From 130f6be7422e074c3853a4e7cab73a938fb5fe7b Mon Sep 17 00:00:00 2001 From: arf20 Date: Mon, 18 Dec 2023 09:04:56 +0100 Subject: Comm VM --- arfnet2.md | 36 ++++++++++++++++++++++++++++++------ 1 file changed, 30 insertions(+), 6 deletions(-) (limited to 'arfnet2.md') diff --git a/arfnet2.md b/arfnet2.md index aa04767..3a37adf 100644 --- a/arfnet2.md +++ b/arfnet2.md @@ -10,6 +10,7 @@ Stage 1, very safe ## Networks - DMZ untagged 192.168.4.0/24: Services and management - LAN VLAN 5 192.168.5.0/24: Clients + - VPN LAN 10.5.0.0/24: Wireguard clients ## Hosts - server (...) @@ -31,28 +32,51 @@ All VMs must run the wazuh agent - (routing) - SSH - DHCP - - DNS + - unbound DNS - OpenVPN + - WireGuard - IPsec -### NAS .9 +### NAS .6 RAID attached here (with the grey stuff) (local only) - SSH - NFS - - Samba - - DLNA + - Samba SMB + - MiniDLNA - qBittorrent-nox +### web .9 + - SSH + - nginx (static only site, isolated from NAS) + ### wazuh .10 - SSH - wazuh -### web .6 +### comm .11 - SSH - - nginx (static only site, isolated from NAS) + - postfix/dovecot mail (not) + - IRC + - XMPP + - matrix instance + - asterisk VoIP SIP ## Port forwards - SSH -> somewhere possibly not a machine with services just to be sure? - OpenVPN -> opnsense - HTTP/S -> web +## Name and Number Assignation Table +| A | Host | Name | +|---|------|------| +| 1 | gateway | router.lan | +| 2 | switch | switch.lan | +| 3 | wap | wap.lan | +| 4 | proxmox | proxmox.lan | +| 5 | R720 iDRAC | idrac.lan | +| 6 | nas | nas.lan | +| 7 | printer | printer.lan | +| 8 | desktop | desktop.lan | +| 9 | webserver | web.lan | +| 10 | wazuh | wazuh.lan | +| 11 | comm | comm.lan | \ No newline at end of file -- cgit v1.2.3