jschoubben 68a193d6f0 A host adopts a delivered membership at start, not only after a declaration ...

The rescue path: an operator writes the membership file by hand on a machine no
bus can reach — rotated while it still held the old password — and restarts the
host. Same file, same check as the declaration path.

2026-09-28 02:21:56 +02:00

..

main_test.go

Refuse every file once the mesh has spoken, plan the cutover as one, and let the kept declaration repair the mode

2026-09-23 23:35:49 +02:00

main.go

A host adopts a delivered membership at start, not only after a declaration

2026-09-28 02:21:56 +02:00

rekey_test.go

Stop nothing the mesh cannot replace, give the tunnel back on failure, and take it over after enrolment

2026-09-24 00:02:08 +02:00