tixie/nixcfg
1
0
Fork 0
forked from Deuxfleurs/nixcfg
Code Pull requests Activity

IPv6 prefix at Neptune changed again

Browse source
This commit is contained in:
Alex 2022-10-09 17:07:47 +02:00
parent e8cdd6864a
commit c239e34a25
Signed by untrusted user: lx
GPG key ID: 0E496D15096376BE
13 changed files with 14 additions and 81 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
cluster/prod/node/celeri.nix
View file

@ -12,7 +12,7 @@
deuxfleurs.network_interface = "eno1";
deuxfleurs.lan_ip = "192.168.1.33";
deuxfleurs.ipv6 = "2a06:a003:515d:1::33";
deuxfleurs.ipv6 = "2a06:a003:d019:1::33";
deuxfleurs.cluster_ip = "10.83.1.3";
deuxfleurs.is_raft_server = true;

2
cluster/prod/node/concombre.nix
View file

@ -12,7 +12,7 @@
deuxfleurs.network_interface = "eno1";
deuxfleurs.lan_ip = "192.168.1.31";
deuxfleurs.ipv6 = "2a06:a003:515d:1::31";
deuxfleurs.ipv6 = "2a06:a003:d019:1::31";
deuxfleurs.cluster_ip = "10.83.1.1";
deuxfleurs.is_raft_server = true;

2
cluster/prod/node/courgette.nix
View file

@ -12,7 +12,7 @@
deuxfleurs.network_interface = "eno1";
deuxfleurs.lan_ip = "192.168.1.32";
deuxfleurs.ipv6 = "2a06:a003:515d:1::32";
deuxfleurs.ipv6 = "2a06:a003:d019:1::32";
deuxfleurs.cluster_ip = "10.83.1.2";
deuxfleurs.is_raft_server = false;

2
cluster/prod/site/neptune.nix
View file

@ -3,7 +3,7 @@
{
deuxfleurs.site_name = "neptune";
deuxfleurs.lan_default_gateway = "192.168.1.1";
deuxfleurs.ipv6_default_gateway = "2a06:a003:515d:1::1";
deuxfleurs.ipv6_default_gateway = "2a06:a003:d019:1::1";
deuxfleurs.lan_ip_prefix_length = 24;
deuxfleurs.ipv6_prefix_length = 64;
deuxfleurs.nameservers = [ "192.168.1.1" ];

6
cluster/prod/ssh_config
View file

@ -1,15 +1,15 @@
UserKnownHostsFile ./ssh_known_hosts
Host concombre
HostName 2a06:a003:515d:1::31
HostName 2a06:a003:d019:1::31
#HostName 192.168.1.31
Host courgette
HostName 2a06:a003:515d:1::32
HostName 2a06:a003:d019:1::32
#HostName 192.168.1.32
Host celeri
HostName 2a06:a003:515d:1::33
HostName 2a06:a003:d019:1::33
#HostName 192.168.1.33
Host dahlia

2
cluster/staging/node/carcajou.nix
View file

@ -17,7 +17,7 @@
deuxfleurs.network_interface = "eno1";
deuxfleurs.lan_ip = "192.168.1.22";
deuxfleurs.ipv6 = "2a06:a003:515d:1::22";
deuxfleurs.ipv6 = "2a06:a003:d019:1::22";
deuxfleurs.cluster_ip = "10.14.1.2";
deuxfleurs.is_raft_server = true;

2
cluster/staging/node/cariacou.nix
View file

@ -17,7 +17,7 @@
deuxfleurs.network_interface = "eno1";
deuxfleurs.lan_ip = "192.168.1.21";
deuxfleurs.ipv6 = "2a06:a003:515d:1::21";
deuxfleurs.ipv6 = "2a06:a003:d019:1::21";
deuxfleurs.cluster_ip = "10.14.1.1";
deuxfleurs.is_raft_server = true;

