Timotej Lazar
0c063a017b
ceph: allow some ICMP
2024-03-14 14:34:44 +01:00
Timotej Lazar
ce7903e43a
ceph: improve cluster setup
...
Remove separate NetBox lookups. Explicitly allow connections between
cluster nodes. Tigthen temporary allowed IPv6 ranges.
2024-03-01 08:45:51 +01:00
Timotej Lazar
0af8474e52
proxmox: consolidate interface templates
2024-02-26 16:52:01 +01:00
Timotej Lazar
7b4cb8f579
Add udev rules for renaming all interfaces with defined MAC address
...
Gonna include BMC and such but shouldn’t hurt. Allows us to use
different interface names where sensible.
2024-02-26 13:26:05 +01:00
Timotej Lazar
fbfdc83ee5
proxmox: use multiple non-VLAN-aware bridges
...
The Proxmox SDN feature does not play nice with our FRR and VXLAN setup.
With a single bridge we can’t have interface aliases. So use a bridge
for each VLAN. Actually don’t even have VLANs, just bridges mainlined
into VXLAN tunnels.
Read the list of VLANs carried by Proxmox nodes from a custom field on
the cluster in NetBox. Remove the vmbr0 device from individual nodes.
2024-02-20 16:43:47 +01:00
Timotej Lazar
c1344e8f59
dokuwiki: upgrade to latest
2024-02-20 16:01:51 +01:00
Timotej Lazar
90b55d8e8d
doku: tweak fonts and stuff
2024-02-20 11:05:59 +01:00
Timotej Lazar
cc10b4b265
dokuwiki: upgrade to latest
2024-02-06 19:50:25 +01:00
Timotej Lazar
8a8b019dc3
setup: rename proxmox-rc hosts
2024-02-06 08:56:19 +01:00
Timotej Lazar
02f778604c
Add dokuwiki role
...
For an Alpine Linux VM.
2024-01-20 19:00:41 +01:00
Timotej Lazar
4420846817
Allow overriding MTU for L3 interfaces
2024-01-17 19:21:13 +01:00
Timotej Lazar
c395fe22c7
ceph: allow connections from more addresses
...
Should unhardcode this at some point.
2024-01-17 19:19:55 +01:00
Timotej Lazar
d399fc0a24
proxmox: simplify interface setup tasks
2023-11-20 14:13:46 +01:00
Timotej Lazar
5038411af3
Add ceph role
...
Just prepares the servers, all management is then done through cephadm.
2023-11-20 13:04:11 +01:00
Timotej Lazar
832be31e21
Add ansible.cfg
...
With default user.
2023-11-20 12:57:41 +01:00
Timotej Lazar
2d89cd730c
proxmox: get all data from netbox
2023-11-20 12:56:34 +01:00
Timotej Lazar
62a3dc5121
proxmox: fix SFTP in management VRF
2023-11-20 12:55:52 +01:00
Timotej Lazar
eed2308609
debian: get all data from netbox
2023-11-18 19:44:52 +01:00
Timotej Lazar
d334e9aafa
debian: allow overriding release
2023-11-18 19:44:00 +01:00
Timotej Lazar
5cca841e6b
debian: allow sftp over management ssh
2023-11-18 19:42:33 +01:00
Gašper Fele-Žorž
edfc73db79
Pox upon the NETPOX in README.md
2023-11-06 13:05:13 +01:00
Timotej Lazar
a36aba9f2a
Group also by tag in netbox inventory
2023-10-26 09:27:32 +02:00
Timotej Lazar
5da50c14f9
debian: run a separate sshd in mgmt VRF
...
Leave the default sshd alone. If ssh is not necessary in default VRF,
another role should disable it.
2023-10-25 13:06:57 +02:00
Timotej Lazar
c9479cc786
proxmox: set hostname
2023-10-20 09:05:54 +02:00
Timotej Lazar
68efa7adcf
proxmox: simplify bridge definition
2023-10-19 10:18:50 +02:00
Timotej Lazar
0c1cc14e01
proxmox: add initial support for L2 VXLAN
...
I heard we like L2 so I put some L2 in our L3 so we can L2 as we L3 on L2.
2023-10-18 15:02:36 +02:00
Timotej Lazar
c9bb03ea36
Read default gateway for a subnet from a custom field in netbox
2023-10-05 12:44:39 +02:00
Timotej Lazar
ce2d0f3cd4
proxmox: add interfaces for fabric links
...
Same as debian.
2023-10-05 12:43:35 +02:00
Timotej Lazar
a324da076b
Consolidate interface setup for debian and proxmox roles
2023-07-20 13:46:13 +02:00
Timotej Lazar
8171f16f18
Add README
2023-07-20 13:26:36 +02:00
Timotej Lazar
e33e172336
Add netbox inventory
2023-07-20 13:25:03 +02:00
Timotej Lazar
63ab087645
debian: get inventory data from netbox
...
Set standardized interface names (mgmt0… for L2 management interfaces
and lan0… for L3 data interfaces speaking BGP). ASN is stored as a
custom field in netbox but that might change.
2023-07-20 13:24:51 +02:00
Timotej Lazar
2330edf479
proxmox: standardize interface names and set up management VRF
...
No idea how badly this clashes with GUI configuration.
2023-07-17 16:39:40 +02:00
Timotej Lazar
aae782a66b
Add role to set up base Proxmox server
2023-07-14 16:12:03 +02:00
Timotej Lazar
db310ba716
debian: take it easy with the reboots
2023-06-05 17:52:25 +02:00
Timotej Lazar
7c209a7c5c
debian: set hostname
2023-06-05 17:52:20 +02:00
Timotej Lazar
8dd2476238
Add role to set up base Debian server
...
With sshd in separate management VRF and FRR to announce routes to
self over unnumbered BGP.
2023-06-01 17:22:26 +02:00
Timotej Lazar
