From aaae182844353b1a1d1a94bc576a95cf82cb1751 Mon Sep 17 00:00:00 2001 From: Ruben Hensen Date: Tue, 3 Nov 2026 22:09:55 +0100 Subject: [PATCH] Home IP is now 62.41.86.53 After the ISP cut the connection, it came back on a new address. node001 still tunneled everything to 62.41.86.27, so every host behind it timed out. Moves the tunnel, the ldap, s2 and ntfy2 records and the Gatus DNS plan to the new address. --- dns/domains/rubenhensen.nl.yaml | 6 +++--- gatus/README.md | 4 ++-- nix-infra-machine/nodes/node001.nix | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/dns/domains/rubenhensen.nl.yaml b/dns/domains/rubenhensen.nl.yaml index ece6b3a..ee1cf5a 100644 --- a/dns/domains/rubenhensen.nl.yaml +++ b/dns/domains/rubenhensen.nl.yaml @@ -18,7 +18,7 @@ records: - name: "ldap" expire: 300 type: A - content: "62.41.86.27" + content: "62.41.86.53" - name: "argocd" expire: 300 type: A @@ -60,7 +60,7 @@ records: - name: "s2" expire: 300 type: A - content: "62.41.86.27" + content: "62.41.86.53" # ntfy for Gatus alerts, one next to each Gatus. Same reasoning as s2. - name: "ntfy1" expire: 300 @@ -69,7 +69,7 @@ records: - name: "ntfy2" expire: 300 type: A - content: "62.41.86.27" + content: "62.41.86.53" - name: "@" expire: 300 type: MX diff --git a/gatus/README.md b/gatus/README.md index 0a0ee2d..29b92b5 100644 --- a/gatus/README.md +++ b/gatus/README.md @@ -62,7 +62,7 @@ node, both PowerDNS Authoritative. PowerDNS LUA records health-check addresses and only return the healthy ones: ``` -@ 30 IN LUA A "ifurlup('https://status.rubenhensen.nl/health', {{'46.224.26.65'}, {'62.41.86.27'}})" +@ 30 IN LUA A "ifurlup('https://status.rubenhensen.nl/health', {{'46.224.26.65'}, {'62.41.86.53'}})" ``` The double braces make two groups. PowerDNS returns the first group that has @@ -85,7 +85,7 @@ Steps: 1. Parent zone (`dns/domains/rubenhensen.nl.yaml`, synced to TransIP): add `status NS ns-hetzner.rubenhensen.nl.` and `status NS ns-home.rubenhensen.nl.`, - plus A records for `ns-hetzner` (46.224.26.65) and `ns-home` (62.41.86.27). + plus A records for `ns-hetzner` (46.224.26.65) and `ns-home` (62.41.86.53). First check that TransIP accepts NS records for a subdomain. 2. Hetzner: run PowerDNS from node001.nix with `enable-lua-records=yes` and the bind backend. Use the same zone file as home. Open 53/udp and 53/tcp. diff --git a/nix-infra-machine/nodes/node001.nix b/nix-infra-machine/nodes/node001.nix index dd29371..718bba2 100644 --- a/nix-infra-machine/nodes/node001.nix +++ b/nix-infra-machine/nodes/node001.nix @@ -2,7 +2,7 @@ let # Public IP of the home network where the k8s cluster ingress lives. # Keep in sync with dns/domains/rubenhensen.nl.yaml. - homeIP = "62.41.86.27"; + homeIP = "62.41.86.53"; # Hosts tunneled to the home k8s cluster. Each entry gets: # * an SNI map entry for TCP passthrough on :443