Commit 7c183873ae1b

Vincent Demeester <vincent@sbr.pm>
2021-10-22 11:56:06
ops: start a "hosts" file for networks and hosts
One of the goal here is to generate wireguard, bind, ssh configurations (and more) from it, and remove the need for the `machines.nix` and secret sync hack. Signed-off-by: Vincent Demeester <vincent@sbr.pm>
1 parent dc09196
Changed files (1)
ops/hosts.toml
@@ -0,0 +1,27 @@
+[networks.vpn]
+v4 = "10.100.0.0" #/24
+
+[hosts.naruhodo]
+network = "vpn"
+ssh = { pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO7zGAceSiqFtWHwt7HVjN24SCyWCC26l6YrgUP/qtPc vincent@naruhodo" }
+
+[hosts.naruhodo.wireguard]
+pubkey = "XXyyJ9GlIiZnUm+Bkpz+NSrFiosjfY4FB2PgLXVPLkI="
+addrs = { v4 = "10.100.0.15" }
+
+[hosts.aomi]
+network = "vpn"
+ssh = { pubkey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHJ3QqVCUiE4BIFKTJLN6mSnp9bLSnJ3gE8ScbAajGsH vincent@aomi" }
+addrs = { v4 = "192.168.1.23" }
+
+[hosts.aomi.wireguard]
+pubkey = "XT4D9YLeVHwMb9R4mhBLSWHYF8iBO"
+addrs = { v4 = "10.100.0.17" }
+
+[hosts.kerkouane]
+network = "vpn"
+addrs = { v4 = "167.99.17.238" } # FIXME probably not right
+
+[hosts.kerkounae.wireguard]
+addrs = { v4 = "10.100.0.1" }
+port = 51820
\ No newline at end of file