ai-workspace-infra/iac_modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,169 Commits 3 Branches 2 Tags 21 MiB
4eab3289e3
Commit Graph

1169 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
shenlan
4eab3289e3
Merge pull request #69 from svc-design/vpn-overlay-xray 
feat(xray-site): add vpn-xray-client playbook and update site config …
 2025-04-22 13:55:39 +08:00
Haitao Pan
66c5ed2e66 feat(xray-site): add vpn-xray-client playbook and update site config and template 2025-04-22 13:54:39 +08:00
shenlan
18db08ed93
Merge pull request #68 from svc-design/vpn-overlay-wireguard 
refactor(wireguard-hub): restructure role path and update config files
 2025-04-18 15:58:22 +08:00
Haitao Pan
ee5ae8759b refactor(wireguard-hub): restructure role path and update config files 
- Moved WireGuard Hub role into playbooks directory structure
- Updated vpn-wireguard-hub.yaml to match new role path
- Modified vpn-keys.yaml and vpn-overlay.yaml
 2025-04-18 15:56:21 +08:00
Haitao Pan
5aefe67164 feat(xray-tproxy): add playbook vpn-xray-tproxy 2025-04-18 13:17:12 +08:00
shenlan
aa948d62d1
Merge pull request #67 from svc-design/vpn-overlay-xray 
Vpn overlay xray
 2025-04-18 11:25:39 +08:00
Haitao Pan
5595e809ca refactor(xray-tproxy): split TProxy role from hub 2025-04-18 11:21:30 +08:00
Haitao Pan
d723db20ad refactor(xray-site) 2025-04-18 11:20:28 +08:00
Haitao Pan
5cca667726 refactor(xray-hub) 2025-04-18 11:19:41 +08:00
shenlan
4210cc663c
Merge pull request #66 from svc-design/vpn-overlay-xray 
feat(xray-hub): add tproxy and systemd templates; update config rende…
 2025-04-14 21:51:41 +08:00
Haitao Pan
c5514f91be feat(xray-hub): add tproxy and systemd templates; update config rendering 
- Add systemd templates: xray.service.j2, xray-tproxy.service.j2
- Update config.json.j2 and tproxy-config.json.j2 for per-node xray vars
- Modify main.yml to support template rendering with become
- Extend vpn-overlay.yaml with relay_address, relay_port and remote_domain
 2025-04-14 21:50:53 +08:00
Haitao Pan
381e4ea47d feat(common): add optional Privoxy SOCKS5-to-HTTP setup via include_tasks 2025-04-13 15:58:37 +08:00
shenlan
56c17b46d7
Merge pull request #65 from svc-design/vpn-overlay 
feat(vpn-overlay): add WireGuard hub role and config updates
 2025-04-12 19:41:43 +08:00
shenlan
8425229ecf
Merge branch 'main' into vpn-overlay 2025-04-12 19:41:33 +08:00
Haitao Pan
f8eb593d48 feat(xray): add hub role with dynamic config and playbook integration 
- Add playbook: vpn-xray-hub.yaml
- Add Ansible role: vpn-overlay xray hub
- Update vpn-overlay.yaml to include per-node xray config (uuid, domain, cert paths)
 2025-04-12 19:37:14 +08:00
Haitao Pan
7f21f2802b feat(vpn-overlay): add WireGuard hub role and config updates 
- Added new role: wireguard/hub with tasks, defaults, and template
- Added vpn-wireguard-hub.yaml playbook
- Updated vpn-overlay.yaml with hub definitions
 2025-04-12 18:57:33 +08:00
shenlan
c4d941a9e3
Merge pull request #64 from svc-design/svc-design-patch-3 
Update set-registry.sh
 2025-04-08 13:40:55 +08:00
shenlan
130785459a
Update set-registry.sh 2025-04-08 11:52:07 +08:00
shenlan
507f10ced7
Merge pull request #63 from svc-design/svc-design-patch-2 
Update set-registry.sh
 2025-04-08 11:50:47 +08:00
shenlan
090f8d4bb5
Update set-registry.sh 2025-04-08 11:41:36 +08:00
shenlan
d85ebb845a
Merge pull request #62 from svc-design/svc-design-patch-1 
Update set-registry.sh
 2025-04-08 11:19:42 +08:00
shenlan
217d94eb4b
Update set-registry.sh 2025-04-08 11:18:01 +08:00
shenlan
ea8629dc84
Merge pull request #61 from svc-design/k3s-cluster 
refactor(k3s-cluster): use synchronize to run scripts
