blob: dd5205ffe48d5683c574e83e00e53d2cbba82a7e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
# TODO
- Wildcard ssl certificate with dns challenge
https://github.com/BackBenchDevs/certbot-dns-hostinger
- Create a routing peer as a docker container with netbird client
- Make traefik dashboard available
Dockerize every service
To make service privately available
- make the container accessible via netbird Network Route
- add routing rules on docker host
- manage ACL in netbird to grant access to selected machines/users
To make service publicly available
- if it's already on server, than add traefik router to route https connections (no need for netbird encryption or forwarding)
- if not on server or want additional auth, than use a netbird proxy
# Subdomain diagram:
p2net.cloud - public, main suffix
bird.p2net.cloud - public, netbird dashboard
*.bird.p2net.cloud - wg private, netbird peers
*.mesh.p2net.cloud - wg private, custom netbird dns zone, distributed to peers
*.proxy.p2net.cloud - public, netbird reverse proxy, custom domains, automatic ssl certs
*.home.p2net.cloud - private local dns, resolve to ips in home network
# Subnet masks:
- 100.80.0.0/16 - Kyivstar ISP CGNat (last ip was 100.80.17.78)
- 100.66.0.0/16 - Netbird peers
- 172.30.0.0/24 - Docker network on the server
- 192.168.50.0/8 - Home network
|
