changeset 71:52156d3898c5

mostly per-host network settings
author drewp@bigasterisk.com
date Sat, 11 Jun 2022 22:55:10 -0700
parents 136d86d06ce6
children f0e59adf7b91
files files/fstab/dash files/fstab/dot inventory.py templates/net/bang_10.1.network.j2 templates/net/bang_10.2.network.j2 templates/net/bang_isp.network.j2 templates/net/singlenic.network.j2 templates/wireguard/wg0.conf.j2 wireguard.py
diffstat 9 files changed, 26 insertions(+), 24 deletions(-) [+]
line wrap: on
line diff
--- a/files/fstab/dash	Sat Jun 11 22:53:23 2022 -0700
+++ b/files/fstab/dash	Sat Jun 11 22:55:10 2022 -0700
@@ -3,6 +3,6 @@
 # <file system> <mount point>   <type>  <options>       <dump>  <pass>
 /dev/disk/by-uuid/3b6780e0-ec86-43be-8d09-e462dbad762e / ext4 defaults 0 0
 /dev/disk/by-uuid/b88f75cd-9022-4af9-a11b-5a5a1fbd3132 /d2 ext4 defaults 0 0
-/dev/disk/by-uuid/73bcd201-5f77-4f68-9fba-47835c3c1692 /prev ext4 defaults 0 0
+#/dev/disk/by-uuid/73bcd201-5f77-4f68-9fba-47835c3c1692 /prev ext4 defaults 0 0
 /swap.img	none	swap	sw	0	0
 bang5:/stor6/my /my nfs4 defaults 0 0
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/files/fstab/dot	Sat Jun 11 22:55:10 2022 -0700
@@ -0,0 +1,6 @@
+# written by pyinfra
+
+# <file system> <mount point>   <type>  <options>       <dump>  <pass>
+/dev/disk/by-uuid/5a6ce8db-cde0-4c26-b6a4-08faef2e01a2 / ext4 defaults 0 0
+/swap.img	none	swap	sw	0	0
+/dev/disk/by-uuid/78f08fb8-28cb-4af0-a579-36d7875ed558 /d2 ext4 defaults 0 0
\ No newline at end of file
--- a/inventory.py	Sat Jun 11 22:53:23 2022 -0700
+++ b/inventory.py	Sat Jun 11 22:55:10 2022 -0700
@@ -6,8 +6,8 @@
         'wireguard_address': '10.5.0.1',
     }),  #
     ('dash', {
-        "mac": "b8:97:5a:17:d7:1f",
-        'ssh_hostname': 'dash',
+        "mac": "b8:97:5a:17:d7:1fzzz",
+        'ssh_hostname': '10.2.0.212',
         'wireguard_address': '10.5.0.5',
     }),
     ('slash', {
@@ -16,7 +16,7 @@
         'wireguard_address': '10.5.0.6',
     }),
     ('dot', {
-        'mac': '1c:c1:de:56:e6:70',
+        'mac': '1c:c1:de:56:e6:70zzz',
         'ssh_hostname': 'dot',
         'wireguard_address': '10.5.0.30',
     })
@@ -31,11 +31,11 @@
 ]
 
 pi = [
-    ('frontbed', {
-        'mac': 'b8:27:eb:e9:d3:44',
-        'ssh_hostname': 'frontbed',
-        'wireguard_address': '10.5.0.17',
-    }),
+#    ('frontbed', {
+#        'mac': 'b8:27:eb:e9:d3:44',
+#        'ssh_hostname': 'frontbed',
+#        'wireguard_address': '10.5.0.17',
+#    }),
     ('garage', {
         'mac': 'b8:27:eb:81:17:92',
         'ssh_hostname': 'garage',
--- a/templates/net/bang_10.1.network.j2	Sat Jun 11 22:53:23 2022 -0700
+++ /dev/null	Thu Jan 01 00:00:00 1970 +0000
@@ -1,9 +0,0 @@
-# written by pyinfra
-
-[Match]
-MACAddress=e8:39:35:46:0d:bb
-
-[Network]
-Address=10.1.0.1
-DNS=10.2.0.1
-Domains=bigasterisk.com
\ No newline at end of file
--- a/templates/net/bang_10.2.network.j2	Sat Jun 11 22:53:23 2022 -0700
+++ b/templates/net/bang_10.2.network.j2	Sat Jun 11 22:55:10 2022 -0700
@@ -4,6 +4,7 @@
 MACAddress=60:e3:27:04:4a:85
 
