Document the wireguard IP plan
Graham Christensen committed
Dec 19, 2021 at 14:58 UTC
bb865cd71397803ffe5394f2fe711d3c012accfd
1 file changed
+11
-2
modules/wireguard-hosts.toml
+11
-2
@@ -1,5 +1,15 @@
1
network = 16
2
3
+# IP Plan for 10.254.x.y
4
+#
5
+# 10.254.1.x: infrastructure services (not builders)
6
+# 10.254.2.x: macOS builders
7
+# 1 - 10: x86 mac minis running NixOS with macOS in a VM
8
+# 50 - 60: x86 mac minis reserved for ofborg
9
+# 100 - 110: m1 mac minis running macOS on the hardware
10
+# 10.254.3.x: (defunct) NixOS.org hosting infrastructure
11
+# 10.254.4.x: infra team administrator machines, for connecting to the bastion
12
+
13
[hosts.bastion]
14
# wg won't retry resolution if it fails... so
15
# hard-code the IP to bastion.nixos.org so we don't lock
@@ -65,7 +75,6 @@ publicKey = "aw/8/5oEn0cZa/WnUE7E7MEukDvzUzaAUEL6PMhLFmE="
75
ip = "10.254.2.51"
76
publicKey = "RPD07xoZYB3aq9hS4pX+qnCHwSbNunK69HGdf8pRtCQ="
77
68
-
78
[hosts.mac-m1-1]
79
ip = "10.254.2.101"
80
publicKey = "r9EEig5zzGS+MlMqK1jCzXB4Rm11Q/c812i7dxGj8gQ="
@@ -93,7 +102,7 @@ publicKey = "S20ha1NoMUgR67696vi7hmSdSxK/GJM550S0uR2odlA="
102
[hosts.webserver]
103
enpdoint = "54.217.220.47"
104
ip = "10.254.3.1"
96
-port = 51_820
105
+port = 51820
106
publicKey = "/N5//y0elGZdeekUv+IzKZiZ9wcKSOHc2bHmPU8FaCM="
107
108