Romain Paquet
09f57a1e6f
Currently using a patched version of the upstream coredns service, with hard-coded IPs until wireguard exports are supported. Zerotier connections were flaky and wireguard seems more stable (although it seems to have a bit less throughput).
67 lines
1.6 KiB
Nix
67 lines
1.6 KiB
Nix
{ self, ... }:
|
|
{
|
|
clan.inventory.instances.zerotier = {
|
|
roles.controller.machines.crocus = { };
|
|
roles.moon.machines.crocus = {
|
|
settings = {
|
|
stableEndpoints = [
|
|
"116.203.18.122"
|
|
"2a01:4f8:1c1e:e415::/64"
|
|
];
|
|
};
|
|
};
|
|
roles.peer.tags."all" = { };
|
|
};
|
|
|
|
clan.inventory.instances.internet = {
|
|
roles.default.machines.verbena.settings.host = self.infra.machines.verbena.ipv4;
|
|
roles.default.machines.crocus.settings.host = self.infra.machines.crocus.ipv4;
|
|
};
|
|
|
|
clan.inventory.instances.wireguard = {
|
|
module.name = "wireguard";
|
|
module.input = "clan-core";
|
|
roles.controller = {
|
|
machines.verbena.settings = {
|
|
endpoint = "wg1.turifer.dev";
|
|
};
|
|
};
|
|
roles.peer.machines = {
|
|
haze = { };
|
|
crocus = { };
|
|
genepi = { };
|
|
};
|
|
};
|
|
|
|
# Temporarily patched version of clan-core/coredns for AAAA records support
|
|
clan.inventory.instances.coredns = {
|
|
module.name = "@rpqt/coredns";
|
|
module.input = "self";
|
|
|
|
roles.default.tags.all = { };
|
|
roles.server.machines.verbena = {
|
|
settings.ip = "fd28:387a:90:c400::1";
|
|
};
|
|
roles.server.machines.crocus = {
|
|
settings.ip = "fd28:387a:90:c400:6db2:dfc3:c376:9956";
|
|
};
|
|
roles.server.settings = {
|
|
tld = "home.rpqt.fr";
|
|
};
|
|
|
|
roles.default.machines.genepi.settings = {
|
|
ip = "fd28:387a:90:c400:ab23:3d38:a148:f539"; # FIXME: IPv4 expected (A record)
|
|
services = [
|
|
"actual"
|
|
"assistant"
|
|
"glance"
|
|
"grafana"
|
|
"images"
|
|
"lounge"
|
|
"pinchflat"
|
|
"rss"
|
|
];
|
|
};
|
|
};
|
|
}
|