makefu/stockholm
1
0
Fork 0
Code Issues Pull requests Actions 1 Packages Projects Releases Wiki Activity

l: set short ipv6 addresses for all hosts

Browse source
This commit is contained in:
lassulus 2018-12-15 21:10:05 +01:00
parent 2407577433
commit 9e6dbd6df4
1 changed files with 37 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

50
krebs/3modules/lass/default.nix
View file

@ -1,16 +1,14 @@
with import <stockholm/lib>; with import <stockholm/lib>;
{ config, ... }: let { config, ... }: let
hostDefaults = hostName: host: flip recursiveUpdate host ({ hostDefaults = hostName: host: flip recursiveUpdate host {
ci = true; ci = true;
monitoring = true; monitoring = true;
owner = config.krebs.users.lass; owner = config.krebs.users.lass;
} // optionalAttrs (host.nets?retiolum) { };
nets.retiolum.ip6.addr =
(krebs.genipv6 "retiolum" "lass" { inherit hostName; }).address;
});
wip6 = krebs.genipv6 "wirelum" "lass"; r6 = ip: (krebs.genipv6 "retiolum" "lass" ip).address;
w6 = ip: (krebs.genipv6 "wirelum" "lass" ip).address;
in { in {
dns.providers = { dns.providers = {
@ -56,6 +54,7 @@ in {
retiolum = { retiolum = {
via = internet; via = internet;
ip4.addr = "10.243.0.103"; ip4.addr = "10.243.0.103";
ip6.addr = r6 "1";
aliases = [ aliases = [
"prism.r" "prism.r"
"cache.prism.r" "cache.prism.r"
@ -93,13 +92,13 @@ in {
wirelum = { wirelum = {
via = internet; via = internet;
ip4.addr = "10.244.1.1"; ip4.addr = "10.244.1.1";
ip6.addr = (wip6 "1").address; ip6.addr = w6 "1";
aliases = [ aliases = [
"prism.w" "prism.w"
]; ];
wireguard = { wireguard = {
pubkey = "oKJotppdEJqQBjrqrommEUPw+VFryvEvNJr/WikXohk="; pubkey = "oKJotppdEJqQBjrqrommEUPw+VFryvEvNJr/WikXohk=";
subnets = [ "10.244.1.0/24" (wip6 "1").subnetCIDR ]; subnets = [ "10.244.1.0/24" "42:1::/32" ];
}; };
}; };
}; };
@ -150,6 +149,7 @@ in {
nets = { nets = {
retiolum = { retiolum = {
ip4.addr = "10.243.81.176"; ip4.addr = "10.243.81.176";
ip6.addr = r6 "1e1";
aliases = [ aliases = [
"uriel.r" "uriel.r"
"cgit.uriel.r" "cgit.uriel.r"
@ -175,6 +175,7 @@ in {
nets = { nets = {
retiolum = { retiolum = {
ip4.addr = "10.243.0.2"; ip4.addr = "10.243.0.2";
ip6.addr = r6 "dea7";
aliases = [ aliases = [
"mors.r" "mors.r"
"cgit.mors.r" "cgit.mors.r"
@ -191,7 +192,7 @@ in {
''; '';
}; };
wirelum = { wirelum = {
ip6.addr = (wip6 "dea7").address; ip6.addr = w6 "dea7";
aliases = [ aliases = [
"mors.w" "mors.w"
]; ];
@ -207,6 +208,7 @@ in {
nets = { nets = {
retiolum = { retiolum = {
ip4.addr = "10.243.0.4"; ip4.addr = "10.243.0.4";
ip6.addr = r6 "50da";
aliases = [ aliases = [
"shodan.r" "shodan.r"
"cgit.shodan.r" "cgit.shodan.r"
@ -223,7 +225,7 @@ in {
''; '';
}; };
wirelum = { wirelum = {
ip6.addr = (wip6 "50da").address; ip6.addr = w6 "50da";
aliases = [ aliases = [
"shodan.w" "shodan.w"
]; ];
@ -239,6 +241,7 @@ in {
nets = rec { nets = rec {
retiolum = { retiolum = {
ip4.addr = "10.243.133.114"; ip4.addr = "10.243.133.114";
ip6.addr = r6 "1205";
aliases = [ aliases = [
"icarus.r" "icarus.r"
"cgit.icarus.r" "cgit.icarus.r"
@ -255,7 +258,7 @@ in {
