From 3e880f1bf403c6d0127e6a3fa60e97ab634a0c8c Mon Sep 17 00:00:00 2001 From: jz8132543 Date: Fri, 23 Feb 2024 13:43:44 +0800 Subject: [PATCH] test: ddns --- lib/data/data.json | 9 ++ nixos/hosts/isk/default.nix | 4 +- nixos/hosts/isk/hardware-configuration.nix | 19 +++ nixos/modules/services/ddns.nix | 17 +++ secrets/terraform-outputs.yaml | 39 +++++- secrets/terraform.tfstate | 143 ++++++++++++++++++++- terraform/hosts.tf | 18 +++ 7 files changed, 242 insertions(+), 7 deletions(-) create mode 100644 nixos/modules/services/ddns.nix diff --git a/lib/data/data.json b/lib/data/data.json index b9f04dd0..66750e45 100644 --- a/lib/data/data.json +++ b/lib/data/data.json @@ -68,6 +68,15 @@ "endpoints_v6": [], "host_indices": [1] }, + "isk": { + "dn42_addresses_v4": ["172.23.224.102"], + "dn42_addresses_v6": ["fd72:db83:badd:6::1"], + "dn42_v6_prefixes": ["fd72:db83:badd:6::/64"], + "endpoints": [], + "endpoints_v4": [], + "endpoints_v6": [], + "host_indices": [6] + }, "surface": { "dn42_addresses_v4": ["172.23.224.126"], "dn42_addresses_v6": ["fd72:db83:badd:1e::1"], diff --git a/nixos/hosts/isk/default.nix b/nixos/hosts/isk/default.nix index 17626db7..87be0b7d 100644 --- a/nixos/hosts/isk/default.nix +++ b/nixos/hosts/isk/default.nix @@ -9,11 +9,13 @@ ++ [ ./hardware-configuration.nix ./_steam + nixosModules.services.ddns nixosModules.services.traefik nixosModules.services.postgres + nixosModules.services.derp (import nixosModules.services.matrix {PG = "127.0.0.1";}) ]; environment.isNAT = true; environment.isCN = true; - # networking.firewall.enable = lib.mkForce false; + networking.firewall.enable = lib.mkForce false; } diff --git a/nixos/hosts/isk/hardware-configuration.nix b/nixos/hosts/isk/hardware-configuration.nix index 1f56bd9d..da6ec2b1 100644 --- a/nixos/hosts/isk/hardware-configuration.nix +++ b/nixos/hosts/isk/hardware-configuration.nix @@ -9,5 +9,24 @@ boot.initrd.availableKernelModules = ["uhci_hcd" "ehci_pci" "ahci" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod"]; boot.kernelModules = ["kvm-intel"]; utils.disk = "/dev/sda"; + networking = { + nat = { + enable = true; + # dmzHost = "192.168.1.111"; + }; + interfaces.enp6s18 = { + useDHCP = true; + ipv4.addresses = [ + { + address = "192.168.1.111"; + prefixLength = 24; + } + ]; + }; + defaultGateway = { + address = "192.168.1.1"; + interface = "enp6s18"; + }; + }; nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; } diff --git a/nixos/modules/services/ddns.nix b/nixos/modules/services/ddns.nix new file mode 100644 index 00000000..e7286eff --- /dev/null +++ b/nixos/modules/services/ddns.nix @@ -0,0 +1,17 @@ +{config, ...