Klub-RZ/infrastructure
4
0
Fork 0
Code Issues 7 Pull requests Projects Releases Packages Wiki Activity

core-01: redirect most of our services to web01.dmi01.infra.dgnum.eu

Browse source
This commit is contained in:
Raito Bezarius 2023-12-21 12:27:35 +01:00
parent 41fc60e1eb
commit 49ed2855a5
1 changed files with 19 additions and 39 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

58
machines/core-services-01/subZone.nix
View file

@ -3,15 +3,15 @@
with dns.lib.combinators;
let
my = config.my;
web01 = {
CNAME = "web01.dmi01.infra.dgnum.eu";
};
public-cof-ips = {
A = [ "45.13.104.27" ];
AAAA = [ "2001:470:1f13:187:c08e:feff:fe4d:f5f5" ];
};
delegateACMEDNSChallenge = acme: { _acme-challenge.CNAME = [ acme ]; };
remoteBuilders = {
nix01 = [ "2001:470:1f13:187:611:4514:d93a:f80a" ];
};
mkProxyRecord = AAAA: { inherit AAAA; A = [ "45.13.104.29" ]; };
dualstack = {
A = my.ipv4;
@ -32,41 +32,21 @@ dualstack // {
CAA = letsEncrypt my.email;
subdomains = {
git = dualstack;
git = web01;
drone = dualstack;
wiki = dualstack;
monitoring = dualstack;
auth = dualstack;
push = dualstack;
tailscale = dualstack;
inventory = dualstack;
core01 = dualstack;
ns1 = dualstack;
# Non-beta service
# Outline
notion = public-cof-ips;
notion = web01;
# S3 API
s3 = public-cof-ips;
s3 = web01;
# CDN API
cdn = public-cof-ips // {
CAA = [
{ issuerCritical = false;
tag = "issue";
value = "letsencrypt.org";
}
{
issuerCritical = false;
tag = "iodef";
value = "mailto:${my.email}";
}
];
subdomains = {
"*" = public-cof-ips;
} // delegateACMEDNSChallenge "7a9dffd8-f57b-4635-ba79-07f8b0db4fad.acme.rz.ens.wtf.";
};
builders.subdomains = lib.mapAttrs (n: AAAA: { inherit AAAA; }) remoteBuilders;
cdn = web01;
gdd = {
NS = [ "ns1.gdd.${my.subZone}." ];
@ -83,21 +63,21 @@ dualstack // {
beta = public-cof-ips // {
subdomains = {
traque = mkProxyRecord [ "2001:470:1f13:187:f053:94ff:fe46:9664" ];
nuage = public-cof-ips;
todo = public-cof-ips;
minecraft = public-cof-ips;
factorio = public-cof-ips;
home = public-cof-ips;
pads = public-cof-ips // {
nuage = web01;
todo = web01;
minecraft = web01;
factorio = web01;
home = web01;
pads = web01 // {
subdomains = {
api = public-cof-ips;
files = public-cof-ips;
sandbox = public-cof-ips;
api = web01;
files = web01;
sandbox = web01;
};
};
docs = public-cof-ips;
jurisprudens = public-cof-ips;
rstudio = public-cof-ips;
docs = web01;
jurisprudens = web01;
rstudio = web01;
};
};