Commit Graph

  • 74c8ceba3b Merge pull request 'Bump binarylane provider to 0.14.1 and adopt the orphaned bne vpn server' (#6) from benvin/provider-0.14.1 into main main benvin 2026-10-17 12:54:20 +11:00
  • 52dd2e5f48 Import the bne vpn server left out of state by a timed-out apply unkin-agent 2026-10-17 12:40:53 +11:00
  • d5adcbffc8 Bump binarylane provider to 0.14.1 unkin-agent 2026-10-17 12:37:23 +11:00
  • aa3d6f15f0 Merge pull request 'Add Brisbane as the second mail edge site' (#5) from benvin/bne-instead-of-syd into benvin/syd-only-until-mel-stock benvin 2026-10-16 23:16:28 +11:00
  • c8d3485570 Merge pull request 'Build only the syd servers until mel has stock' (#4) from benvin/syd-only-until-mel-stock into main benvin 2026-10-16 23:04:28 +11:00
  • cc571d1fb4 Add bne as the second mail edge site and keep mel gated off unkin-agent 2026-10-16 22:58:47 +11:00
  • d0bc15f70b Replace the syd hosts with bne and lift prevent_destroy for the swap unkin-agent 2026-10-16 22:57:02 +11:00
  • c6d43af68b Build only the syd servers until mel has stock unkin-agent 2026-10-16 22:45:09 +11:00
  • 174094f7b7 Merge pull request 'Move the DMZ VPCs into RFC 1918 space' (#3) from benvin/vpc-rfc1918 into main benvin 2026-10-16 22:37:20 +11:00
  • b1f0c5899f Move the DMZ VPCs to 172.18.30.0/24 and 172.18.31.0/24 unkin-agent 2026-10-14 22:21:05 +11:00
  • a8a2f50491 Merge pull request 'Add mail edge and vpn hosts to the DMZ VPCs' (#2) from benvin/mail-gateways into main benvin 2026-10-14 22:17:03 +11:00
  • 88f50fc46a Keep VPC route entries clear of the VPC ranges unkin-agent 2026-10-13 21:34:44 +11:00
  • 6a0b6989ae Number the DMZ VPCs 198.18.30.0/24 (syd) and 198.18.31.0/24 (mel) unkin-agent 2026-10-13 21:29:07 +11:00
  • 04f6fd69d3 Address vpn wg links and loopbacks from 198.18.2.160/27 for ospf unkin-agent 2026-10-12 22:39:17 +11:00
  • 29f3a53143 Give each vpn host its own p2p wg link to prodnxsr0020 unkin-agent 2026-10-12 22:32:03 +11:00
  • cc72e6c8d2 Route 198.18.0.0/16 and the management host through the vpn hosts unkin-agent 2026-10-12 22:13:01 +11:00
  • d4d62ffcf4 Split each DMZ into a postfix edge host and a WireGuard vpn host unkin-agent 2026-10-12 22:08:09 +11:00
  • 975ff15b6b Bootstrap gateways via a retrying wg handshake unit and guard servers against rebuilds unkin-agent 2026-10-12 21:57:40 +11:00
  • fe6dc0bc95 Align comments to tofu 1.10 fmt unkin-agent 2026-10-12 21:52:06 +11:00
  • 0ee9dac5b0 Add mta1/mta2 DMZ mail gateways with WireGuard bootstrap unkin-agent 2026-10-12 21:50:09 +11:00
  • f5921bf4c8 Merge pull request 'Scaffold terragrunt layout and CI' (#1) from benvin/scaffold into main benvin 2026-10-12 21:24:16 +11:00
  • cec0a1f322 Add tofu-validate and tflint hooks, track lock files unkin-agent 2026-10-12 00:41:37 +11:00
  • 5bce3998c5 Scaffold terragrunt layout, consul backend and woodpecker pipelines unkin-agent 2026-10-12 00:34:03 +11:00
  • 22733e11e4 Initial commit gitadmin 2026-10-12 00:32:48 +11:00