2
cluster/staging/node/caribou.nix
View file

@ -17,7 +17,7 @@
deuxfleurs.network_interface = "eno1";
deuxfleurs.lan_ip = "192.168.1.23";
deuxfleurs.ipv6 = "2a06:a003:515d:1::23";
deuxfleurs.ipv6 = "2a06:a003:d019:1::23";
deuxfleurs.cluster_ip = "10.14.1.3";
deuxfleurs.is_raft_server = true;

58
cluster/staging/node/spoutnik.nix.unavailable
View file

@ -1,58 +0,0 @@
# Edit this configuration file to define what should be installed on
# your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, ... }:
{
boot.loader.grub.enable = true;
boot.loader.grub.version = 2;
boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
networking.hostName = "spoutnik";
services.openssh.ports = [ 220 ];
deuxfleurs.network_interface = "enp0s25";
deuxfleurs.lan_ip = "192.168.0.40";
deuxfleurs.ipv6 = "::"; #TODO
deuxfleurs.cluster_ip = "10.14.0.0";
deuxfleurs.is_raft_server = false; #TODO
# Nginx configuration:
services.nginx = {
enable = true;
# Use recommended settings
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
# Add any further config to match your needs, e.g.:
virtualHosts = let
base = locations: {
inherit locations;
forceSSL = true;
enableACME = true;
};
proxy = addr: port: base {
"/".proxyPass = "http://" + addr + ":" + toString(port);
};
in {
"axl.deuxfleurs.fr" = proxy "192.168.0.60" 80;
"warez.luxeylab.net" = proxy "192.168.0.50" 80;
};
};
# ACME:
security.acme = {
acceptTerms = true;
email = "adrien@luxeylab.net";
};
}

1
cluster/staging/node/spoutnik.site.nix
View file

@ -1 +0,0 @@
../site/pluton.nix

2
cluster/staging/site/neptune.nix
View file

@ -3,7 +3,7 @@
{
deuxfleurs.site_name = "neptune";
deuxfleurs.lan_default_gateway = "192.168.1.1";
deuxfleurs.ipv6_default_gateway = "2a06:a003:515d:1::1";
deuxfleurs.ipv6_default_gateway = "2a06:a003:d019:1::1";
deuxfleurs.lan_ip_prefix_length = 24;
deuxfleurs.ipv6_prefix_length = 64;
deuxfleurs.nameservers = [ "192.168.1.1" ];

11
cluster/staging/site/pluton.nix
View file

@ -1,11 +0,0 @@
{ config, pkgs, ... }:
{
deuxfleurs.site_name = "pluton";
deuxfleurs.lan_default_gateqay = "192.168.0.1";
deuxfleurs.lan_ip_prefix_length = 24;
deuxfleurs.ipv6_prefix_length = 64;
deuxfleurs.nameservers = [ "213.186.33.99" "172.104.136.243" ];
networking.firewall.allowedTCPPorts = [ 80 443 ];
}

3
ssh_known_hosts
View file

@ -15,3 +15,6 @@ diplotaxis.machine.deuxfleurs.fr ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFcVtfOj0ti
2a06:a003:515d:1::33 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOuY1CvhxBP9BtKkTlmOUu6Hhy8OQTB3R8OCFXbHA/RA
2a06:a003:515d:1::31 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL3N0QOFNGkCpVLuOHFdpnBaxIFH925KpdIHV/3F9+BR
2a06:a003:515d:1::32 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPCXJeo6yeQeTN7D7OZwLd8zbyU1jWywlhQ29yyk7x+G
2a06:a003:d019:1::33 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOuY1CvhxBP9BtKkTlmOUu6Hhy8OQTB3R8OCFXbHA/RA
2a06:a003:d019:1::31 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL3N0QOFNGkCpVLuOHFdpnBaxIFH925KpdIHV/3F9+BR
2a06:a003:d019:1::32 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPCXJeo6yeQeTN7D7OZwLd8zbyU1jWywlhQ29yyk7x+G