talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Compare commits

base: talexander:46df8ec65c8792b293fb29d2eebfd11b491ee080
Branches Tags
talexander:main
talexander:pixelbook
..
compare: talexander:5a08b3e0bd7191a6f2a70188c8213d4b25b7d788
Branches Tags
talexander:main
talexander:pixelbook

3 Commits
46df8ec65c ... 5a08b3e0bd

Author SHA1 Message Date
Tom Alexander
5a08b3e0bd
Update command to route private kubernetes services. 2024-10-06 21:34:12 -04:00
Tom Alexander
acf4951047
Update custom ports location. 2024-10-06 17:32:07 -04:00
Tom Alexander
9413f5dce8
Optimize Go programs and add IPv6 to mrmanager. 2024-10-06 17:32:06 -04:00
2 changed files with 9 additions and 1 deletions
Show Stats Expand all files Collapse all files

3
ansible/roles/firewall/files/mrmanager_pf.conf
View File

@ -33,7 +33,7 @@ scrub in on $ext_if all fragment reassemble
# redirections
nat on $ext_if inet from ! ($ext_if) to ! ($ext_if) -> ($ext_if)
rdr pass proto {tcp, udp} from any to 10.215.1.1 port 53 tag REDIREXTERNAL -> 1.1.1.1 port 53
rdr pass on jail_nat proto {tcp, udp} from any to 10.215.1.1 port 53 tag REDIREXTERNAL -> 1.1.1.1 port 53
rdr pass on $ext_if proto {tcp, udp} to ($ext_if) port 6443 -> 10.215.1.204 port 6443
rdr pass on jail_nat proto {tcp, udp} to ($ext_if) port 6443 tag REDIRINTERNAL -> 10.215.1.204 port 6443
@ -63,6 +63,7 @@ pass quick on $allow
# Single interface kubernetes cluster is working with the following run on mrmanager:
# doas route add -host 74.80.180.139 -interface jail_nat
# doas route add -net 10.129.0.0/16 -interface jail_nat
# doas sysctl net.link.ether.inet.proxyall=1
# Plus this in pf.conf:
# pass quick from any to 74.80.180.139

7
ansible/roles/poudriere/files/poudriere.d/14broadwell-default-computer-make.conf
View File

@ -1,5 +1,12 @@
CPUTYPE?=broadwell
# CPU optimizations for go
.if ${.CURDIR:M*/lang/go*}
OPTIONS_SET+=V2
OPTIONS_SET+=V3
.endif
# Disable static for subversion because /usr/local/lib/libutf8proc.a not found despite utf8proc being installed
#
# Disable static for netpbm because "ld: error: undefined symbol: libdeflate_free_compressor" which is "referenced by tif_zip.o:(ZIPVSetField) in archive /usr/local/lib/libtiff.a"