 2025-04-07 23:42:19 +08:00
Haitao Pan
429c2ace22 refactor(k3s-cluster): 
- move setup scripts to user tmp dir for safer execution
 2025-04-07 23:41:11 +08:00
Haitao Pan
8578142170 refactor(k3s-cluster): use synchronize to run scripts 2025-04-07 22:45:05 +08:00
shenlan
4aa7c8a378
Merge pull request #60 from svc-design/k3s-cluster 
Removed sub tasks: run secure_ssh.sh script
 2025-04-07 22:35:50 +08:00
Haitao Pan
548465ec1f Removed sub tasks: run secure_ssh.sh script 2025-04-07 22:34:55 +08:00
shenlan
1bf1fdf435
Merge pull request #59 from svc-design/k3s-cluster 
Update roles/vhosts/k3s-cluster
 2025-04-07 22:20:38 +08:00
Haitao Pan
5b1401e439 removed workflows: deplay-app-with-argocd.yaml 2025-04-07 22:20:14 +08:00
Haitao Pan
b758624ce4 Update roles/vhosts/k3s-cluster 2025-04-07 22:16:34 +08:00
shenlan
d0fc2cdae8
Merge pull request #58 from svc-design/vpn-overlay 
Vpn overlay
 2025-04-07 22:02:42 +08:00
Haitao Pan
c8988c397a refactor: replace disable-systemd-resolved with setup-systemd-resolved task 2025-04-07 22:01:43 +08:00
shenlan
384aab30d2
Update app-pipeline-renew-node-ssl-certs.yml 2025-04-07 21:32:51 +08:00
shenlan
325a9ce809
Merge pull request #57 from svc-design/k3s-cluster 
feat(k3s): add ansible role and playbook for K3s cluster setup
 2025-04-07 21:29:39 +08:00
Haitao Pan
43a4758a93 feat(k3s): add ansible role and playbook for K3s cluster setup 2025-04-07 21:26:06 +08:00
shenlan
d21d302639
Merge pull request #56 from svc-design/vpn-overlay 
feat: split and simplify systemd-resolved DNS configuration task
 2025-04-07 21:14:38 +08:00
Haitao Pan
d8ff3a79e2 feat: split and simplify systemd-resolved DNS configuration task 
- Disabled systemd-resolved and add static DNS setup
 2025-04-07 21:13:10 +08:00
shenlan
f4d92b0508
Merge pull request #54 from svc-design/vpn-overlay 
chore(config): update firewall and VPN overlay settings
 2025-04-07 20:11:40 +08:00
Haitao Pan
72e99501a1 chore(config): update firewall and VPN overlay settings 
- allow UDP 51820 for WireGuard
- remove 10.253.0.0/16 from allowed IPs in WireGuard site configs
 2025-04-07 20:10:49 +08:00
shenlan
1ca81f7ae7
Merge pull request #53 from svc-design/vpn-overlay 
Vpn overlay
 2025-04-07 15:41:37 +08:00
shenlan
d3c0ca69ec
Merge branch 'main' into vpn-overlay 2025-04-07 15:41:26 +08:00
Haitao Pan
954c3b26d9 chore(pulumi): add Pulumi.yaml for Modern Container App IaaS deployment 2025-04-07 15:40:02 +08:00
Haitao Pan
4d349ca572 feat(config): update master-1,slave-1 VPN Overlay IP 2025-04-07 15:31:53 +08:00
shenlan
7c54c045d4
Merge pull request #52 from svc-design/vpn-overlay 
feat(config): add WireGuard key pair config for deepflow-demo mainten…
 2025-04-07 13:35:19 +08:00
Haitao Pan
fcef8d55fd feat(config): add WireGuard key pair config for deepflow-demo maintenance 2025-04-07 13:33:45 +08:00
Haitao Pan
4afb39ccfb Update slave-1 br_ip: changed from 172.16.0.2 to 172.16.0.3 2025-04-06 19:42:41 +08:00
shenlan
aea056f04b
Merge pull request #51 from svc-design/vpn-overlay 
Vpn overlay
 2025-04-06 17:58:25 +08:00
Haitao Pan
5be8955ff5 feat: enhance WireGuard VPN Overlay deployment and DNAT support 
Changes:
- Fixed wg0.conf.j2 template variables
- Refactored wireguard/site logic to support dynamic peer/key selection
- Updated defaults, playbook entry, and install script for consistency

Tested:
✅ NodePort 443 + DNAT verified from master/slave nodes and external curl
 2025-04-06 17:50:32 +08:00
Haitao Pan
31c915eb1f feat(config): add ignore_files support to config loader 2025-04-06 13:36:28 +08:00
Haitao Pan
bd8553f20e feat(vpn-overlay): add WireGuard Site role 2025-04-06 13:29:01 +08:00