Merge pull request #57 from tiiuae/PR-ficolodns

Use ci-server as DNS instead of /etc/hosts entries
tiiuae · Jan 18, 2024 · cd4fac0 · cd4fac0
2 parents 68a901f + b9b1e37
commit cd4fac0
Show file tree

Hide file tree

Showing 7 changed files with 22 additions and 26 deletions.
diff --git a/hosts/binarycache/configuration.nix b/hosts/binarycache/configuration.nix
@@ -1,6 +1,6 @@
-# SPDX-FileCopyrightText: 2023 Technology Innovation Institute (TII)
-#
+# SPDX-FileCopyrightText: 2023-2024 Technology Innovation Institute (TII)
 # SPDX-License-Identifier: Apache-2.0
+#
 {
   self,
   inputs,
@@ -20,7 +20,7 @@
     (with self.nixosModules; [
       common
       qemu-common
-      ficolo-hosts
+      ficolo-common
       service-openssh
       service-binary-cache
       service-nginx
@@ -46,7 +46,6 @@
 
   networking = {
     hostName = "binarycache";
-    nameservers = ["1.1.1.1" "8.8.8.8"];
   };
 
   security.acme = {

diff --git a/hosts/default.nix b/hosts/default.nix
@@ -1,6 +1,6 @@
-# SPDX-FileCopyrightText: 2023 Technology Innovation Institute (TII)
-#
+# SPDX-FileCopyrightText: 2023-2024 Technology Innovation Institute (TII)
 # SPDX-License-Identifier: Apache-2.0
+#
 {
   self,
   inputs,
@@ -11,7 +11,7 @@
     # shared modules
     azure-common = import ./azure-common.nix;
     qemu-common = import ./qemu-common.nix;
-    ficolo-hosts = import ./ficolo-hosts.nix;
+    ficolo-common = import ./ficolo-common.nix;
     common = import ./common.nix;
     generic-disk-config = import ./generic-disk-config.nix;
   };

diff --git a/hosts/ficolo-common.nix b/hosts/ficolo-common.nix
@@ -0,0 +1,7 @@
+# SPDX-FileCopyrightText: 2024 Technology Innovation Institute (TII)
+# SPDX-License-Identifier: Apache-2.0
+#
+{
+  # Use ci-server as primary DNS and pfsense as secondary
+  networking.nameservers = ["172.18.20.100" "172.18.20.1"];
+}
diff --git a/hosts/ficolo-hosts.nix b/hosts/ficolo-hosts.nix
diff --git a/hosts/ficolobuild/configuration.nix b/hosts/ficolobuild/configuration.nix
@@ -1,6 +1,6 @@
-# SPDX-FileCopyrightText: 2023 Technology Innovation Institute (TII)
-#
+# SPDX-FileCopyrightText: 2023-2024 Technology Innovation Institute (TII)
 # SPDX-License-Identifier: Apache-2.0
+#
 {
   self,
   config,
@@ -14,9 +14,9 @@
     inputs.disko.nixosModules.disko
     (with self.nixosModules; [
       common
+      ficolo-common
       service-openssh
       service-node-exporter
-      ficolo-hosts
       user-cazfi
       user-hrosten
       user-jrautiola

diff --git a/hosts/monitoring/configuration.nix b/hosts/monitoring/configuration.nix
@@ -1,6 +1,6 @@
-# SPDX-FileCopyrightText: 2023 Technology Innovation Institute (TII)
-#
+# SPDX-FileCopyrightText: 2023-2024 Technology Innovation Institute (TII)
 # SPDX-License-Identifier: Apache-2.0
+#
 {
   pkgs,
   self,
@@ -25,7 +25,7 @@ in {
     (with self.nixosModules; [
       common
       qemu-common
-      ficolo-hosts
+      ficolo-common
       service-openssh
       service-nginx
       service-node-exporter
@@ -39,7 +39,6 @@ in {
 
   networking = {
     hostName = "monitoring";
-    nameservers = ["1.1.1.1" "8.8.8.8"];
     firewall = {
       allowedTCPPorts = [config.services.prometheus.port config.services.grafana.settings.server.http_port];
       allowedUDPPorts = [config.services.prometheus.port config.services.grafana.settings.server.http_port];

diff --git a/hosts/prbuilder/configuration.nix b/hosts/prbuilder/configuration.nix
@@ -1,6 +1,6 @@
-# SPDX-FileCopyrightText: 2023 Technology Innovation Institute (TII)
-#
+# SPDX-FileCopyrightText: 2023-2024 Technology Innovation Institute (TII)
 # SPDX-License-Identifier: Apache-2.0
+#
 {
   self,
   inputs,
@@ -16,6 +16,7 @@
     (with self.nixosModules; [
       common
       qemu-common
+      ficolo-common
       service-openssh
       service-node-exporter
       user-jrautiola
@@ -46,6 +47,5 @@
 
   networking = {
     hostName = "prbuilder";
-    nameservers = ["1.1.1.1" "8.8.8.8"];
   };
 }