 [Network]
+DHCP=no
 Address=10.2.0.1/16
 DNS=10.2.0.1
-Domains=bigasterisk.com
\ No newline at end of file
+Domains=bigasterisk.com
--- a/templates/net/bang_isp.network.j2	Sat Jun 11 22:53:23 2022 -0700
+++ b/templates/net/bang_isp.network.j2	Sat Jun 11 22:55:10 2022 -0700
@@ -5,6 +5,7 @@
 
 [Network]
 # in particular, don't take DNS addrs from this dhcp server
+UseDNS=false
 DHCP=no
 Address=192.168.42.2/24
 Gateway=192.168.42.1
--- a/templates/net/singlenic.network.j2	Sat Jun 11 22:53:23 2022 -0700
+++ b/templates/net/singlenic.network.j2	Sat Jun 11 22:55:10 2022 -0700
@@ -1,7 +1,7 @@
 # written by pyinfra
 
 [Match]
-MACAddress={{ mac }}
+Name=*
 
 [Network]
 DHCP=yes
--- a/templates/wireguard/wg0.conf.j2	Sat Jun 11 22:53:23 2022 -0700
+++ b/templates/wireguard/wg0.conf.j2	Sat Jun 11 22:55:10 2022 -0700
@@ -19,10 +19,7 @@
     {{ peer_block('plus',        'tH2og4BbXaH6BrHSBd73Fx1XT0DxR8vjQxjqHFa913A=', '10.5.0.110/32') }}
     {{ peer_block('drew-note10', 'QMgx4cmuUTfJ7RH4Q46b54tSQl4eISOmdEney17fnE8=', '10.5.0.112/32') }}
 {% elif host.name == 'plus' %}
-    {{ peer_block('bang',        'pAxirNVF08R6zYyudhTKjZ9fqC9UKMxknfLi5A39QVY=', '10.5.0.0/24', '10.1.0.1:1195', 50) }}
-{% elif host.name in ['dash', 'slash'] %}
-    # I see bang at 10.1.0.1
-    {{ peer_block('bang',        'pAxirNVF08R6zYyudhTKjZ9fqC9UKMxknfLi5A39QVY=', '10.5.0.0/24', '10.1.0.1:1195', 50) }}
+    {{ peer_block('bang',        'pAxirNVF08R6zYyudhTKjZ9fqC9UKMxknfLi5A39QVY=', '10.5.0.0/24', '10.2.0.1:1195', 50) }}
 {% else %}
     # I see bang at 10.2.0.1
     {{ peer_block('bang',        'pAxirNVF08R6zYyudhTKjZ9fqC9UKMxknfLi5A39QVY=', '10.5.0.0/24', '10.2.0.1:1195', 50) }}
--- a/wireguard.py	Sat Jun 11 22:53:23 2022 -0700
+++ b/wireguard.py	Sat Jun 11 22:55:10 2022 -0700
@@ -57,3 +57,9 @@
     files.link(path=f'/etc/systemd/system/multi-user.target.wants/{svc}', target='/lib/systemd/system/wg-quick@.service')
 
     systemd.service(service=svc, daemon_reload=True, restarted=True, enabled=True)
+
+if host.name == 'bang':
+    # recompute, or else maybe dnsmasq_10.5 won't start
+    server.shell("systemctl enable dnsmasq_10.2.service")
+    server.shell("systemctl enable dnsmasq_10.5.service")
+    server.shell("systemctl enable wg-quick@wg0.service")
\ No newline at end of file