core-01: redirect most of our services to web01.dmi01.infra.dgnum.eu
This commit is contained in:
parent
41fc60e1eb
commit
49ed2855a5
|
@ -3,15 +3,15 @@
|
|||
with dns.lib.combinators;
|
||||
let
|
||||
my = config.my;
|
||||
web01 = {
|
||||
CNAME = "web01.dmi01.infra.dgnum.eu";
|
||||
};
|
||||
public-cof-ips = {
|
||||
A = [ "45.13.104.27" ];
|
||||
AAAA = [ "2001:470:1f13:187:c08e:feff:fe4d:f5f5" ];
|
||||
};
|
||||
delegateACMEDNSChallenge = acme: { _acme-challenge.CNAME = [ acme ]; };
|
||||
|
||||
remoteBuilders = {
|
||||
nix01 = [ "2001:470:1f13:187:611:4514:d93a:f80a" ];
|
||||
};
|
||||
mkProxyRecord = AAAA: { inherit AAAA; A = [ "45.13.104.29" ]; };
|
||||
dualstack = {
|
||||
A = my.ipv4;
|
||||
|
@ -32,41 +32,21 @@ dualstack // {
|
|||
CAA = letsEncrypt my.email;
|
||||
|
||||
subdomains = {
|
||||
git = dualstack;
|
||||
git = web01;
|
||||
drone = dualstack;
|
||||
wiki = dualstack;
|
||||
monitoring = dualstack;
|
||||
auth = dualstack;
|
||||
push = dualstack;
|
||||
tailscale = dualstack;
|
||||
inventory = dualstack;
|
||||
core01 = dualstack;
|
||||
ns1 = dualstack;
|
||||
|
||||
# Non-beta service
|
||||
# Outline
|
||||
notion = public-cof-ips;
|
||||
notion = web01;
|
||||
# S3 API
|
||||
s3 = public-cof-ips;
|
||||
s3 = web01;
|
||||
# CDN API
|
||||
cdn = public-cof-ips // {
|
||||
CAA = [
|
||||
{ issuerCritical = false;
|
||||
tag = "issue";
|
||||
value = "letsencrypt.org";
|
||||
}
|
||||
{
|
||||
issuerCritical = false;
|
||||
tag = "iodef";
|
||||
value = "mailto:${my.email}";
|
||||
}
|
||||
];
|
||||
subdomains = {
|
||||
"*" = public-cof-ips;
|
||||
} // delegateACMEDNSChallenge "7a9dffd8-f57b-4635-ba79-07f8b0db4fad.acme.rz.ens.wtf.";
|
||||
};
|
||||
|
||||
builders.subdomains = lib.mapAttrs (n: AAAA: { inherit AAAA; }) remoteBuilders;
|
||||
cdn = web01;
|
||||
|
||||
gdd = {
|
||||
NS = [ "ns1.gdd.${my.subZone}." ];
|
||||
|
@ -83,21 +63,21 @@ dualstack // {
|
|||
beta = public-cof-ips // {
|
||||
subdomains = {
|
||||
traque = mkProxyRecord [ "2001:470:1f13:187:f053:94ff:fe46:9664" ];
|
||||
nuage = public-cof-ips;
|
||||
todo = public-cof-ips;
|
||||
minecraft = public-cof-ips;
|
||||
factorio = public-cof-ips;
|
||||
home = public-cof-ips;
|
||||
pads = public-cof-ips // {
|
||||
nuage = web01;
|
||||
todo = web01;
|
||||
minecraft = web01;
|
||||
factorio = web01;
|
||||
home = web01;
|
||||
pads = web01 // {
|
||||
subdomains = {
|
||||
api = public-cof-ips;
|
||||
files = public-cof-ips;
|
||||
sandbox = public-cof-ips;
|
||||
api = web01;
|
||||
files = web01;
|
||||
sandbox = web01;
|
||||
};
|
||||
};
|
||||
docs = public-cof-ips;
|
||||
jurisprudens = public-cof-ips;
|
||||
rstudio = public-cof-ips;
|
||||
docs = web01;
|
||||
jurisprudens = web01;
|
||||
rstudio = web01;
|
||||
};
|
||||
};
|
||||
|
||||
|
|
Loading…
Reference in a new issue