Commit graph

180 commits

Author SHA1 Message Date
Raito Bezarius
683555e4eb router04: init and add to VRRP group 2024-01-12 04:04:23 +01:00
Raito Bezarius
2555b97680 router03: enable VRRP 2024-01-12 04:04:10 +01:00
Raito Bezarius
fa0ce6b7ef modules/krz-router: support VRRP
This adds VRRP support on a management L2 domain.

All of this is a bit insecure, we should at least aim to share a password or something.
2024-01-12 04:03:57 +01:00
Raito Bezarius
1a6f9ffb8f router03: perfect refactor into a proper NixOS module
We will focus on growing it for KlubRZ usecases first and then grow it into a proper
external project called Hypervisor NixOS routers.
2024-01-12 02:22:05 +01:00
Raito Bezarius
a0681ee841 router03: fix leakage of MWAN traffic
When traffic is coming in, i.e. `To = 45.13.104.25/29`, we were immediately redirecting
it to `swp`, i.e. ENS.

By saying that `To` should also consult the MWAN routing table, we are eliminating
the redirection.
2024-01-12 02:02:14 +01:00
Raito Bezarius
94a64b792c router03: init 2024-01-02 00:39:33 +01:00
9236bed612 feat(npins): Update nix-lib 2023-12-22 23:53:55 +01:00
779f3f3d9e core-services-01: fix cname 2023-12-21 15:12:44 +01:00
9fd583a9cc core-services-01: Disable services 2023-12-21 14:32:12 +01:00
9c32d9b838 core-services-01: Update DNS config 2023-12-21 14:31:50 +01:00
Raito Bezarius
3f20242eab remote-builder-01: decommission 2023-12-21 12:28:49 +01:00
Raito Bezarius
49ed2855a5 core-01: redirect most of our services to web01.dmi01.infra.dgnum.eu 2023-12-21 12:27:55 +01:00
41fc60e1eb core-01: Disable netboot-server 2023-07-23 23:56:33 +02:00
29034e6056 krops.nix: Delete 2023-07-23 23:50:10 +02:00
7f88c60cc2 Switch from krops to colmena 2023-07-23 23:36:55 +02:00
6b6470eef9 keys: Move from machines/publickeys 2023-07-23 23:36:06 +02:00
50c17c74bb Add 'CONTRIBUTING.md' 2023-07-23 18:07:44 +02:00
sinavir
6fb8528a99 public-cof: upgrade garage 2023-07-23 18:07:40 +02:00
Raito Bezarius
2ab0cc6885 public-cof: NC25 → NC26
Get us rid of RC4 encryption shenigans.
2023-07-23 17:52:45 +02:00
sinavir
55c7194022 core-01: make it work for 23.05 2023-07-23 17:49:32 +02:00
Raito Bezarius
793e4d2aee public-cof: add some tuning for lychee 2023-07-19 00:22:03 +02:00
Raito Bezarius
42cd2d7b79 public-cof: add thubrecht 2023-07-19 00:21:54 +02:00
Raito Bezarius
b88167f46a deployment: fix it for 23.05… 2023-07-19 00:21:44 +02:00
Raito Bezarius
2fde8ccf15 deployment: upgrade to 23.05 2023-07-19 00:04:42 +02:00
sinavir
deffb8e1fc core-01: fix ipv4 routing issue 2023-02-24 10:56:54 +01:00
3f2e795b0e chore: Rename module options 2023-02-23 23:59:59 +00:00
66c40b1026 feat: Add sinavir's keys to public-cof and remote-builder-01 2023-02-23 23:59:59 +00:00
244c8027aa feat: Add sinavir's keys for core-services-01 2023-02-23 23:59:59 +00:00
461b1e2aa7 Merge pull request 'fix serveur photos' (#24) from serveur_photos_fix into master
Reviewed-on: https://git.rz.ens.wtf/Klub-RZ/infrastructure/pulls/24
2023-01-30 21:35:33 +01:00
sinavir
455fd180d2 pm=dynamic 2023-01-30 21:21:29 +01:00
bd22c63ec4 public-cof: Switch to systemd-network 2023-01-25 16:55:22 +01:00
f410aa4c75 core-services-01: Switch to systemd-network 2023-01-25 15:35:41 +01:00
Raito Bezarius
5138eb930f core-services-01: add hubrecht 2023-01-24 21:14:04 +01:00
sinavir
9a0c9c615c feat: introduce photos.ens.wtf
Co-authored-by: sinavir <sinavir@sinavir.fr>
Reviewed-on: https://git.rz.ens.wtf/Klub-RZ/infrastructure/pulls/15
Co-authored-by: sinavir <maurice.debray@ens.fr>
Co-committed-by: sinavir <maurice.debray@ens.fr>
2022-12-13 22:23:35 +01:00
Ryan Lahfa
ed92c3df99 Merge pull request 'whitelist thejohncrafter' (#14) from mrf-whitelist into master
Reviewed-on: https://git.rz.ens.wtf/Klub-RZ/infrastructure/pulls/14
2022-12-03 22:14:35 +01:00
Julien Marquet
66ae9b2d04 whitelist thejohncrafter 2022-12-03 21:15:40 +01:00
Raito Bezarius
dbd7594d59 mc: whitelist more players 2022-11-14 23:46:55 +01:00
Raito Bezarius
a2c58e4d87 mc: add Clem's friends to whitelist 2022-11-05 15:48:40 +01:00
Raito Bezarius
d1bc89653c public-cof: fix NC encryption 2022-10-29 17:33:05 +02:00
Raito Bezarius
82cfe98dde core01: fix matterbridge for DGNum 2022-10-29 17:32:39 +02:00
Raito Bezarius
555aabb798 krops: bump channel 2022-10-29 17:32:19 +02:00
Raito Bezarius
42a569b41d public-cof: deploy completely Outline and Garage 2022-10-29 17:32:10 +02:00
Raito Bezarius
43d3367e9f core01: DNS for Garage & Outline 2022-10-29 17:31:46 +02:00
Raito Bezarius
b40a49feed feat: add notion.rz.ens.wtf → public-cof 2022-10-28 00:36:57 +02:00
Raito Bezarius
7beba08321 public-cof: nextcloud24 -> nextcloud25 2022-10-27 22:40:43 +02:00
Raito Bezarius
ccf00cdc46 public-cof: nextcloud23 -> nextcloud24 2022-10-27 22:31:55 +02:00
Raito Bezarius
e827b28967 feat: deploy garage on public-cof 2022-10-27 22:31:47 +02:00
Raito Bezarius
570071bb71 feat: bump to 1.19.2 and add clem197 to allow-list 2022-10-13 21:52:40 +02:00
Raito Bezarius
6b02a84975 core01: initialize tunnels setup 2022-10-12 01:29:08 +02:00
Raito Bezarius
964912c3d4 core01: try latest nightly for netdata and disable cloud 2022-10-09 14:43:29 +02:00