tjo.cloud infrastructure

Find a file

Tine 01577ed7a6 Some checks failed / lint (push) Failing after 1m25s Details docs: proxmox setup		2024-11-07 21:14:51 +01:00
.forgejo/workflows	ci: update devbox install	2024-08-01 19:47:02 +02:00
k8s.tjo.cloud	feat: add proxmox basic nix image	2024-08-31 19:48:38 +02:00
.envrc	feat: better?	2024-07-21 12:27:40 +02:00
.gitignore	feat: hey it works, ish	2024-09-01 11:26:09 +02:00
devbox.json	feat: add proxmox basic nix image	2024-08-31 19:48:38 +02:00
devbox.lock	feat: lint	2024-07-25 17:42:08 +02:00
example.env	feat: better?	2024-07-21 12:27:40 +02:00
justfile	chore: remove unused	2024-11-02 15:26:31 +01:00
LICENSE	Initial commit	2024-07-08 19:36:43 +00:00
README.md	docs: proxmox setup	2024-11-07 21:14:51 +01:00

README.md

`tjo-cloud/infrastructure`

Proxmox Configuration

Guide to install on emmc

1. Tailscale.

Install and authenticate as always. Start with tailscale up --ssh --accept-routes --accept-dns=false.

2. Install intel-micropodes updates.

# Add non-free-firmware to the end
vim /etc/apt/sources.list

apt install intel-microcode

reboot

2. Configure Hosts.

Every Proxmox node needs to have configured /etc/hosts with entryies for all servers.

Servers

100.71.223.89 naboo.system.tjo.cloud naboo
fd7a:115c:a1e0::8701:df59 naboo.system.tjo.cloud naboo

100.110.88.100 batuu.system.tjo.cloud batuu
fd7a:115c:a1e0::1901:5864 batuu.system.tjo.cloud batuu

100.103.129.84 endor.system.tjo.cloud endor
fd7a:115c:a1e0::3b01:8154 endor.system.tjo.cloud endor

100.67.200.27 jakku.system.tjo.cloud jakku
fd7a:115c:a1e0::301:c81b jakku.system.tjo.cloud jakku

100.82.48.119 nevaroo.system.tjo.cloud nevaroo
fd7a:115c:a1e0::b301:3077 nevaroo.system.tjo.cloud nevaroo

3. Connect to Proxmox Cluster.

pvecm add $EXISTING_NODE --link0 $(tailscale ip -4) --link1 $(tailscale ip -6)

4. Configure Firewall.

# Web Portal on public IP
iptables -A INPUT -p tcp -i vmbr0 --dport 8006 -j DROP

5. Disable RPC Bind

systemctl disable --now rpcbind

5. Disable SSH Access from public internet and enable public key auth.

echo "PasswordAuthentication no" >> /etc/ssh/sshd_config