Simon Marsh
b6dadc04c1
All checks were successful
continuous-integration/drone/push Build is passing
167 lines
5.4 KiB
JavaScript
167 lines
5.4 KiB
JavaScript
//////////////////////////////////////////////////////////////////////////
|
|
// define domains
|
|
|
|
domain='burble.dn42';
|
|
pdns_domain(domain);
|
|
|
|
//////////////////////////////////////////////////////////////////////////
|
|
// special records
|
|
|
|
D_EXTEND(
|
|
domain,
|
|
TXT('canary', "It's Alive!", TTL(1))
|
|
);
|
|
|
|
//////////////////////////////////////////////////////////////////////////
|
|
// services
|
|
|
|
// IPv4 service names
|
|
service('ns1', 'fd42:4242:2601:ac53::1', '172.20.129.1');
|
|
service('dns', 'fd42:4242:2601:ac53::53', '172.20.129.2');
|
|
service('@', 'fd42:4242:2601:ac80::1', '172.20.129.3');
|
|
service('grc', 'fd42:4242:2601:ac12::1', '172.20.129.4');
|
|
service('pingable', 'fd42:4242:2601:ac05::1', '172.20.129.5');
|
|
// 172.20.129.6 was wiki but not now used
|
|
service('rproxy', 'fd42:4242:2601:acf0::1', '172.20.129.7');
|
|
service('whois', 'fd42:4242:2601:ac43::1', '172.20.129.8');
|
|
// services 172.20.129.9 -> 172.20.129.29 are unassigned
|
|
service('shell.us-nyc1', 'fd42:4242:2601:1005:216:3eff:fe77:4dfe', '172.20.129.29');
|
|
service('shell.ca-bhs2', 'fd42:4242:2601:100d:216:3eff:fed7:2ceb', '172.20.129.30');
|
|
service('shell.fr-rbx1', 'fd42:4242:2601:1016:216:3eff:feae:51a8', '172.20.129.31');
|
|
service('shell.de-fra2', 'fd42:4242:2601:100c:216:3eff:fe9a:bcc0');
|
|
|
|
// internal anycasts
|
|
service('rpki', 'fd42:4242:2601:ac10::1');
|
|
service('dns64', 'fd42:4242:2601:ac53::64');
|
|
service('wiki.service', 'fd42:4242:2601:ac00::10:1');
|
|
service('dn42regsrv', 'fd42:4242:2601:ac00::20:1');
|
|
service('dns-slave', 'fd42:4242:2601:ac00::53:1');
|
|
service('consul.service', 'fd42:4242:2601:acf0::10:1');
|
|
service('vault.service', 'fd42:4242:2601:acf0::20:1');
|
|
service('acme', 'fd42:4242:2601:acf0::30:1');
|
|
service('etcd', 'fd42:4242:2601:acf0::50:1');
|
|
service('ldap', 'fd42:4242:2601:acf0::60:1');
|
|
|
|
// proxied services
|
|
proxied('explorer');
|
|
proxied('glass');
|
|
proxied('lg');
|
|
proxied('wiki');
|
|
proxied('lounge');
|
|
proxied('nextcloud');
|
|
proxied('alertmanager');
|
|
proxied('monitor');
|
|
proxied('grafana');
|
|
proxied('consul');
|
|
proxied('vault');
|
|
proxied('paste');
|
|
proxied('tasks');
|
|
proxied('n8n');
|
|
proxied('wdev');
|
|
proxied('mkdev');
|
|
proxied('gdev');
|
|
proxied('ldap-admin');
|
|
proxied('svc');
|
|
proxied('jcr');
|
|
proxied('scrutiny');
|
|
|
|
// docker services
|
|
D_EXTEND(
|
|
domain,
|
|
CNAME('ci', 'docker.tier2.fr-rbx1.burble.dn42.'),
|
|
CNAME('sshwifty', 'docker.tier1.de-fra1.burble.dn42.')