''; '';
}; };
wirelum = { wirelum = {
ip6.addr = (wip6 "1205").address; ip6.addr = w6 "1205";
aliases = [ aliases = [
"icarus.w" "icarus.w"
]; ];
@ -271,6 +274,7 @@ in {
nets = rec { nets = rec {
retiolum = { retiolum = {
ip4.addr = "10.243.133.115"; ip4.addr = "10.243.133.115";
ip6.addr = r6 "dead";
aliases = [ aliases = [
"daedalus.r" "daedalus.r"
"cgit.daedalus.r" "cgit.daedalus.r"
@ -296,6 +300,7 @@ in {
nets = rec { nets = rec {
retiolum = { retiolum = {
ip4.addr = "10.243.133.116"; ip4.addr = "10.243.133.116";
ip6.addr = r6 "5ce7";
aliases = [ aliases = [
"skynet.r" "skynet.r"
"cgit.skynet.r" "cgit.skynet.r"
@ -321,6 +326,7 @@ in {
nets = { nets = {
retiolum = { retiolum = {
ip4.addr = "10.243.133.77"; ip4.addr = "10.243.133.77";
ip6.addr = r6 "771e";
aliases = [ aliases = [
"littleT.r" "littleT.r"
]; ];
@ -402,6 +408,7 @@ in {
nets = { nets = {
retiolum = { retiolum = {
ip4.addr = "10.243.0.13"; ip4.addr = "10.243.0.13";
ip6.addr = r6 "12ed";
aliases = [ aliases = [
"red.r" "red.r"
]; ];
@ -431,6 +438,7 @@ in {
nets = { nets = {
retiolum = { retiolum = {
ip4.addr = "10.243.0.14"; ip4.addr = "10.243.0.14";
ip6.addr = r6 "3110";
aliases = [ aliases = [
"yellow.r" "yellow.r"
]; ];
@ -452,7 +460,7 @@ in {
''; '';
}; };
wirelum = { wirelum = {
ip6.addr = (wip6 "e110").address; ip6.addr = w6 "3110";
aliases = [ aliases = [
"yellow.w" "yellow.w"
]; ];
@ -467,6 +475,7 @@ in {
nets = { nets = {
retiolum = { retiolum = {
ip4.addr = "10.243.0.77"; ip4.addr = "10.243.0.77";
ip6.addr = r6 "b1ce";
aliases = [ aliases = [
"blue.r" "blue.r"
]; ];
@ -487,6 +496,13 @@ in {
-----END PUBLIC KEY----- -----END PUBLIC KEY-----
''; '';
}; };
wirelum = {
ip6.addr = w6 "b1ce";
aliases = [
"blue.w"
];
wireguard.pubkey = "emftvx8v8GdoKe68MFVL53QZ187Ei0zhMmvosU1sr3U=";
};
}; };
ssh.privkey.path = <secrets/ssh.id_ed25519>; ssh.privkey.path = <secrets/ssh.id_ed25519>;
ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILSBxtPf8yJfzzI7/iYpoRSc/TT+zYmE/HM9XWS3MZlv"; ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILSBxtPf8yJfzzI7/iYpoRSc/TT+zYmE/HM9XWS3MZlv";
@ -494,8 +510,8 @@ in {
phone = { phone = {
nets = { nets = {
wirelum = { wirelum = {
ip6.addr = (wip6 "a").address;
ip4.addr = "10.244.1.2"; ip4.addr = "10.244.1.2";
ip6.addr = w6 "a";
aliases = [ aliases = [
"phone.w" "phone.w"
]; ];
@ -510,6 +526,7 @@ in {
nets = { nets = {
retiolum = { retiolum = {
ip4.addr = "10.243.0.19"; ip4.addr = "10.243.0.19";
ip6.addr = r6 "012f";
aliases = [ aliases = [
"morpheus.r" "morpheus.r"
]; ];
@ -529,6 +546,13 @@ in {
-----END RSA PUBLIC KEY----- -----END RSA PUBLIC KEY-----
''; '';
}; };
wirelum = {
ip6.addr = w6 "012f";
aliases = [
"morpheus.w"
];
wireguard.pubkey = "BdiIHJjJQThmZD8DehxPGA+bboBHjljedwaRaV5yyDY=";
};
}; };
ssh.privkey.path = <secrets/ssh.id_ed25519>; ssh.privkey.path = <secrets/ssh.id_ed25519>;
ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHXS60mmNWMdMRvaPxGn91Cm/hm7zY8xn5rkI4n2KG/f "; ssh.pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHXS60mmNWMdMRvaPxGn91Cm/hm7zY8xn5rkI4n2KG/f ";