}: { + sops.secrets = { + "traefik/cloudflare_token" = {}; + }; + services.ddclient = { + enable = true; + interval = "5min"; + username = "token"; + passwordFile = config.sops.secrets."traefik/cloudflare_token".path; + protocol = "cloudflare"; + zone = config.networking.domain; + domains = [config.networking.fqdn]; + ssl = true; + use = "web,web=ifconfig.me/ip"; + verbose = true; + }; +} diff --git a/secrets/terraform-outputs.yaml b/secrets/terraform-outputs.yaml index bdb98e6a..4cb9e27e 100644 --- a/secrets/terraform-outputs.yaml +++ b/secrets/terraform-outputs.yaml @@ -142,6 +142,29 @@ hosts: host_indices: - ENC[AES256_GCM,data:/4TMcQ==,iv:IYj37kAXLyjB0q59XFz94czAjelZgBoFILxR7hAdA1g=,tag:1rqDWB3Q8WRfAVO7ou0cMg==,type:str] - ENC[AES256_GCM,data:MbhLSUI+,iv:/UefZ39ju2o3NMiOrYBPzG22v/DLqppsXHrDj7YeMF8=,tag:+cAMjbtmr/mU1aLmzdawtA==,type:str] + isk: + - ENC[AES256_GCM,data:+iMIkxro,iv:kY0rpocYNKiv8/XSMTGhSvnYpAKoKCMhrNTbL950bzA=,tag:wdatGea8vGimQwaXdKVyBA==,type:str] + - dn42_addresses_v4: + - ENC[AES256_GCM,data:kgqe15Q=,iv:bl8GLUrzOBy9VE1VkUvRdJj3izO99g0TNKyWTqcb3/Y=,tag:0ufyvSvughXAw4LvKjt+zg==,type:str] + - - ENC[AES256_GCM,data:m6YbdZSv,iv:xNaPI3xdO1Zwx+wRrv6Hbl9EzsAS6kQaVyxIf454s/Y=,tag:ZsNJr4DRugKGIouy6fk7EA==,type:str] + dn42_addresses_v6: + - ENC[AES256_GCM,data:kYkvxIo=,iv:Gt0/HAIV8Dzj8aeo6w7WEm0Q5+BtJA4sHTQORl288ZQ=,tag:ETp0y4gHC2mHqLhxmpXT4Q==,type:str] + - - ENC[AES256_GCM,data:Tso5+vzf,iv:8iHyshbecWncQAPpfcftY14/ksRDFmARQ0GLDCKp88k=,tag:pBPsiBWwfSh1cglE4ynb1g==,type:str] + dn42_v6_prefixes: + - ENC[AES256_GCM,data:G+2IQT8=,iv:p+zJVhmGzVzTP2mwhY+iLx+hdxQfUc5sze90LCQQV1k=,tag:egV7xfk8lEPvfTUM8Yb9Ug==,type:str] + - - ENC[AES256_GCM,data:1g5j4iEH,iv:G4h8Y4i/bRkq1LeDid7pMcNmd7QueF/40hcI2ZtXr7M=,tag:s3P3BWiENZNWA+jb4PdUKA==,type:str] + endpoints: + - ENC[AES256_GCM,data:VPyJqQ==,iv:OpE3Lz7mj8CyEUTspDavhfrh7GGZTRDMdh/f0TjjU3k=,tag:SmdvFeQi4YY2D2/1nD5EkA==,type:str] + - ENC[AES256_GCM,data:9APazLFf,iv:yOyH3c8Cf7y13g3Ll0XVPpfwlzVykZUSpzEYWy+iIms=,tag:C71USjg3aI174bIdzAbq7Q==,type:str] + endpoints_v4: + - ENC[AES256_GCM,data:sjksPQ==,iv:dZn4gAigMOJxPkMTYp5Rbi+lXGWn7x7ySpfAUIblbb8=,tag:9g8g4zYTGlNXSDw274O4TA==,type:str] + - ENC[AES256_GCM,data:9H8f0kfM,iv:ty2ESrjKBU1IX++8vmvCf+gzDGYSsodHjgkEG0NckzE=,tag:hVReQ7MmhVUovGV+0AlBGA==,type:str] + endpoints_v6: + - ENC[AES256_GCM,data:GYWH9Q==,iv:b5DvH27VeG5JMXrTW4fjZ6fY7FJzN34NwboKGaa6TUU=,tag:a+PbNPfctg3Sq0FsLnuF8g==,type:str] + - ENC[AES256_GCM,data:XsLe7cPv,iv:aQ5fj/y8qYEd/LY8o7npWMWnfZmJ8Ssk9t//q8wi2fQ=,tag:NuPe436XePucpKoTieaSNA==,type:str] + host_indices: + - ENC[AES256_GCM,data:06xYxA==,iv:1o+tnZIY6Eb3eB58qYJZJft1tbODrrCmaLIqgvYSDKI=,tag:AUuPh2n8lpVCZc3OTkLJcg==,type:str] + - ENC[AES256_GCM,data:AzCBMVjt,iv:4+4xz51YSbkokfrgY2iePM0plHyDmghSc+3KkLJTl4s=,tag:b1ihwsuED31/DfNYYXG1XQ==,type:str] surface: - ENC[AES256_GCM,data:uVM2nzXZ,iv:xRf43cNQMjG8A5rR/b5buQ+zJ5dNbkecQREEZfv7BD4=,tag:6YDw2hVWghwkQy8MPInnbQ==,type:str] - dn42_addresses_v4: @@ -214,6 +237,18 @@ hosts: endpoints_v6: [] host_indices: - ENC[AES256_GCM,data:ZA==,iv:VFzypgVpL1IPhN1w4ENoX7udlcc+zIVlfuVKBFH8PDY=,tag:5m94D0JHbAOAhMrEVR4iXw==,type:int] + isk: + dn42_addresses_v4: + - ENC[AES256_GCM,data:vGgaBw5eMUV8fTwwURM=,iv:wqZCjZcPgmU3kZe3CjwIZmKVjjhRf2Yr+EHfQEgwwBc=,tag:D+bqBRbEA7Kg869Ej3noeQ==,type:str] + dn42_addresses_v6: + - ENC[AES256_GCM,data:grtCjq14CHY+q1Xp3GhZ+kgNsA==,iv:/dpdoBfa2lSby8OsEythJd/WFY+R94dKp5PanasT5oQ=,tag:hEjBhQe01yeP6rMdL2w9HA==,type:str] + dn42_v6_prefixes: + - ENC[AES256_GCM,data:egsimk0tHGE7Qc0qNIdF8ZzMDfEF,iv:QB57hX22RiZDOEg/0HElWxTFa//LIYd8aLmaj5kIK4w=,tag:etVbkDDhhpCuF09A17/y2A==,type:str] + endpoints: [] + endpoints_v4: [] + endpoints_v6: [] + host_indices: + - ENC[AES256_GCM,data:EQ==,iv:BOQBSG+vKjFZQNxDQ7m5L2yEtPzlLM4IZLfzwcaC5M4=,tag:6m7l6ns66E2cxb9mj3/srQ==,type:int] surface: dn42_addresses_v4: - ENC[AES256_GCM,data:4lI5E03KvoBklrnJuvQ=,iv:Do83VGMAwNgM/Qur9GlB2jrtLou+LE6IEYG+iap85Ew=,tag:+fQ1V70LTJZNhQfA/rhcOQ==,type:str] @@ -323,8 +358,8 @@ sops: Sk1Fd3hqM0pwWFpqY2d4eW1hWUR1bFEKK9ffnx65jbajKVVBp4jjcweT1qldCjWD ZJOFlhxryKDdn6oRW+G/9g133IjrQrXiwhqzC/fm0HA6mk/XiIiSxA== -----END AGE ENCRYPTED FILE----- - lastmodified: "2024-02-10T05:53:19Z" - mac: ENC[AES256_GCM,data:z2h01KicjXb64NR9VU1CFYSadh1qlW1WJg+S0ouQ9oOTPkC8MbFP6/wmp6PCu27AOcd92pSaziuRQZWZpTk6lKCMpiR48vuHaUObwwuQX6cMfTfgJzRlIf5m+0FnNJdiy8Vy+2ab5QClW+OcCpiP68mnluGnL3ofSlTZgWu/7Zs=,iv:RVoDcJhRDeXUFfeDEx7X+ycP5rwYS8iLIYmppCJs5Ow=,tag:/gI4lJS9AINZVZBtdR2LiQ==,type:str] + lastmodified: "2024-02-23T05:22:13Z" + mac: ENC[AES256_GCM,data:U9SAL7ahznojqqqnA/4c/Sfkcx/6MKTQfaTEeNrlOGr97QLMXZXNX0EZKQhtyatGdOcZeUl4z12igo8mdMg4tZKhxlBPyx2wYEDfKzkRj3JxhSpKzEAILOuwcl1f6aobFUYtlxrS8u49czdIE1uR9id36dBIf+x/6HqQ15wXjf8=,iv:u1T1Jl4JFTF7iB9uJHc2dvQfTMRVNfvdg+FlymqZv9Q=,tag:kUVj6fTj33snsY7wRfEpkw==,type:str] pgp: - created_at: "2023-06-12T05:51:36Z" enc: | diff --git a/secrets/terraform.tfstate b/secrets/terraform.tfstate index 17cd6afb..68dde9aa 100644 --- a/secrets/terraform.tfstate +++ b/secrets/terraform.tfstate @@ -1,7 +1,7 @@ { "version": "ENC[AES256_GCM,data:DA==,iv:GdBEVcE2ToUdwgww1++fh60GGL96PucOILGPjKEeHLE=,tag:GvIYxDPL9EJu2EuNCXYtfw==,type:float]", "terraform_version": "ENC[AES256_GCM,data:s+lt+C0=,iv:QTliFVJ4Fv2/BNyEBsXcbn0il5fwF/wdYSSSc7DZOHw=,tag:agzN8FCZyQz6yswEsLjPtw==,type:str]", - "serial": "ENC[AES256_GCM,data:WP3X,iv:Xp54KDYOsK+r48JwYiY4zicF0x8aTd2OBsvR+64IBVc=,tag:DEoNVa78rmhJybXoNLreFg==,type:float]", + "serial": "ENC[AES256_GCM,data:76G9,iv:yyazTOHGHAFji7l3w+xdbYyuNdnRbat3uFdqaTNkxEo=,tag:845S2jlBcz00B2vT0NvOZQ==,type:float]", "lineage": "ENC[AES256_GCM,data:Sb4CNlQprBlipfl9raqhcDOI3sSl3AHXsH6RwFc9hBUjlWp7,iv:IgEWvow6VgNFcoya2s0fYGCrjjZEtCl/u0Z9nZva9a8=,tag:B9sYMaj74F9wfqj+bYG1Kw==,type:str]", "outputs": { "b2_download_url": { @@ -124,6 +124,23 @@ "ENC[AES256_GCM,data:nw==,iv:I7gQMsRG3zpkk4AoDepYnZH+XGDpz+fpQnktzkSrLpg=,tag:nOZ6ZCWFBQ0STD6fFiisqg==,type:float]" ] }, + "isk": { + "dn42_addresses_v4": [ + "ENC[AES256_GCM,data:qqxPKtxyJQoeFTwJBiM=,iv:t3M/J8P6vZftN6QESNzgkNMz0D7O/3i73Cmf8HdYhOM=,tag:DXfHu1iT1LOJQuPS66pXhw==,type:str]" + ], + "dn42_addresses_v6": [ + "ENC[AES256_GCM,data:gxBEd2mzpC7/MN3ntoXKDGIo+Q==,iv:nCJB8n/IKwLNajNeRyZTGsCEIgadGI9/bEQvI1sn3/g=,tag:1lrXgFTqZlKCyrk02YbytQ==,type:str]" + ], + "dn42_v6_prefixes": [ + "ENC[AES256_GCM,data:yo914DTbP7BTzxV86ctP0ZLAlryB,iv:JgyTvRC3KSQ56XlK0gWj8PwdWmMl+8vpcaUEtSS/4WA=,tag:FxYDQ1d7AThtEPxmgZKI+Q==,type:str]" + ], + "endpoints": [], + "endpoints_v4": [], + "endpoints_v6": [], + "host_indices": [ + "ENC[AES256_GCM,data:Aw==,iv:YMo5NYIxQi8jCf8OOw6Z/pW/nB+VQg8DIjV8+Ga9GrU=,tag:L/gqW0S9b+wxxkaCiTkyng==,type:float]" + ] + }, "surface": { "dn42_addresses_v4": [ "ENC[AES256_GCM,data:KBQUm7hXnt9Z577iSnA=,iv:kO7RVnjWB141xdDP7A+f6OBTy7xAAqRQ3xxkR6dZ/eg=,tag:xwfSlvsJPyZ9/59l3rG4/g==,type:str]" @@ -301,6 +318,45 @@ ] } ], + "isk": [ + "ENC[AES256_GCM,data:HqQoEWn1,iv:LVyCusXMSVbo5hYQF1meSODDneWRTepDyvNSq+2uj0g=,tag:CLhblft/83aLyh/6t8/7ag==,type:str]", + { + "dn42_addresses_v4": [ + "ENC[AES256_GCM,data:wXet240=,iv:qzheyhpDxd7rpmfnASCAGnMhHHi4ea2cGkEOFzNRarQ=,tag:lpzI+DypnoUWuG6zkCSJJQ==,type:str]", + [ + "ENC[AES256_GCM,data:wSZ7vqu3,iv:9OhE3WStr1K/8s8xbzcIolScXMvpQ2wQdW2N+1QnSEw=,tag:rWzoTeafluc/QwgMtuq8IQ==,type:str]" + ] + ], + "dn42_addresses_v6": [ + "ENC[AES256_GCM,data:fG3HQnQ=,iv:xOYp48VyH+BCYxLgJoOb47hDYoWoppocmdMgDIWOlfI=,tag:9NMoHidw9bE46Irm7vF46w==,type:str]", + [ + "ENC[AES256_GCM,data:rOny/wKr,iv:Vu64AlGkT+14/XO3cV24fKdhVRHy7L8S4EZS8ESVsiw=,tag:xV/EKecWky3rIH+YkvyXug==,type:str]" + ] + ], + "dn42_v6_prefixes": [ + "ENC[AES256_GCM,data:Q5OJQaA=,iv:unpA2yKTZb23AtFnneRxX+MoO63RbL4KF4XkO3NI+l8=,tag:Z2sJFXLyimfr9iQ5cLj5ow==,type:str]", + [ + "ENC[AES256_GCM,data:e5Ac2etH,iv:x3Wn678IsiKaj5xbIET3zRVQQaO0AmM2FSzzfAlhK/w=,tag:MjhtVOODlyvxRrocJrPKPQ==,type:str]" + ] + ], + "endpoints": [ + "ENC[AES256_GCM,data:ubiOzg==,iv:l9dNarZsx4zqHvuY9IFS9WXZCd1C2IWL+yM4cyuwTqA=,tag:pfqeNkJaWxPL1vOQ6t6HHA==,type:str]", + "ENC[AES256_GCM,data:jTBLDv3c,iv:WLd9r32ax5zKq2gvoogEI6DyLzidXg9N7Z4HLUY/JWw=,tag:3KPBu0j2VVf/P3I0WoeluA==,type:str]" + ], + "endpoints_v4": [ + "ENC[AES256_GCM,data:ktpyTQ==,iv:mvzmtyB/MLH7o1QdVpYWZOS/MhxVGElEQRYgQv8VM8w=,tag:qNIZ7SHS0MimGo/suPIxKA==,type:str]", + "ENC[AES256_GCM,data:L1MiA+lU,iv:fme7A6dCru90wZc/h9b9/6u8r2nGhtVAPnnn6m9r6dg=,tag:wfg8lvxpXgqlhK09YU4B1A==,type:str]" + ], + "endpoints_v6": [ + "ENC[AES256_GCM,data:TSXbWg==,iv:9xBVv1amU8XN3b/iWl9FAdEW4IbsBN/9vHaiOKhYlNs=,tag:aD4/X5RwNnP9efNX7VEjGA==,type:str]", + "ENC[AES256_GCM,data:7nIN5j45,iv:SJoQJNqgHz2WoGjkmCBoVJ5qr2ooEvZGUuQYs3YYEQM=,tag:njlpyZ5vJNVJEli6PxR4eg==,type:str]" + ], + "host_indices": [ + "ENC[AES256_GCM,data:2rfhpw==,iv:Sk67tjKx2FgkYiSek9o2NDeNGuqekRvR7eI3Ql2KQJg=,tag:k+nJg1TpRyExRkc0NxIOvg==,type:str]", + "ENC[AES256_GCM,data:vBNoTr6q,iv:JWIx2+Yg9kUGLxF5RHs9WekwKrtF4DUrvUmugcwn+P0=,tag:AfW9CBgtAe1gl5Fv235F0Q==,type:str]" + ] + } + ], "surface": [ "ENC[AES256_GCM,data:bGrujA8w,iv:y7m5/HPiqe+wr9+3VySOsJn21kXYd5KwFX7qGwdcHGk=,tag:w9XMrZ8s1e9hUEyqijPQKA==,type:str]", { @@ -502,7 +558,7 @@ { "schema_version": "ENC[AES256_GCM,data:BQ==,iv:Qej/dQ3fEnFT/KutZj6BFDS4ttA0J1ssJ/S4PGZoz+c=,tag:f18e26nlMalvzBqtvarBbA==,type:float]", "attributes": { - "account_auth_token": "ENC[AES256_GCM,data:6pyHCWvYw/HSFSXaDU4fgghAUjoOGxYotq5uKN5+3GHjr6k9xmhHEP0N/K82LkVT8NqbMX4c5J3vbH6vS9UuCNK1DrIYRvETi346Q40=,iv:paSA2FIfe+KrAIS3mlpEXh5QtZl/MjkDPUVuXTyiXpM=,tag:RDY4uNyfW27yokn5FYxadw==,type:str]", + "account_auth_token": "ENC[AES256_GCM,data:aQN+5wb2afQBTf7tctHJjVoIysWGvA5a3y6jlrLZcW14zEjeo719fWt42Xc8KtfF2x8vCnv8WQiqNrpxCDEvs6ZqlnmYYA17CqMw5TE=,iv:VvXhk4T+MvJpkbRQL8lojBOZYhfwrAQKaoM6Jy7vOPE=,tag:IYT3ynt/HdpwRK13YQbwQw==,type:str]", "account_id": "ENC[AES256_GCM,data:QewE+/YBQ1OablFU,iv:Am+Nb5FTd7V72IjakAXExYzjXkMe/Nk8zKca64QecUQ=,tag:oby4APzbN5y9/kMCuneJuw==,type:str]", "allowed": [ { @@ -2719,6 +2775,85 @@ ] } ] + }, + { + "module": "ENC[AES256_GCM,data:QyqiIbXe2Ix3iFHkMMTYMLGa2Q==,iv:FDbqaknxiRVJC+XKTxY86wT7rbQrHEdnjNtO2YCxQHs=,tag:7hpL2T64RWy/BYI70f6vzw==,type:str]", + "mode": "ENC[AES256_GCM,data:9YEdweN39g==,iv:7uD7Z4hvBgtJsCdssNGM9MqCLp2k/MZ5awobbrgBinY=,tag:rm5rtkWN3r0ysCHjmM+kPQ==,type:str]", + "type": "ENC[AES256_GCM,data:fC46WZQq8oFYUhM5eFdtD5c=,iv:R3JIrJS1FVpi0CHEw0FmBXyrooHfivdfuUxx3KhJzPs=,tag:2ibqe8JhvqNTD1uP0ZAQrA==,type:str]", + "name": "ENC[AES256_GCM,data:Qq3GidjA8MRsUaXx,iv:nhXipsEQNl8wwywzLOpKnBheAJ7Q+HSq3SaT881At1s=,tag:8Q1LEUBD736LBdJhTVyxnQ==,type:str]", + "provider": "ENC[AES256_GCM,data:bHyDSBAhtuGcdls65QzsG5CWKck4dS+DwCA/MV2GMnlo8N/MmxkcLKBAffT2ORe0Nfec/9pPuA==,iv:wNgBNkhBots2fzDTxxqHxICKG6URXMr4m9xgi5YGh70=,tag:ifzLHqt4HibUAdWt30bRRg==,type:str]", + "instances": [ + { + "index_key": "ENC[AES256_GCM,data:QA==,iv:Z8SkfP0RFE0BXVN2uAIXmDjdeqU3NCJcGqRhCg4VBoI=,tag:1Uc1XP3sIaQH3jUDNricyw==,type:str]", + "schema_version": "ENC[AES256_GCM,data:WQ==,iv:mL3jPY4R2NVjwosNJsj62hTvEpH7cUEc7xf6t4YaRoA=,tag:3McD5BPGks65HaHvmysxCA==,type:float]", + "attributes": { + "allow_overwrite": "ENC[AES256_GCM,data:nDHP8/Y=,iv:qmD4yOJ5WwE7ATtyw5YY5KqEWkKPQ9hystouHFaFwo0=,tag:E2T04NLHlexPqIZfAsYXmg==,type:bool]", + "comment": "", + "created_on": "ENC[AES256_GCM,data:D3f7U2CVfn3hCpZjE8AmICvbaMpJsKS3osDS,iv:JTRLYtlXttVBM1Van54A+udzxqL1vhwAPZ2fcLHP63g=,tag:hmr32uncZ6OZnpYsXio3sQ==,type:str]", + "data": [], + "hostname": "ENC[AES256_GCM,data:9wTqVqu06pcVbWY=,iv:v3+g7PtrJN775l5j9nPWi3KJcC/9sgcDnkX+oZPlDZk=,tag:CIWhcThr2MOMe/LwaJuZpA==,type:str]", + "id": "ENC[AES256_GCM,data:pjRItv9CMmTu0qXqXttIuaDApeMtGRIMEMsUKlXgBGQ=,iv:ebYRzcRyiKydlalSgWCfYt6xFWnguKm6yUf8wPoWaKs=,tag:jLYtgEdPt7CH6F8hqTXQcw==,type:str]", + "metadata": { + "auto_added": "ENC[AES256_GCM,data:V/Fb3pQ=,iv:DBo9vVWu+mNRpMJ2t+wUYc+nF1zw2PT4m/Lo80Ml1uc=,tag:2fURzVnI+TVqXWfQbTnZiw==,type:str]", + "managed_by_apps": "ENC[AES256_GCM,data:zA/X74U=,iv:hALlV25V/e6qaMCJbfbNnkhutd5QJCh8Y2OT/AtPiFQ=,tag:wV0vNhgMUA+8PENddDLkmw==,type:str]", + "managed_by_argo_tunnel": "ENC[AES256_GCM,data:xHvpaog=,iv:p0P1Btm/viQwvCCFpaQfACNZV+kTjx4hxXYly4CRXZU=,tag:wdrQS+P0Z5wWKkTbNBUd3Q==,type:str]", + "source": "ENC[AES256_GCM,data:/qe6+d1/Ow==,iv:rnWRGWIzu0SiV+2Sa6NRGkoY10r3kkHhOxBw9UUgqRQ=,tag:h4fIKF55I5vlDCaUQpz3OA==,type:str]" + }, + "modified_on": "ENC[AES256_GCM,data:kVE882dso0UaxBHW+037DUHHJoFVv7M2CYPY,iv:vW+28aJaskz3bl7SxIVPIqskVT7Pvo5EhL8QkqZFVIk=,tag:APlxRgBtyeyAMB1qgS+a9g==,type:str]", + "name": "ENC[AES256_GCM,data:f8uK,iv:JSxvS13k6wIBVXhrCpkZmggI7ZtjRB/ptloBEY1wz1I=,tag:Lvuu1JHWyn4R5GPxvs6CZw==,type:str]", + "priority": null, + "proxiable": "ENC[AES256_GCM,data:auUpQV4=,iv:sH/DkffebRne5X9uTR1qkJnsvYjArSIPS/beqAB/MIQ=,tag:71xFqFM7bfn51hIkYFBcPQ==,type:bool]", + "proxied": "ENC[AES256_GCM,data:Gj/XvL0=,iv:cacKpUeqNfo67oix+L9JVqB89xRAtCXsz2FjZladD1s=,tag:hpBAA4yhuPooWW0eGoe7Ig==,type:bool]", + "tags": null, + "timeouts": null, + "ttl": "ENC[AES256_GCM,data:Xg==,iv:cAqUsv0ncrbVe9fHJ3Us1wfGKniCfWCHC/eHDliY1mg=,tag:yT620bKr9cyA6oUFnI0IfQ==,type:float]", + "type": "ENC[AES256_GCM,data:ng==,iv:EBx2MlZYLf6bXqoY9i+xWML7n7dmoY6UjhVenkhec78=,tag:1o10u4pkOoGJQXfxRNQtKg==,type:str]", + "value": "ENC[AES256_GCM,data:K9g0vfck/uHM,iv:QczuA+XOrLwsCaoLeGuPfmWWaKvxa2o/rVFzWlu6KeA=,tag:02i3GFMbg1wa8HAMJmm4oQ==,type:str]", + "zone_id": "ENC[AES256_GCM,data:Ym33sWlYfplIYlA9puc3n32J/h6Ao79xc5UeCjqZ5D8=,iv:RWIXFe7XrdEYnE/+kpiHRW+GwuWV35b3cW19iIEXbQE=,tag:nX3mEbYz8O00T9VusWIG7A==,type:str]" + }, + "sensitive_attributes": [], + "private": "ENC[AES256_GCM,data:eQpoykVBvx3m+cQededUyz5Q2uLDD/gXU+IQIxsc0U00pJ6HiUPEfQ5X5Bwq+NqVsirRXqx0M3sqw5yqHJEv/BA8sTSaGmiSlCPTxHbVkih80LhUNs05ebEBxbamNLrBc4MKGx0XUFx/PdaYNhc/fArGjAT9zJgACoRvCuKk0r2p680e1o4HQUKQlZQ=,iv:zfrH0HDH0+uePJPAzvHP+xB+jFWnlze5IQ50E8X97vQ=,tag:4s09JR9BkStUnujzTgCW2g==,type:str]", + "dependencies": [ + "ENC[AES256_GCM,data:j551f0G5LBwpJTmK1u6Qo9sG1FXVvjk=,iv:iittvyonSfUdNv8mUrZeTLlBjNWEd/xikQlczkakfhE=,tag:e9Dxs7lh31VvtOOGLzmnZw==,type:str]", + "ENC[AES256_GCM,data:0PNqiPVb8gigJe2mdEygIQpOalG7IOJ9,iv:nwXpcRKLlFhAQA5yjZcVda+WDlcFAyiYM8Hd9PbcQvI=,tag:jXdllEd0uHkcB6pYCZ0TgQ==,type:str]" + ] + }, + { + "index_key": "ENC[AES256_GCM,data:hUOMIA==,iv:z9Ku9ekM0MPdKy+Zae/E9r/D4LH7Y6i/D0Hn4Ni9ZC8=,tag:TpxePGEnhgKCqt1xKXQlcA==,type:str]", + "schema_version": "ENC[AES256_GCM,data:WQ==,iv:mL3jPY4R2NVjwosNJsj62hTvEpH7cUEc7xf6t4YaRoA=,tag:3McD5BPGks65HaHvmysxCA==,type:float]", + "attributes": { + "allow_overwrite": "ENC[AES256_GCM,data:nDHP8/Y=,iv:qmD4yOJ5WwE7ATtyw5YY5KqEWkKPQ9hystouHFaFwo0=,tag:E2T04NLHlexPqIZfAsYXmg==,type:bool]", + "comment": "", + "created_on": "ENC[AES256_GCM,data:HJVqJkwgJ1Z8F7ycVjDuDsbGfSawzieD2P4=,iv:HZlstpd+FsYlUOAEMyR479LYg+wrVVumqtOMWRHGGcM=,tag:DLQIqbx4CWhraMNnUqBglQ==,type:str]", + "data": [], + "hostname": "ENC[AES256_GCM,data:WQp5V+XqDEJtnlk=,iv:CuHt3YUoIl8O2ETghJCmflnhr64BkWDu1QxhR4Mzel8=,tag:ICvJMBZ7GiFbgCHQExlxuQ==,type:str]", + "id": "ENC[AES256_GCM,data:hWQjT+W6JjHRWX97ns90IXSc4wdk1Ucg+vIwQ1SPJ7s=,iv:YBvNv7TFoPgW51rUSfCErkaEX5D24LqRayPi8QDp05k=,tag:TgxVJOAW5lxriyCxquEg/Q==,type:str]", + "metadata": { + "auto_added": "ENC[AES256_GCM,data:V/Fb3pQ=,iv:DBo9vVWu+mNRpMJ2t+wUYc+nF1zw2PT4m/Lo80Ml1uc=,tag:2fURzVnI+TVqXWfQbTnZiw==,type:str]", + "managed_by_apps": "ENC[AES256_GCM,data:zA/X74U=,iv:hALlV25V/e6qaMCJbfbNnkhutd5QJCh8Y2OT/AtPiFQ=,tag:wV0vNhgMUA+8PENddDLkmw==,type:str]", + "managed_by_argo_tunnel": "ENC[AES256_GCM,data:xHvpaog=,iv:p0P1Btm/viQwvCCFpaQfACNZV+kTjx4hxXYly4CRXZU=,tag:wdrQS+P0Z5wWKkTbNBUd3Q==,type:str]", + "source": "ENC[AES256_GCM,data:/qe6+d1/Ow==,iv:rnWRGWIzu0SiV+2Sa6NRGkoY10r3kkHhOxBw9UUgqRQ=,tag:h4fIKF55I5vlDCaUQpz3OA==,type:str]" + }, + "modified_on": "ENC[AES256_GCM,data:Zr1J9Yd+OO9PyHzDd01vd+DnbZIxbIfGHX4=,iv:B7HwCfYZv1VfEDw5+/TACv0KE4wXFVVjQwEK5C9v5fY=,tag:agpmeWJHZhE19/qJIcrsYQ==,type:str]", + "name": "ENC[AES256_GCM,data:4eOO,iv:bJErsUsc7X+A9uMcI5MRl6N8HASbx9gLTNACqtn+5po=,tag:j+J95TcxZFgxvduF+v8jRg==,type:str]", + "priority": null, + "proxiable": "ENC[AES256_GCM,data:auUpQV4=,iv:sH/DkffebRne5X9uTR1qkJnsvYjArSIPS/beqAB/MIQ=,tag:71xFqFM7bfn51hIkYFBcPQ==,type:bool]", + "proxied": "ENC[AES256_GCM,data:Gj/XvL0=,iv:cacKpUeqNfo67oix+L9JVqB89xRAtCXsz2FjZladD1s=,tag:hpBAA4yhuPooWW0eGoe7Ig==,type:bool]", + "tags": null, + "timeouts": null, + "ttl": "ENC[AES256_GCM,data:Xg==,iv:cAqUsv0ncrbVe9fHJ3Us1wfGKniCfWCHC/eHDliY1mg=,tag:yT620bKr9cyA6oUFnI0IfQ==,type:float]", + "type": "ENC[AES256_GCM,