This commit is contained in:
Daniel Flanagan 2022-02-04 10:45:06 -06:00
parent 73107f3d41
commit 7ec4eebc65
4 changed files with 17 additions and 15 deletions

View file

@ -9,20 +9,21 @@ dhcp-range=tag:lan0,::1,constructor:lan0,ra-names,12h
local=/h.lyte.dev/
dhcp-host=dragon,10.0.0.10,12h
dhcp-host=faceless,10.0.0.25,12h
dhcp-host=faceless,10.0.0.210,12h
dhcp-host=kubeworker3,10.0.0.244,2m
# dhcp-host=kubeworker3,d0:50:99:26:89:86,ourcraft,10.0.0.244,2m
address=/dragon.h.lyte.dev/10.0.0.10
address=/git.lyte.dev/10.0.0.25
address=/h.lyte.dev/10.0.0.25
address=/a.lyte.dev/10.0.0.25
address=/.h.lyte.dev/10.0.0.25
address=/#.h.lyte.dev/10.0.0.25
address=/bw.lyte.dev/10.0.0.25
address=/files.lyte.dev/10.0.0.25
address=/grafana.lyte.dev/10.0.0.25
address=/ourcraft.lyte.dev/10.0.0.244
# address=/dragon.h.lyte.dev/10.0.0.10
# address=/git.lyte.dev/10.0.0.210
# address=/h.lyte.dev/10.0.0.210
# address=/a.lyte.dev/10.0.0.210
# address=/.h.lyte.dev/10.0.0.210
# address=/#.h.lyte.dev/10.0.0.210
# address=/bw.lyte.dev/10.0.0.210
# address=/files.lyte.dev/10.0.0.210
# address=/grafana.h.lyte.dev/10.0.0.210
# address=/ourcraft.lyte.dev/10.0.0.244
server=8.8.8.8
server=8.8.4.4

View file

@ -36,13 +36,13 @@ table ip nat {
chain prerouting {
type nat hook prerouting priority -100; policy accept;
# ip daddr 10.0.0.1 tcp dport { 80, 443 } dnat to 10.0.0.25
# ip daddr 10.0.0.1 tcp dport { 80, 443 } dnat to 10.0.0.210
# faceless
# allow HTTP, HTTPS, gitea's SSH, and host ssh to faceless
iifname $WAN tcp dport { 443, 80, 2222, 2200 } dnat to 10.0.0.25
iifname $WAN tcp dport { 443, 80, 2222, 2200 } dnat to 10.0.0.210
# allow mosh
iifname $WAN udp dport 60010-60019 dnat to 10.0.0.25
iifname $WAN udp dport 60010-60019 dnat to 10.0.0.210
# allow host ssh
iifname $WAN tcp dport { 2221 } dnat to 10.0.0.10

View file

@ -1,5 +1,4 @@
# Router
Yeah yeah I need to document this better.
# Setup
@ -16,6 +15,8 @@ With a fresh Arch Linux system:
- `dnsmasq`
- `dhcpcd`
- Run `mkinitcpio -p linux`
- Add any needed hosts to `/etc/hosts`
- May be use dnsmasq's `addn-hosts` directive and copy a file from this repo
- Reboot
# TODO: