Skip to content

fix(nextdns): preserve profile settings and Tailnet blocklist policy - #24

Merged
bakerboy448 merged 2 commits into
mainfrom
fix/nextdns-preserve-nrd
Nov 7, 2026
Merged

bakerboy448 merged 2 commits into
mainfrom
fix/nextdns-preserve-nrd

Conversation

@bakerboy448

@bakerboy448 bakerboy448 commented Nov 7, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Preserve each target profile's NRD setting when syncing security from Main. The existing payload helper was unused, so sync overwrote target values.

Keep Tailnet on HaGeZi Pro plus OISD while other targets follow Main's Normal plus OISD. Diff recognizes this policy and reports an incorrect Tailnet tier.

Four regression tests cover NRD enabled, disabled, and absent; Tailnet isolation; and correct/incorrect tier comparisons. Tests verify Main stays unchanged. Tests and pre-commit pass.

Script(s) affected

  • nextdns_sync.py

Checklist

  • Tested on target OS
  • No secrets in diff
  • Existing documented preservation behavior restored

@bakerboy448
bakerboy448 merged commit 97c77fe into main Nov 7, 2026
1 check passed
@bakerboy448
bakerboy448 deleted the fix/nextdns-preserve-nrd branch November 7, 2026 16:57
@bakerboy448 bakerboy448 changed the title fix(nextdns): preserve per-profile NRD during security sync fix(nextdns): preserve profile settings and Tailnet blocklist policy Nov 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant