Networking

Find a file

Tine d571b507f3 docs: arhitecture		2024-11-03 10:30:14 +01:00
docs	docs: arhitecture	2024-11-03 10:29:23 +01:00
terraform	feat: initial deployment	2024-11-02 19:53:21 +01:00
.envrc	feat: initial deployment	2024-11-02 19:53:21 +01:00
.gitignore	feat: initial deployment	2024-11-02 19:53:21 +01:00
devbox.json	feat: initial deployment	2024-11-02 19:53:21 +01:00
devbox.lock	feat: initial deployment	2024-11-02 19:53:21 +01:00
justfile	feat: initial deployment	2024-11-02 19:53:21 +01:00
LICENSE	Initial commit	2024-11-02 14:27:31 +00:00
README.md	docs: arhitecture	2024-11-03 10:30:14 +01:00

README.md

`network.tjo.cloud`

Handling networking between nodes and between virtual machines.

Architecture

WAN interface either represents an actual public interface (on Hetzner) or an interface in home LAN that has port-forwarded ports to it from home router.

LAN interface is an ordinary lan network.

ingress.tjo.cloud has port-forwarded all public ports to it (22, 25, 80, 443, 587 etc.). No other VM is accessible from the internet.

network.tjo.cloud establishes Tailscale VPN connection between other network.tjo.cloud VMs. Using subnet routing it makes it possible that each VM can connect to all other VMs on any Proxmox host.

Setting up new Host

1. Add new device to terraform.tfvars.

2. Manually configure vmbr0 and use import to import it.

3. Deploy terraform and manually install OPNsense via console.

4. Manually configure Tailscale.

Ref: https://tailscale.com/kb/1097/install-opnsense