tony/homelab
1
0
Fork 0
Code Issues 12 Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Version control DNS records

Browse Source
This commit is contained in:
Tony Du 2025-02-12 10:33:42 -08:00
parent 0cb4f35057
commit 1d060128d3
12 changed files with 92 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
dns/zones/dolo.mnke.org.zone Normal file
View File

@ -0,0 +1,6 @@
$ORIGIN dolo.mnke.org.
@ 900 IN SOA dns-server. hostadmin 20 900 300 604800 900
@ 3600 IN NS dns-server.
@ 600 IN ANAME metal-01
* 600 IN CNAME metal-01
metal-01 600 IN A 10.0.185.128

7
dns/zones/home.mnke.org.zone Normal file
View File

@ -0,0 +1,7 @@
$ORIGIN home.mnke.org.
@ 900 IN SOA dns-server. hostadmin 14 900 300 604800 900
@ 3600 IN NS dns-server.
db 600 IN CNAME truenas
nas 600 IN CNAME truenas
truenas 600 IN A 10.0.0.160
truenas-gpu 600 IN A 10.0.0.250

5
dns/zones/jumper.mnke.org.zone Normal file
View File

@ -0,0 +1,5 @@
$ORIGIN jumper.mnke.org.
@ 0 IN SOA dns-server. invalid. 1 900 300 604800 900
@ 3600 IN NS dns-server.
@ 600 IN A 10.0.44.2
* 600 IN A 10.0.44.2

6
dns/zones/mnke.org.zone Normal file
View File

@ -0,0 +1,6 @@
$ORIGIN mnke.org.
@ 900 IN SOA dns-server. hostadmin 12 900 300 604800 900
@ 3600 IN NS dns-server.
authentik 600 IN CNAME authentik.dolo
blog 600 IN CNAME blog.dolo
git 600 IN CNAME git.jumper

6
dns/zones/stingray.mnke.org.zone Normal file
View File

@ -0,0 +1,6 @@
$ORIGIN stingray.mnke.org.
@ 900 IN SOA dns-server. hostadmin 9 900 300 604800 900
@ 3600 IN NS dns-server.
@ 600 IN ANAME manager-01
* 600 IN CNAME manager-01
manager-01 600 IN A 10.0.42.32

38
k8s/apps/ingressroutes/external/build/dns-home-mnke.yaml vendored Normal file
View File

@ -0,0 +1,38 @@
---
# This file was automatically generated. Do not modify.
apiVersion: v1
kind: Service
metadata:
name: dns-home-mnke-external
namespace: default
spec:
type: ExternalName
externalName: 10.0.123.123
ports:
- name: dns-home-mnke-external
port: 5380
targetPort: 5380
---
# This file was automatically generated. Do not modify.
apiVersion: traefik.io/v1alpha1
kind: IngressRoute
metadata:
name: dns-home-mnke-external
namespace: default
spec:
entryPoints:
- websecure
routes:
- match: Host(`dns.home.mnke.org`)
kind: Rule
middlewares:
- name: local-allowlist
namespace: default
services:
- kind: Service
name: dns-home-mnke-external
port: 5380
passHostHeader: False
tls:
secretName: wildcard-mnke-org-tls

3
k8s/apps/ingressroutes/external/build/kustomization.yaml vendored
View File

@ -5,4 +5,5 @@ resources:
- jellyfin-mnke.yaml
- jellyfin-tonydu.yaml
- seerr-mnke.yaml
- seerr-tonydu.yaml
- seerr-tonydu.yaml
- dns-home-mnke.yaml

1
k8s/apps/ingressroutes/external/templater/main.py vendored
View File

@ -26,6 +26,7 @@ resources:
{%- for filename in filenames %}
- {{ filename }}
{%- endfor %}
''')
def main(args):

10
k8s/apps/ingressroutes/external/templater/values.yaml vendored
View File

@ -37,3 +37,13 @@ proxies:
- name: redirect-tonydu-me-mnke-org
namespace: default
- service_name: dns-home-mnke
tls_secret_name: wildcard-mnke-org-tls
listen_host: dns.home.mnke.org
middlewares:
- name: local-allowlist
namespace: default
upstream_host: 10.0.123.123
upstream_port: 5380
pass_host_header: false

1
k8s/apps/ingressroutes/middlewares/kustomization.yaml
View File

@ -4,3 +4,4 @@ kind: Kustomization
resources:
- authentik.yaml
- redirect-tonydu-me-mnke-org.yaml
- local-allowlist.yaml

10
k8s/apps/ingressroutes/middlewares/local-allowlist.yaml Normal file
View File

@ -0,0 +1,10 @@
apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
name: local-allowlist
namespace: default
spec:
ipAllowList:
sourceRange:
- 127.0.0.1/32
- 10.0.0.0/16

6
tf/dns.tf
View File

@ -1,6 +0,0 @@
# resource "dns_a_record_set" "test" {
# zone = "home.mnke.org."
# name = "test"
# addresses = ["10.0.123.123"]
# ttl = 300
# }