Hosts + keys
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
Gitea eb4ef1d410 automatic update 3 weeks ago
.github Bump actions/checkout from 2 to 3 1 month ago
hosts automatic update 4 weeks ago
modules retiolum: fix eval 1 month ago
scripts update zone 2 years ago
zones update zones 9 months ago
README.md fix syntax 6 months ago
etc.hosts automatic update 3 weeks ago
etc.hosts-v6only automatic update 3 weeks ago
flake.nix add ca for retiolum 6 months ago
wiregrill.json automatic update 4 months ago

README.md

Retiolum tinc keys and hosts

NixOS usage

If you are a flake user:

{
  inputs = {
    retiolum.url = "git+https://git.thalheim.io/Mic92/retiolum";
  };
  outputs = { retiolum, ... }: {
    # Than include `retiolum.nixosModules.retiolum` nixos module in your nixos configurations
    # To add the retiolum ssl certificate include `retiolum.nixosModules.ca`
  };
}

First add your key to https://github.com/krebs/stockholm Mic92's stockholm fork will than update this repository itself.

{
  # lookup the ipv6 address from the generated text file ./hosts
  networking.retiolum.ipv6 = "42:0:3c46:70c7:8526:2adf:0000:0000";
  # optional
  # networking.retiolum.ipv4 = "10.240.0.0";
}

VPN Setup

  1. Install tinc (e.g. Ubuntu : sudo apt install tinc, MacOS: brew install tinc --devel)

  2. Create the appropriate directory and perform the initial tinc startup

    $ sudo mkdir /etc/tinc/retiolum
    $ sudo tincd -K -n retiolum
    $ sudo systemctl enable --now tinc@retiolum
  1. Provide the key generated in the previous step along with {your_name} (unique name for the machine) to @Mic92. You will get your respective IP addresses in return.

  2. Create the tinc-up executable in the /etc/tinc/retiolum folder

    $ echo '#!/usr/bin/env bash
    curl https://retiolum.thalheim.io/tinc-hosts.tar.bz2 | tar -xjvf - -C /etc/tinc/retiolum/ || true
    ip link set $INTERFACE up
    ip addr add "Provided_IPv4_from_Step_3"/12 dev $INTERFACE
    ip addr add "Provided_IPv6_from_Step_3"/16 dev $INTERFACE' > /etc/tinc/retiolum/tinc-up

    $ chmod +x /etc/tinc/retiolum/tinc-up
  1. Create (if it does not exist) the tinc configuration file
    $ echo 'DeviceType = tun
    Interface = tinc.retiolum
    Name = {your_name_from_Step_3}
    LocalDiscovery = yes
    ConnectTo = gum
    ConnectTo = ni
    ConnectTo = prism
    ConnectTo = eve
    ConnectTo = eva
    AutoConnect = yes' > /etc/tinc/retiolum/tinc.conf
  1. Restart the vpn service
    $ systemctl restart tinc@retiolum

You should retrieve hosts' information after the restart. The hosts folder should appear in /etc/tinc/retiolum The list of the hosts is also available here : https://retiolum.thalheim.io/etc.hosts

SSH Setup

  1. Generate an ssh key-pair or provide an already existing public ssh key to one of the authorised users.
  2. One of the authorised users should add/modify the user's information in /modules/users.nix (https://github.com/Mic92/doctor-cluster-config)
  3. Push the change to the repository
  4. Log in to rose, pull the update(s) (if it's not done in the machine itelf)
  5. Get in /etc/nixos/ directory and run the script ./update-all.sh
    $ cd /etc/nixos
    $ ./update-all.sh