[no ci] feat: now got ssh access to skynet.skynet.ie

This commit is contained in:
silver 2023-09-05 15:02:02 +01:00
parent 522efc92cc
commit c5c0df3f5e

View file

@ -35,12 +35,10 @@ in {
# it has two network devices so two
skynet_dns.records = [
#{record=name; r_type="A"; value=ip_pub; server=true;}
{record=name; r_type="A"; value=ip_priv; server=true; }
{record="ext"; r_type="A"; value=ip_pub; server=false;}
{record="${name}.int"; r_type="A"; value=ip_priv; server=true;}
{record=ip_priv; r_type="PTR"; value=hostname_int;}
{record=name; r_type="A"; value=ip_pub; server=true;}
{record="${name}.int"; r_type="A"; value=ip_priv; server=true;}
{record=ip_pub; r_type="PTR"; value=hostname;}
{record=ip_priv; r_type="PTR"; value=hostname_int;}
];
services.skynet_backup = {
@ -59,24 +57,31 @@ in {
};
proxmoxLXC.manageNetwork = true;
networking.hostName = name;
networking.interfaces = {
eth0.ipv4.addresses = [
{
address = ip_priv;
prefixLength = 26;
}
];
eth1.ipv4.addresses = [
{
address = ip_pub;
prefixLength = 28;
}
];
networking = {
hostName = name;
# needed to use the dmz first
defaultGateway = lib.mkForce "193.1.96.161";
interfaces = {
eth0.ipv4.addresses = [
{
address = ip_priv;
prefixLength = 26;
}
];
# primary ip for logging in
eth1.ipv4.addresses = [
{
address = ip_pub;
prefixLength = 28;
}
];
};
};
services.skynet = {
host = {
# website is still hosted on the internal IP
ip = ip_priv;
name = name;
};