kat/nixfiles
1
0
Fork 0
mirror of https://github.com/kittywitch/nixfiles.git synced 2026-02-09 04:19:19 -08:00
Code Issues Projects Releases Packages Wiki Activity

Burnout crawlout

Browse source
This commit is contained in:
Kat Inskip 2023-07-16 11:39:44 -07:00
parent fa19a286c5
commit e193ee5a9f
Signed by: kat
GPG key ID: 465E64DECEA8CF0F
7 changed files with 10 additions and 275 deletions
Download patch file Download diff file Expand all files Collapse all files

17
tf/ran-cf.tf
View file

@ -1,17 +0,0 @@
resource "cloudflare_record" "ran_v4" {
name = "ran"
proxied = false
ttl = 3600
type = "A"
value = hcloud_server.ran.ipv4_address
zone_id = local.zone_ids.gensokyo
}
resource "cloudflare_record" "ran_v6" {
name = "ran"
proxied = false
ttl = 3600
type = "AAAA"
value = hcloud_server.ran.ipv6_address
zone_id = local.zone_ids.gensokyo
}

110
tf/ran-hcloud.tf
View file

@ -1,110 +0,0 @@
resource "hcloud_primary_ip" "ran_ipv4" {
auto_delete = false
name = "ran-v4"
datacenter = "hil-dc1"
type = "ipv4"
assignee_type = "server"
}
resource "hcloud_primary_ip" "ran_ipv6" {
auto_delete = false
name = "ran-v6"
datacenter = "hil-dc1"
type = "ipv6"
assignee_type = "server"
}
resource "hcloud_server" "ran" {
name = "ran"
server_type = "cpx21"
keep_disk = true
allow_deprecated_images = false
image = "ubuntu-22.04"
datacenter = "hil-dc1"
public_net {
ipv4_enabled = true
ipv4 = hcloud_primary_ip.ran_ipv4.id
ipv6_enabled = true
ipv6 = hcloud_primary_ip.ran_ipv6.id
}
firewall_ids = [
hcloud_firewall.ran.id
]
lifecycle {
ignore_changes = [
user_data,
public_net
]
}
}
resource "hcloud_rdns" "ran-v4" {
server_id = hcloud_server.ran.id
ip_address = hcloud_server.ran.ipv4_address
dns_ptr = "ran.gensokyo.zone"
}
resource "hcloud_rdns" "ran-v6" {
server_id = hcloud_server.ran.id
ip_address = hcloud_server.ran.ipv6_address
dns_ptr = "ran.gensokyo.zone"
}
resource "hcloud_firewall" "ran" {
name = "ran-firewall"
rule {
direction = "in"
protocol = "icmp"
source_ips = [
"0.0.0.0/0",
"::/0"
]
}
rule {
direction = "in"
protocol = "tcp"
port = "80"
source_ips = [
"0.0.0.0/0",
"::/0"
]
}
rule {
direction = "in"
protocol = "tcp"
port = "443"
source_ips = [
"0.0.0.0/0",
"::/0"
]
}
rule {
direction = "in"
protocol = "tcp"
port = "6443"
source_ips = [
"0.0.0.0/0",
"::/0"
]
}
rule {
direction = "in"
protocol = "udp"
port = "60000-61000"
source_ips = [
"0.0.0.0/0",
"::/0"
]
}
rule {
direction = "in"
protocol = "tcp"
port = "22"
source_ips = [
"0.0.0.0/0",
"::/0"
]
}
}