74c8ceba3b
Merge pull request 'Bump binarylane provider to 0.14.1 and adopt the orphaned bne vpn server' (#6) from benvin/provider-0.14.1 into main
main
benvin2026-10-17 12:54:20 +11:00
52dd2e5f48
Import the bne vpn server left out of state by a timed-out apply
unkin-agent2026-10-17 12:40:53 +11:00
aa3d6f15f0
Merge pull request 'Add Brisbane as the second mail edge site' (#5) from benvin/bne-instead-of-syd into benvin/syd-only-until-mel-stock
benvin2026-10-16 23:16:28 +11:00
c8d3485570
Merge pull request 'Build only the syd servers until mel has stock' (#4) from benvin/syd-only-until-mel-stock into main
benvin2026-10-16 23:04:28 +11:00
cc571d1fb4
Add bne as the second mail edge site and keep mel gated off
unkin-agent2026-10-16 22:58:47 +11:00
d0bc15f70b
Replace the syd hosts with bne and lift prevent_destroy for the swap
unkin-agent2026-10-16 22:57:02 +11:00
c6d43af68b
Build only the syd servers until mel has stock
unkin-agent2026-10-16 22:45:09 +11:00
174094f7b7
Merge pull request 'Move the DMZ VPCs into RFC 1918 space' (#3) from benvin/vpc-rfc1918 into main
benvin2026-10-16 22:37:20 +11:00
b1f0c5899f
Move the DMZ VPCs to 172.18.30.0/24 and 172.18.31.0/24
unkin-agent2026-10-14 22:21:05 +11:00
a8a2f50491
Merge pull request 'Add mail edge and vpn hosts to the DMZ VPCs' (#2) from benvin/mail-gateways into main
benvin2026-10-14 22:17:03 +11:00
88f50fc46a
Keep VPC route entries clear of the VPC ranges
unkin-agent2026-10-13 21:34:44 +11:00
6a0b6989ae
Number the DMZ VPCs 198.18.30.0/24 (syd) and 198.18.31.0/24 (mel)
unkin-agent2026-10-13 21:29:07 +11:00
04f6fd69d3
Address vpn wg links and loopbacks from 198.18.2.160/27 for ospf
unkin-agent2026-10-12 22:39:17 +11:00
29f3a53143
Give each vpn host its own p2p wg link to prodnxsr0020
unkin-agent2026-10-12 22:32:03 +11:00
cc72e6c8d2
Route 198.18.0.0/16 and the management host through the vpn hosts
unkin-agent2026-10-12 22:13:01 +11:00
d4d62ffcf4
Split each DMZ into a postfix edge host and a WireGuard vpn host
unkin-agent2026-10-12 22:08:09 +11:00
975ff15b6b
Bootstrap gateways via a retrying wg handshake unit and guard servers against rebuilds
unkin-agent2026-10-12 21:57:40 +11:00