snix/ops/dns/main.tf
Ilan Joselevich 5551d0ea5e feat(ops): Deploy harmonia on cache.snix.dev
Deploys Harmonia on build01, proxied through public01.
We cannot serve from build01 directly because it only supports IPv6.

Closes: https://git.snix.dev/snix/snix/issues/66
Change-Id: Iff3c16366d60c0fbfd1315a18c27fcd636a0261a
Reviewed-on: https://cl.snix.dev/c/snix/+/30274
Reviewed-by: Florian Klink <flokli@flokli.de>
Tested-by: besadii
Autosubmit: Ilan Joselevich <personal@ilanjoselevich.com>
Reviewed-by: Ilan Joselevich <personal@ilanjoselevich.com>
2025-03-31 12:39:21 +00:00

83 lines
1.3 KiB
HCL

# Configure snix DNS resources.
terraform {
required_providers {
digitalocean = {
source = "digitalocean/digitalocean"
}
}
backend "s3" {
endpoints = {
s3 = "https://s3.dualstack.eu-central-1.amazonaws.com"
}
bucket = "snix-tfstate"
key = "terraform/snix-dns"
region = "eu-central-1"
skip_credentials_validation = true
skip_metadata_api_check = true
skip_requesting_account_id = true
}
}
variable "sni_proxy_ipv4" {
type = string
default = "163.172.69.160"
}
variable "public01_ipv6" {
type = string
default = "2a01:4f8:c013:3e62::1"
}
variable "public01_ipv4" {
type = string
default = "49.13.70.233"
}
variable "gerrit01_ipv6" {
type = string
default = "2a01:4f8:c17:6188::1"
}
variable "gerrit01_ipv4" {
type = string
default = "138.199.144.184"
}
variable "build01_ipv6" {
type = string
default = "2001:bc8:38ee:100:7000::20"
}
variable "meta01_ipv4" {
type = string
default = "142.132.184.228"
}
variable "meta01_ipv6" {
type = string
default = "2a01:4f8:c013:4a58::1"
}
locals {
public01_services = [
"auth",
"bolt",
"cache",
"git",
"status"
]
gerrit01_services = [
"cl"
]
meta01_services = [
"mimir",
"loki",
"tempo"
]
}