24 commits

Author	SHA1	Message	Date
Baptiste Jonglez	d396f35235	Update IP for piranha.corrin	2023-10-22 20:17:33 +02:00
Alex Auvolat	a9e9149739	Fix unbound; remove Nixos firewall (use only diplonat)	2023-04-21 11:29:15 +02:00
Alex Auvolat	ecfab3c628	Merge branch 'main' into simplify-network-config	2023-03-24 15:35:27 +01:00
Alex Auvolat	96566ae523	refactor configuration syntax	2023-03-24 15:26:39 +01:00
Alex Auvolat	e2aea648cf	greatly simplify ipv4 and ipv6 configuration	2023-03-24 14:42:36 +01:00
Baptiste Jonglez	8ae9ec6514	Update piranha IP again	2023-03-24 13:01:24 +01:00
Alex Auvolat	a0db30ca26	Sanitize DNS configuration ... - get rid of outside nameserver, unbound does the recursive resolving itself (and it checks DNSSEC) - remove CAP_NET_BIND_SERVICE for Consul as it is no longer binding on port 53 (was already obsolete) - make unbound config independant of LAN IPv4 address	2023-03-24 12:58:44 +01:00
Baptiste Jonglez	3eb5e21f9d	New IP for piranha	2023-03-06 14:30:22 +01:00
Alex Auvolat	26f78872e6	staging: add node df-pw5 at bespin	2023-01-04 10:02:21 +01:00
Baptiste Jonglez	1c48fd4ae4	Add new staging zone and node	2022-12-28 16:49:43 +01:00
Alex Auvolat	578075a925	Add origan node in staging cluster (+ refactor system.stateVersion)	2022-12-11 22:37:28 +01:00
Alex Auvolat	a1fc396412	Add possible public_ipv4 node tag	2022-12-07 17:13:03 +01:00
Alex Auvolat	ab97a7bffd	Staging: Add CNAME target meta parameter, will be used for diplonat auto dns update	2022-12-07 12:32:21 +01:00
Alex Auvolat	27214332e9	IPv6 by FDN	2022-10-16 19:10:51 +02:00
Alex Auvolat	c239e34a25	IPv6 prefix at Neptune changed again	2022-10-09 17:07:47 +02:00
Alex Auvolat	39fbbbe863	Change ipv6 tunnel server	2022-09-09 17:23:23 +02:00
Alex Auvolat	468c6b702b	Add ipv6 gateway at neptune	2022-08-24 12:31:55 +02:00
Alex Auvolat	641a68715f	Configure Consul DNS	2022-06-01 14:48:16 +02:00
Alex Auvolat	83dd3ea25a	Update network configuration	2022-05-08 14:42:18 +02:00
Alex Auvolat	10d370491e	Replace ad-hoc wireguard by wesher on staging cluster	2022-04-20 18:04:57 +02:00
Alex Auvolat	27ffee95b8	Updates; change crontab	2022-03-07 16:57:43 +01:00
Alex Auvolat	6dc9281299	Add remote LUKS unlocking configuration	2022-02-25 17:52:17 +01:00
Alex Auvolat	fe3e529cf6	Use local DNS resolver instead of quad9 that wasn't working very well	2022-02-22 10:06:51 +01:00
Alex Auvolat	f03cafd49b	Modularize and prepare to support multiple clusters	2022-02-09 12:09:49 +01:00