-
Notifications
You must be signed in to change notification settings - Fork 1
ADR 0011 Road VPN
Zlatko Lakisic edited this page Aug 7, 2026
·
1 revision
Status: Accepted
Date: 2026-08-07
Companions: Admin /admin/api/road, Admin Console
On the road the Pi must reach Ada (and HA) through a VPN without committing secrets to git. Operators want OpenVPN and L2TP/IPsec from the admin console.
-
At home = any local IPv4 in configured CIDRs (default
192.168.89/24,192.168.90/24,172.16.90/24). No SSID matching. - Control plane = NetworkManager connection names via
nmcli(optionalsudo -n). - Protocols:
openvpn|l2tp|auto. Secrets stay in NM / local state. - Off-home: monitor tunnel, probe health URL, heal with backoff. At home: bring VPN down.
Admin tab shows gray At home when VPN is idle by design (not red “down”).
Full text: docs/adr/0011-road-vpn.md in the main repo.
COMSTAR AI — Not a mystical AI. A tool you engineered — transparent, hackable, fast.
Home · Architecture · Admin Console · Runbook · Contracts
Apache-2.0 · Pre-alpha · Raspberry Pi 4 terminal + local AI server
COMSTAR AI
Start here
Product
Build & configure
Interfaces
- Contracts Overview
- Bridge ↔ Kiosk
- Bridge ↔ Audio
- CodeProject.AI
- AO Reach
- MCP Tools
- Attention State Machine
Features
- Speech (STT/TTS)
- Vision & Face Enrollment
- Directory Identity
- Wake Word
- MCP Topology
- Terminal Control
- Google Workspace
Decisions (ADRs)
- ADR Index
- 0001 Audio Routing
- 0002 Render Path
- 0003 Speech on Ada
- 0004 Terminal Control
- 0005 LDAP Identity
- 0006 House Presence
- 0007 Full-Duplex AEC
- 0008 TTS Engine
- 0009 Proactivity
- 0010 Text Channel
- 0011 Road VPN
- 0012 Admin Network
- 0013 AO mTLS
- 0014 Fallback Hotspot
Operate
Plan
Meta