diff options
Diffstat (limited to 'arfnet2.md')
| -rw-r--r-- | arfnet2.md | 35 |
1 files changed, 27 insertions, 8 deletions
@@ -4,7 +4,7 @@ After the disastrous ISP [schism](http://arf20.com/explanation.txt) ## Masterplan -### Stage 1: very safe +### Phase 1: very safe - Close all ports - Nuke (or stop) all old VMs (exclude OPNSense) @@ -12,14 +12,14 @@ After the disastrous ISP [schism](http://arf20.com/explanation.txt) - Make new basic VMs (cloning deb12 template) - Open basic ports -### Stage 2: new services +### Phase 2: new services - IONOS VPS for mail - Some new very safe services - HE IPv6 tunnel - Own authoritative nameservers for domain zone -### \*Stage 3: finally +### \*Phase 3: finally - Another VPS in unknown provider for - Tor @@ -27,25 +27,25 @@ After the disastrous ISP [schism](http://arf20.com/explanation.txt) - PHP on main site with more web services from scratch, hopefully secure - More new services -### Stage 4: DN42 +### Phase 4: DN42 - Make DN42 router VM with bird and wg - Peer with people - Bring up BGP sessions - Services -### Stage 5: Telephony +### Phase 5: Telephony - Asterisk - IP phones and ATAs - Trunks; SDF, Tandmx, uwutel, PSTN -### \*Stage 6: Site B (piso) +### \*Phase 6: Site B (piso) - Firewall and switch - Site to Site wireguard - Establish telephony -### \*Stage 7: CA, PKI, LDAP, IAM and SSO +### \*Phase 7: CA, PKI, LDAP, IAM and SSO Objectives @@ -74,11 +74,27 @@ Steps - [ ] Put SSO login on services where possible - [ ] Kerberos and Keycloak +### \*Phase 8: 10 gigabit + +Acquire + + - [X] 10G Firewall (Sophos XG 330) + - [ ] 10G Switch (HP ProCurve 2910al-48G + 2x J4009A SFP+ modules) + - [ ] 10G NICs (Intel X520-DA2) + - [ ] 10GBASE-SR transceivers (Cisco SFP-10G-SR) + - [ ] OM3 fiber + +Steps + + - [ ] Replace OPNsense with VyOS in firewall + - [ ] Replace DELL switch with 10G switch + - [ ] Connect firewall to switch and server to switch with 10G + ## Domain arf20.com -Registrar: namecheap +Registrar: porkbun ### Name sever glue records at registrar @@ -404,6 +420,7 @@ RAID attached here (with the grey stuff) (local only) | raip.arf20.com | / = /var/www/raip.arf20.com/html<br>/status = http://comm.lan:8080 | | | pki.arf20.com | / = /var/www/pki.arf20.com/html<br>/download/ = http://ca.lan:80 | | | testcert.arf20.com | / = /var/www/testcert.arf20.com/html/ | | +| office.arf20.com | onlyoffice | | | | | | | status.yero.dev | http://yerovps.lan:3001 | | | panaland.arf20.com | /var/www/panaland.arf20.com/html/ | | @@ -707,6 +724,8 @@ Site-B:PiSoNet | raip.arf20.com | CNAME | web.arf20.com | | dmr.arf20.com | CNAME | comm.arf20.com | | pki.arf20.com | CNAME | web.arf20.com | +| testcert.arf20.com | CNAME | web.arf20.com | +| office.arf20.com | CNAME | web.arf20.com | | | status.arf20.com | CNAME | mail.arf20.com | | lists.arf20.com | CNAME | mail.arf20.com | |