Switch IRC network to Tailscale-only addressing

Replace Fly.io internal networking with Tailscale for all server-to-server
communication to prepare for provider migration:

- Change server names from .internal to .${TAILSCALE_DOMAIN}
- Update all vhost entries to use hardcoded Tailscale IPs instead of ${FLY_PRIVATE_IP}
- Update connect blocks to use Tailscale hostnames and IPs
- Configure Atheme to use Tailscale IPs for uplink connections

This allows testing the network configuration on Fly.io before migrating
to DigitalOcean where Tailscale will handle all private networking.

Server mappings:
- magnet-9rl: 100.66.199.63 (magnet-9rl-1.camel-kanyu.ts.net)
- magnet-1eu: 100.97.156.118 (magnet-1eu.camel-kanyu.ts.net)
- magnet-atheme: 100.123.207.46 (magnet-atheme.camel-kanyu.ts.net)

Author: perigrin

atheme/atheme.conf.template

@@ -35,15 +35,15 @@ serverinfo {
 /* Uplink configuration - primary IRC server */
 uplink "${ATHEME_HUB_HOSTNAME}" {
     host = "${ATHEME_HUB_HOSTNAME}";
-    vhost = "${FLY_PRIVATE_IP}";
+    vhost = "${ATHEME_TAILSCALE_IP}";
     send_password = "${PASSWORD_9RL}";
     receive_password = "${SERVICES_PASSWORD}";
     port = 6667;
 };
 
 uplink "${ATHEME_FALLBACK_HOSTNAME}" {
     host = "${ATHEME_FALLBACK_HOSTNAME}";
-    vhost = "${FLY_PRIVATE_IP}";
+    vhost = "${ATHEME_TAILSCALE_IP}";
     send_password = "${PASSWORD_1EU}";
     receive_password = "${SERVICES_PASSWORD}";
     port = 6667;

servers/magnet-1eu/server.conf

@@ -4,7 +4,7 @@
 /* Server information */
 /* IMPORTANT: The name field must match exactly with connect block names on other servers */
 serverinfo {
-    name = "${SERVER_NAME}.internal";
+    name = "${SERVER_NAME}.${TAILSCALE_DOMAIN}";
     sid = "${SERVER_SID}";
     description = "${SERVER_DESCRIPTION}";
     network_name = "MagNET";
@@ -24,9 +24,10 @@ class "server" {
 
 /* Connection blocks */
 /* IMPORTANT: Connect block name must match the other server's serverinfo name exactly */
-connect "magnet-9rl.internal" {
-    host = "magnet-9rl.internal";
-    vhost = "${FLY_PRIVATE_IP}";
+connect "magnet-9rl.${TAILSCALE_DOMAIN}" {
+    host = "magnet-9rl-1.${TAILSCALE_DOMAIN}";
+    host = "100.66.199.63";  /* Tailscale IP for magnet-9rl */
+    vhost = "100.97.156.118";  /* Our Tailscale IP for magnet-1eu */
     send_password = "${PASSWORD_9RL}";
     accept_password = "${PASSWORD_1EU}";
     port = 6667;
@@ -35,9 +36,10 @@ connect "magnet-9rl.internal" {
 };
 
 /* Connect block for services */
-connect "magnet-atheme.internal" {
-    host = "*.magnet-atheme.internal";
-    vhost = "${FLY_PRIVATE_IP}";
+connect "magnet-atheme.${TAILSCALE_DOMAIN}" {
+    host = "magnet-atheme.${TAILSCALE_DOMAIN}";
+    host = "100.123.207.46";  /* Tailscale IP for magnet-atheme */
+    vhost = "100.97.156.118";  /* Our Tailscale IP for magnet-1eu */
     send_password = "${SERVICES_PASSWORD}";
     accept_password = "${PASSWORD_9RL}";
     port = 6667;

servers/magnet-9rl/server.conf

@@ -4,7 +4,7 @@
 /* Server information */
 /* IMPORTANT: The name field must match exactly with connect block names on other servers */
 serverinfo {
-    name = "${SERVER_NAME}.internal";
+    name = "${SERVER_NAME}.${TAILSCALE_DOMAIN}";
     sid = "${SERVER_SID}";
     description = "${SERVER_DESCRIPTION}";
     network_name = "MagNET";
@@ -24,9 +24,10 @@ class "server" {
 
 /* Connection blocks */
 /* IMPORTANT: Connect block name must match the other server's serverinfo name exactly */
-connect "magnet-1eu.internal" {
-    host = "*.magnet-1eu.internal"; # we're the hub, look for incoming connections
-    vhost = "${FLY_PRIVATE_IP}";
+connect "magnet-1eu.${TAILSCALE_DOMAIN}" {
+    host = "magnet-1eu.${TAILSCALE_DOMAIN}";
+    host = "100.97.156.118";  /* Tailscale IP for magnet-1eu */
+    vhost = "100.66.199.63";  /* Our Tailscale IP for magnet-9rl */
     send_password = "${PASSWORD_1EU}";
     accept_password = "${PASSWORD_9RL}";
     port = 6667;
@@ -35,9 +36,10 @@ connect "magnet-1eu.internal" {
 };
 
 /* Connect block for services */
-connect "magnet-atheme.internal" {
-    host = "*.magnet-atheme.internal";
-    vhost = "${FLY_PRIVATE_IP}";
+connect "magnet-atheme.${TAILSCALE_DOMAIN}" {
+    host = "magnet-atheme.${TAILSCALE_DOMAIN}";
+    host = "100.123.207.46";  /* Tailscale IP for magnet-atheme */
+    vhost = "100.66.199.63";  /* Our Tailscale IP for magnet-9rl */
     send_password = "${SERVICES_PASSWORD}";
     accept_password = "${PASSWORD_9RL}";
     port = 6667;

servers/magnet-atheme/fly.toml

@@ -22,7 +22,9 @@ primary_region = "ord"
   SERVER_NAME = "magnet-atheme"
   ATHEME_NETWORK = "Magnet"
   ATHEME_HUB_SERVER = "magnet-9RL"
-  ATHEME_HUB_HOSTNAME = "magnet-9rl.internal"
+  ATHEME_HUB_HOSTNAME = "magnet-9rl-1.camel-kanyu.ts.net"
+  ATHEME_FALLBACK_HOSTNAME = "magnet-1eu.camel-kanyu.ts.net"
+  ATHEME_TAILSCALE_IP = "100.123.207.46"
   TAILSCALE_DOMAIN = "camel-kanyu.ts.net"
   ADMIN_NAME = "Chris Prather"
   ADMIN_EMAIL = "[email protected]"