talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Add bastion and certificate jails.

Browse Source
This commit is contained in:
Tom Alexander
2024-07-01 22:01:07 -04:00
parent 566b7dfd0b
commit 9e107d4a75
38 changed files with 523 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ansible/roles/jail/files/fstab_bastion Normal file
View File

@@ -0,0 +1,4 @@
tmpfs /jail/bastion/tmp tmpfs rw,mode=777 0 0
tmpfs /jail/bastion/var/run tmpfs rw,mode=755 0 0
/jail/certificate/usr/local/etc/letsencrypt/archive/stuff.fizz.buzz /jail/bastion/stuff.fizz.buzz nullfs ro,noexec 0 0

15
ansible/roles/jail/files/jails/bastion.conf Normal file
View File

@@ -0,0 +1,15 @@
bastion {
path = "/jail/${name}";
vnet;
exec.prestart += "/usr/local/bin/jail_netgraph_bridge start jail_nat jail${name} 10.215.1.1/24";
exec.poststop += "/usr/local/bin/jail_netgraph_bridge stop jail_nat jail${name}";
vnet.interface += "jail${name}";
devfs_ruleset = 14;
mount.devfs;
mount.fstab = "/etc/fstab.${name}";
exec.start += "/bin/sh /etc/rc";
exec.stop = "/bin/sh /etc/rc.shutdown jail";
exec.consolelog = "/var/log/jail_${name}_console.log";
}

15
ansible/roles/jail/files/jails/certificate.conf Normal file
View File

@@ -0,0 +1,15 @@
certificate {
path = "/jail/${name}";
vnet;
exec.prestart += "/usr/local/bin/jail_netgraph_bridge start jail_nat jail${name} 10.215.1.1/24";
exec.poststop += "/usr/local/bin/jail_netgraph_bridge stop jail_nat jail${name}";
vnet.interface += "jail${name}";
devfs_ruleset = 14;
mount.devfs;
mount.fstab = "/etc/fstab.${name}";
exec.start += "/bin/sh /etc/rc";
exec.stop = "/bin/sh /etc/rc.shutdown jail";
exec.consolelog = "/var/log/jail_${name}_console.log";
}