2021 server
This commit is contained in:
parent
71b0a396c3
commit
eb4bef9753
1 changed files with 54 additions and 14 deletions
68
server.yml
68
server.yml
|
|
@ -1,7 +1,8 @@
|
||||||
kernel:
|
kernel:
|
||||||
image: linuxkit/kernel:5.4.19
|
image: linuxkit/kernel:5.4.19
|
||||||
# cmdline: "console=tty0 console=ttyS0"
|
# cmdline: "console=tty0 console=ttyS0"
|
||||||
cmdline: "console=tty0 adlin.network=alt"
|
# cmdline: "console=tty0 adlin.network=alt"
|
||||||
|
cmdline: "console=tty0"
|
||||||
|
|
||||||
init:
|
init:
|
||||||
- linuxkit/init:a4fcf333298f644dfac6adf680b83140927aa85e
|
- linuxkit/init:a4fcf333298f644dfac6adf680b83140927aa85e
|
||||||
|
|
@ -37,7 +38,25 @@ onboot:
|
||||||
bindNS:
|
bindNS:
|
||||||
net: /run/netns/login
|
net: /run/netns/login
|
||||||
|
|
||||||
# Network: DMZ ####################################################
|
# Network: internet DMZ ###########################################
|
||||||
|
|
||||||
|
# wg-manager
|
||||||
|
- name: wg-iface-setup
|
||||||
|
image: linuxkit/ip:v0.7
|
||||||
|
command: ["/bin/sh", "-c", "ip a add 172.17.0.15/16 dev vethin-wg; ip a add 10.224.32.251/24 dev vethin-wg; ip link set vethin-wg up; grep adlin.network=alt /proc/cmdline > /dev/null && ip route add default via 10.224.32.254 || ip route add default via 10.224.32.1; wg-quick up wg0; /sbin/iptables-restore < /etc/iptables/rules.v4;" ]
|
||||||
|
net: new
|
||||||
|
binds:
|
||||||
|
- /etc/iptables/rules-wg.v4:/etc/iptables/rules.v4
|
||||||
|
- /etc/wireguard/wg0.conf:/etc/wireguard/wg0.conf
|
||||||
|
runtime:
|
||||||
|
interfaces:
|
||||||
|
- name: vethin-wg
|
||||||
|
add: veth
|
||||||
|
peer: veth-wg
|
||||||
|
bindNS:
|
||||||
|
net: /run/netns/dmzi-wg
|
||||||
|
|
||||||
|
# Network: services DMZ ###########################################
|
||||||
|
|
||||||
# token-validator
|
# token-validator
|
||||||
- name: validator-iface-setup
|
- name: validator-iface-setup
|
||||||
|
| |||||||