ProxyNode
- is resolved by DNS
- redirects traffic via traefik to VPN-Addresses
- can run some monitoring (is mostly outside my network)
DNS
- *.itwoc.de
- *vpn.itwoc.de
- *watt.itwoc.de
Traefik
- SSL Passthrough on Proxy to server node
- Server Node terminates SSL via DNS01
Headscale
- Intranet
- runs on
ProxyNode - ACLs configured to allow these routes:
management -> server managment <-> gitea server <- gitea !serverNodeA <-> serverNodeB
Gitea
- get ssl certificate via Traefik
- provide docker registry
Management-Node
- runs komodo
- potentially runs things like ansible to configure new server nodes
ServerNode
managed my Komodo
Komodo
- config managed via git (codeberg/github/gitea)
- connects to gitea