unkin-agent
f4f4a12b52
ci/woodpecker/pr/puppet-lint Pipeline was successful
ci/woodpecker/pr/ruby-validate Pipeline was successful
ci/woodpecker/pr/yamllint Pipeline was successful
ci/woodpecker/pr/bolt-validate Pipeline was successful
ci/woodpecker/pr/erb-validate Pipeline was successful
ci/woodpecker/pr/epp-validate Pipeline was successful
ci/woodpecker/pr/ruby-check Pipeline was canceled
ci/woodpecker/pr/puppet-validate Pipeline was canceled
44 lines
1.2 KiB
YAML
44 lines
1.2 KiB
YAML
---
|
|
# primary interface is the WAN uplink; pin host identity to the dum0 loopback
|
|
networking_loopback0_ip: 198.18.2.160
|
|
networking_loopback1_ip: 198.18.21.160
|
|
|
|
# dns: keep the local dnsmasq resolver
|
|
profiles::dns::base::nameservers:
|
|
- 127.0.0.1
|
|
profiles::dns::base::search:
|
|
- main.unkin.net
|
|
profiles::dns::base::primary_interface: dum0
|
|
profiles::dns::updater::deny_ranges:
|
|
- 198.18.199.0/24
|
|
- 198.18.200.0/24
|
|
- 10.42.0.0/16
|
|
- 10.43.0.0/16
|
|
- 10.10.12.0/24 # wg0
|
|
- 103.216.190.0/23 # wan uplink
|
|
profiles::consul::client::host_addr: "%{hiera('networking_loopback0_ip')}"
|
|
|
|
# ssh: listen on localhost and dum0 only; knock out the common wan primary ip
|
|
lookup_options:
|
|
ssh::server::options:
|
|
merge:
|
|
strategy: deep
|
|
knockout_prefix: '--'
|
|
ssh::server::options:
|
|
ListenAddress:
|
|
- "--%{facts.networking.ip}"
|
|
- 127.0.0.1
|
|
- "%{hiera('networking_loopback0_ip')}"
|
|
|
|
# frrouting
|
|
frrouting::ospfd_router_id: "%{hiera('networking_loopback0_ip')}"
|
|
frrouting::ospfd_interfaces:
|
|
dum0:
|
|
area: 0.0.0.0
|
|
dum1:
|
|
area: 0.0.0.0
|
|
bond0.201:
|
|
area: 0.0.0.0
|
|
frrouting::ospf_preferred_source_enable: true
|
|
frrouting::ospf_preferred_source: "%{hiera('networking_loopback1_ip')}"
|