb_* = zweite VRRP-Instanz (VI_HB) auf dediziertem Heartbeat-Interface.
|
|
-- gw_check_ip = Gateway-IP die von chk_gateway angepingt wird (weight -110).
|
|
ALTER TABLE cluster_settings
|
|
ADD COLUMN IF NOT EXISTS hb_interface VARCHAR,
|
|
ADD COLUMN IF NOT EXISTS hb_src_ip VARCHAR,
|
|
ADD COLUMN IF NOT EXISTS hb_peer_ip VARCHAR,
|
|
ADD COLUMN IF NOT EXISTS hb_router_id INTEGER NOT NULL DEFAULT 52,
|
|
ADD COLUMN IF NOT EXISTS gw_check_ip VARCHAR;
|
|
|
|
-- +goose Down
|
|
ALTER TABLE cluster_settings
|
|
DROP COLUMN IF EXISTS hb_interface,
|
|
DROP COLUMN IF EXISTS hb_src_ip,
|
|
DROP COLUMN IF EXISTS hb_peer_ip,
|
|
DROP COLUMN IF EXISTS hb_router_id,
|
|
DROP COLUMN IF EXISTS gw_check_ip;
|