|
|
);
|
|
|
|
// bgptools dmz container
|
|
service('bgptools.fr-rbx1', 'fd42:4242:2601:1016:216:3eff:fe6b:a0cd');
|
|
|
|
// other service cnames
|
|
D_EXTEND(
|
|
domain,
|
|
|
|
// evpn subdomain
|
|
NS('evpn', 'ns.uk-lon1.evpn.burble.dn42.'),
|
|
NS('evpn', 'ns.us-nyc1.evpn.burble.dn42.'),
|
|
AAAA('ns.uk-lon1.evpn', 'fd42:4242:2601:335:72e8:bff:fe58:b51b'),
|
|
AAAA('ns.uk-nyc1.evpn', 'fd42:4242:2601:325:72e8:bff:fe58:b51b'),
|
|
// DS('evpn', 46501,13,2,'ba25a8ee27c9fcc9595b60aab43aad60fd30fad073861159e157e7edf7239fc0'),
|
|
|
|
// global service aliases
|
|
CNAME('www', 'burble.dn42.'),
|
|
CNAME('git', 'git.de-fra1.burble.dn42.'),
|
|
|
|
// local service aliases
|
|
CNAME('wiki.fr', 'nginx.de-fra1.burble.dn42.'),
|
|
CNAME('wiki.ca', 'nginx.ca-bhs2.burble.dn42.'),
|
|
|
|
// host aliases
|
|
CNAME('repo', 'repo.tier2.fr-rbx1.burble.dn42.'),
|
|
CNAME('minio', 'minio.tier2.uk-lon3.burble.dn42.'),
|
|
|
|
// grc SSHFP
|
|
SSHFP('grc', 4, 1, 'ff61153c18334e89df3b4b4e4696306eeb5ffe9c'),
|
|
SSHFP('grc', 4, 2, 'c3a2470309cb1e6fba252231a6504a096ffd8b6f92442493f762e7512c515e76'),
|
|
|
|
// shell servers SSHFP
|
|
SSHFP('shell.fr-rbx1', 4, 1, '9bc4c0a9ca5fddcab1d1f5ee26887e954411b587'),
|
|
SSHFP('shell.fr-rbx1', 4, 2, 'fb2ddf25f4a228e147134b2a02187d4710aa78929cdbe2a119a183e91a758a81'),
|
|
SSHFP('shell.ca-bhs2', 4, 1, '3e08e7e4f261211d23ea92a4dd4fa210c1cedfd9'),
|
|
SSHFP('shell.ca-bhs2', 4, 2, 'aeace90bd0ecb5cd10243ce96660437ed179276a94ab654f3fd927154ef21e01'),
|
|
SSHFP('shell.us-nyc1', 4, 1, '92b1e670d749b48fc823d9ea841eea6a467c6286'),
|
|
SSHFP('shell.us-nyc1', 4, 2, '2e692fcb76344151e775d45fc9c28f7eee40d14b96d5fdcb55a796cce9e148db'),
|
|
|
|
// dn42.dev mail
|
|
MX('mail-dn42dev', 10, 'mail-dn42dev.tier2.de-fra1.burble.dn42.'),
|
|
MX('mail-dn42dev', 10, 'mail-dn42dev.tier2.ca-bhs2.burble.dn42.'),
|
|
|
|
// speedtest
|
|
CNAME('speedtest.fr-rbx1', 'nginx.fr-rbx1.burble.dn42.'),
|
|
CNAME('speedtest.ca-bhs2', 'nginx.ca-bhs2.burble.dn42.'),
|
|
|
|
// registry docker alias
|
|
AAAA('docker.registry.ca-bhs2', 'fd42:180:3de0:100:926f:e2ff:fe66:b75e')
|
|
|
|
);
|
|
|
|
//////////////////////////////////////////////////////////////////////////
|
|
// hosts
|
|
|
|
// dmz special config
|
|
D_EXTEND(
|
|
domain,
|
|
|
|
AAAA('dmz.uk-lon1', '2a04:92c5:2:1::1'),
|
|
AAAA('dmz.de-fra1', '2a0d:5941:1:17c::4e2a'),
|
|
AAAA('dmz.fr-rbx1', '2001:41d0:8:6a47::1'),
|
|
AAAA('dmz.ca-bhs2', '2607:5300:120:81a::1')
|
|
);
|
|
|
|
|
|
// main nodes
|
|
|
|
nodes.forEach(function(n) {
|
|
var hex = (n[4] + 32).toString(16);
|
|
var ip4 = (n[5] == 'undefined' ? undefined : n[5]);
|
|
|
|
// main IP
|
|
host(n[0],'fd42:4242:2601:'+hex+'::1', ip4);
|
|
// subnet IPs
|
|
host('tier1.'+n[0], 'fd42:4242:2601:'+hex+'::1');
|
|
host('tier2.'+n[0], 'fd42:4242:2601:'+hex+'02::1');
|
|
|
|
// create dn42-xxx CNAME for dn42 nodes
|
|
if (n[3] == 'true') {
|
|
D_EXTEND(domain,CNAME('dn42-'+n[0], n[0]+'.burble.dn42.'));
|
|
}
|
|
});
|
|
|
|
// containers and VMs
|
|
|
|
virtual.forEach(function(v) {
|
|
host(v[0], v[1], v[2]);
|
|
});
|
|
|
|
//////////////////////////////////////////////////////////////////////////
|
|
// end of file
|
|
|