data:8q5RZg==,iv:UesaF5uAu7l5xvKPPnQAOntx7ofafEXseLp3V1iH6+I=,tag:Q5s8rMDcsJT5+9huipPQaA==,type:str]", + "value": "ENC[AES256_GCM,data:9mdN,iv:t0PLXsv0E2UPvxuKezuMnCCAVvlczE+N0fuM2veA/gY=,tag:bab6eQNdGJ34d24JL+FTXA==,type:str]", + "zone_id": "ENC[AES256_GCM,data:Ym33sWlYfplIYlA9puc3n32J/h6Ao79xc5UeCjqZ5D8=,iv:RWIXFe7XrdEYnE/+kpiHRW+GwuWV35b3cW19iIEXbQE=,tag:nX3mEbYz8O00T9VusWIG7A==,type:str]" + }, + "sensitive_attributes": [], + "private": "ENC[AES256_GCM,data:eQpoykVBvx3m+cQededUyz5Q2uLDD/gXU+IQIxsc0U00pJ6HiUPEfQ5X5Bwq+NqVsirRXqx0M3sqw5yqHJEv/BA8sTSaGmiSlCPTxHbVkih80LhUNs05ebEBxbamNLrBc4MKGx0XUFx/PdaYNhc/fArGjAT9zJgACoRvCuKk0r2p680e1o4HQUKQlZQ=,iv:zfrH0HDH0+uePJPAzvHP+xB+jFWnlze5IQ50E8X97vQ=,tag:4s09JR9BkStUnujzTgCW2g==,type:str]", + "dependencies": [ + "ENC[AES256_GCM,data:j551f0G5LBwpJTmK1u6Qo9sG1FXVvjk=,iv:iittvyonSfUdNv8mUrZeTLlBjNWEd/xikQlczkakfhE=,tag:e9Dxs7lh31VvtOOGLzmnZw==,type:str]", + "ENC[AES256_GCM,data:0PNqiPVb8gigJe2mdEygIQpOalG7IOJ9,iv:nwXpcRKLlFhAQA5yjZcVda+WDlcFAyiYM8Hd9PbcQvI=,tag:jXdllEd0uHkcB6pYCZ0TgQ==,type:str]" + ] + } + ] } ], "check_results": null, @@ -2733,8 +2868,8 @@ "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0WVhVSmJoVzhPOVVuRHU2\nWmd3OUV2bDloWXpmR240NmgwcGV0TCs1Y25NCkVTQ1VyLzJwSW8vSE05SHJWRGFT\nZVpRZTdIL3Q1YThUbG5wMHlLSE9vWUEKLS0tIGl2RTRmTHpPSkdSMmhJSzRDVTBF\nUHJkNVpya3VHaGNMNlVSR2IxYW5wZjgKIcyE5De8f2UFjhmdlzupw5IThpvQdQI4\ngrnShrME+Zg8YuG+qSbteUQr05lAuxsQhIeueAh+MeKNY4i6gy7vxw==\n-----END AGE ENCRYPTED FILE-----\n" } ], - "lastmodified": "2024-02-21T13:56:15Z", - "mac": "ENC[AES256_GCM,data:BTUp0sQqaS2A/Yrjx1RUU2r52wyv8Isw+rZJ0Mc3Lx8oXOTsxqaRqop52It0ivHAxF76JDesaDvWGSGNwhBV+k6dsWyKzcgaF9JkNXJ/3/nHxV52ceAWv4mF0Phgj4Vbns41gquVnTx6Yep4TiQ4oYADFw9L8VbmPiQtM5ScqFQ=,iv:PNpeRV4yQAPHFsxPtG7eVHRWdSbGKGnu3J1zBwHvSoA=,tag:4xLZHpjRMsvdeasVSxGf8Q==,type:str]", + "lastmodified": "2024-02-23T05:22:12Z", + "mac": "ENC[AES256_GCM,data:4IATnDz15wLN3KZ0AEv+a+1yx6Sy42PBu0G8mI4FOvutf9P4sDOtXFqlzk+mhpylnuIKsDEse9urk0RcZFD0JSecvep41YaSwiS8IFw+a0nXZ4MzrtgkQApla3SSM4ikXoVDW1J8aFM+/kd3qMKHhGR0QrOrnJWqkyTkx2FJSJ0=,iv:yoSn+Zr0f5CMSAAUIz/SqqBmdIwBf+63eRqgjTuma+c=,tag:1z6JMJXkry8L3OKECnPTMA==,type:str]", "pgp": [ { "created_at": "2023-06-18T10:50:13Z", diff --git a/terraform/hosts.tf b/terraform/hosts.tf index 68823634..f9728359 100644 --- a/terraform/hosts.tf +++ b/terraform/hosts.tf @@ -62,6 +62,24 @@ locals { endpoints_v4 = [] endpoints_v6 = [] } + isk = { + records = {} + ddns_records = { + a = { + proxied = false + type = "A" + value = "127.0.0.1" + } + aaaa = { + proxied = false + type = "AAAA" + value = "::1" + } + } + host_indices = [6] + endpoints_v4 = [] + endpoints_v6 = [] + } surface = { records = {} ddns_records = {}