Docs/Plans: Difference between revisions

← Older edit

Docs/Plans (view source)

Revision as of 17:47, 30 October 2025

1,099 bytes added , 30 October 2025

add opnsense migration stuff

Plant

3

edits

Revision as of 15:30, 30 October 2025 (view source) D2wn (talk \| contribs) (Created page with "# 10 Gb/s backbone for internal network ## Install all Dell Daughterboards ## Program FiberStore SFP Sleds # Rearrange servers ## Mirrors/Leskinen on bottom of our space ## Maho right above ## Proxmox cluster ## Shell ## Lasagna/Ravioli on very top (OPNSense servers) # Redo Proxmox ## Change storage from local replication to either Ceph or iSCSI/NFS off Leskinen ## Figure out local firewalling of VMs for VPS idea ### New subnet? (10.10.2.0/24) # Document, document, docum...") Tag: Visual edit		Latest revision as of 17:47, 30 October 2025 (view source) Plant (talk \| contribs) (add opnsense migration stuff) Tags: Mobile edit Mobile web edit
(4 intermediate revisions by one other user not shown)
## Lasagna/Ravioli on very top (OPNSense servers) # Redo Proxmox ## Change storage from local replication to either Ceph, or iSCSI/NFS ~~off~~via Leskinen ## Figure out firewalling local ~~firewalling~~network offrom VMs for VPS idea (able to give people an ""unmanaged VM"", it should not be able to access any other VMs on the local network) ### New subnet? (10.10.2.0/24) ### Reverse-NAT via OPNSense (and mandatory DHCP) so we don't have to trust people to statically assign themselves the right public IP? # Fix Mirrors LAN/WAN IP (currently only on WAN, via DHCP) # Pterodactyl # Faceplates for servers ## Stickerbomb idea! # Consider hosting authoritative DNS resolver for linuxusers.group on our infra ## Automated domains via dhcp hostnames in opnsense # Finish OPNsense transition ## Move Wireguard off of pfSense install ### People will need to edit their configs to point at the new gateway ## Migrate config from pfSense ### DHCP scary ### We should make any firewall/NAT/etc adjustments during this process ## Have OPNsense take over as main gateway ## Blow up pfSense and replace it with OPNsense ## Set up gateway redundancy ### How will VPN work with this? # LDAP (on Leskinen?) ## Tie into iDrac/Switches ## VM/Proxmox/OPNSense/Debian servers (Leskinen, Maho, Mirrors) ## Everything but Shell (and maybe Wiki) so alums can have access # Document, document, document.