aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTrygve Laugstøl <trygvis@inamo.no>2025-07-01 20:00:26 +0200
committerTrygve Laugstøl <trygvis@inamo.no>2025-07-01 20:00:26 +0200
commit5e5d95b1af0fa48ef349e3a39978aa54a24f9a8a (patch)
tree9ed365a3dc525aa5e5a5e9d18290d2c00a2afabc
parent12e9c7cc704c6ac782c246080f58d6f2556caaf7 (diff)
downloadinfra-5e5d95b1af0fa48ef349e3a39978aa54a24f9a8a.tar.gz
infra-5e5d95b1af0fa48ef349e3a39978aa54a24f9a8a.tar.bz2
infra-5e5d95b1af0fa48ef349e3a39978aa54a24f9a8a.tar.xz
infra-5e5d95b1af0fa48ef349e3a39978aa54a24f9a8a.zip
kioubit_de2 connection
-rw-r--r--tnet/host_vars/knot/wg.yml7
-rw-r--r--tnet/keys/wg-kioubit_de2-knot.pub1
-rw-r--r--tnet/keys/wg-knot-kioubit_de2.pub1
-rw-r--r--tnet/keys/wg-knot-kioubit_de2.sops.key28
-rw-r--r--tnet/wg-links.yml1
5 files changed, 37 insertions, 1 deletions
diff --git a/tnet/host_vars/knot/wg.yml b/tnet/host_vars/knot/wg.yml
index 9ad867e..64595ed 100644
--- a/tnet/host_vars/knot/wg.yml
+++ b/tnet/host_vars/knot/wg.yml
@@ -9,7 +9,7 @@ tnet_wg:
address: fdb1:4242:3538:ffff:18b7:d3ec:5608:db9a
kv24ix:
port: 51003
- address: fe80:fef1:078a:5b64:efd3:ae7b:d286:d7ce
+ address: fdb1:4242:3538:2f01::a
akili:
port: 51004
address: fdb1:4242:3538:ffff:59d7:cf77:8b5d:761a
@@ -37,3 +37,8 @@ tnet_wg:
if_name: coregonus
port: 51011
address: fe80:ba82:77f0:f96d:7a85:a7fa:ef6f:37d2
+ kioubit_de2:
+ if_name: kioubit_d2
+ endpoint: de2.g-load.eu:23538
+ port: 51012
+ address: fe80::ade1
diff --git a/tnet/keys/wg-kioubit_de2-knot.pub b/tnet/keys/wg-kioubit_de2-knot.pub
new file mode 100644
index 0000000..aed317e
--- /dev/null
+++ b/tnet/keys/wg-kioubit_de2-knot.pub
@@ -0,0 +1 @@
+B1xSG/XTJRLd+GrWDsB06BqnIq8Xud93YVh/LYYYtUY=
diff --git a/tnet/keys/wg-knot-kioubit_de2.pub b/tnet/keys/wg-knot-kioubit_de2.pub
new file mode 100644
index 0000000..a8d0922
--- /dev/null
+++ b/tnet/keys/wg-knot-kioubit_de2.pub
@@ -0,0 +1 @@
+7QJdCBlpvYWHyg33ifsifWmV/bV6RgUct4lh0ykCK1g=
diff --git a/tnet/keys/wg-knot-kioubit_de2.sops.key b/tnet/keys/wg-knot-kioubit_de2.sops.key
new file mode 100644
index 0000000..6f699b0
--- /dev/null
+++ b/tnet/keys/wg-knot-kioubit_de2.sops.key
@@ -0,0 +1,28 @@
+{
+ "data": "ENC[AES256_GCM,data:pj1LPjdqo+M/GlgWA63LNH/lM7F5rOYeMF1a0qNuBm6/luo5PvRYBj2jyLxa,iv:qlIvXCBXd9dyC6tj9WH0mq3jomzSUc4maPg9zPIvDbM=,tag:cSHZFa18BISZ9owjkHVkVw==,type:str]",
+ "sops": {
+ "kms": null,
+ "gcp_kms": null,
+ "azure_kv": null,
+ "hc_vault": null,
+ "age": [
+ {
+ "recipient": "age13wv3rp0varlg4nvt3tca48fq8u9q3mc6yfdekjeapcmc7kaq4dysrzcmv3",
+ "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2MTdPUUFNU0FXcTZWckZJ\nSXV2a3ZQVmE0T3BNTVByMGp0L3ZvZERyNEFjCmFjcmRpeXU5S2tlTnp3NXBPKzl4\nZ1doRVZ0TTYwZkkvSU5RNitySUJoTWsKLS0tIGlsNzJHL0FydVRXT3puT0RuR0R2\nZGZSaXFOWFB2YkoyMi8rZ0tBL2xxbjAKDPy+8yB95EZZq542FtuI3vo4NmcDrVO5\njOvYGmatpxqSZJ9Oy4HpMzKSWvSuKVkZwTcG7Zzrhi6qrhm/TKIRvQ==\n-----END AGE ENCRYPTED FILE-----\n"
+ },
+ {
+ "recipient": "age1mvh832crygenu5tu5njtraraet656rzwnawuasjggvs999dc9ueqj9qclw",
+ "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0dGlteEludXNpampzd0lD\nTGtQYjIwV3dEbVlEYUJOTlRXZDJYTGNpM1dzCncxMWg4R0J4aVQxQWlvQXY2ZmFH\nWjlxckFWZ2IzMnNENDZHeGFPUlJtVXMKLS0tIHJET2RLL1dBVURwdHhMZGpiMHlW\nblFaQTlDRDE4TmN6SDBnbTVpa3d1eEkKReWQml+gnXRCFbQtF5tFm8vUrALnY+QB\n/dki/g35K2I4tzyPg7qPgKEdGGUYcPTfg1Fyf2m7Q7xXJ7Xg7T1flA==\n-----END AGE ENCRYPTED FILE-----\n"
+ },
+ {
+ "recipient": "age1teasctdpkatekpsa47q58d3ugwyyqcuj5v9udtusk7ca9sfv694sw057a5",
+ "enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBrNTltblFtRGVLM2xSTGp1\nVjFNMzBaNHJ2WmZTeUlON25GZE5hSUF5QVdFCmFQb28xK2dDVFdzcS9hSTZGRnRv\nSDBDNWNGb3lWVFVmNk9VR1N5TTRkd1kKLS0tIHBhZVp3d3U4UzlDK0ZkaWRxdTA5\nelBrVFVId1IydVpOcXl2R2x3SDZlNlkKNB7tdDL9QdglbbN/za18BBbWDEEvgZcr\nIHEiz1UJZZYdKEsfk1w0LRE9IKhh7LdL11hCtfO/2uTVY/4ghDFHcA==\n-----END AGE ENCRYPTED FILE-----\n"
+ }
+ ],
+ "lastmodified": "2025-06-30T17:13:23Z",
+ "mac": "ENC[AES256_GCM,data:zY63cqqaceaSuyIBi06jQcwuUaR/bD8h1EL0B+2M8SLTdPQAQ88cDzWze8NjpN2WqPYsxGNo2RYZe0YPXg3ymEJ9YeOvOBzALUZvf7geF7KOoNAqzzieWmIjt7K6Xmq8w1LmsEN3oM8oUU/vNiNoXLHpcD+/Yamu2d0CGr32TZU=,iv:Aj7Hop2etAvJrfsFrvoag0bvKlaMrJySdea3t4cK9c8=,tag:kN4Tn6kiKEwFy0RW6i/HDA==,type:str]",
+ "pgp": null,
+ "unencrypted_suffix": "_unencrypted",
+ "version": "3.9.1"
+ }
+} \ No newline at end of file
diff --git a/tnet/wg-links.yml b/tnet/wg-links.yml
index a050547..6613614 100644
--- a/tnet/wg-links.yml
+++ b/tnet/wg-links.yml
@@ -6,6 +6,7 @@
handlers:
# Has to be restart for now, hash doesn't support reloading networkd
- name: systemctl restart systemd-networkd
+ #when: false
become: yes
systemd:
name: systemd-networkd