From bbad09e2b15eeca86f83a9d2a97449baf71e326f Mon Sep 17 00:00:00 2001
From: Elizabeth Hunt <elizabeth.hunt@simponic.xyz>
Date: Wed, 1 May 2024 01:33:35 -0700
Subject: init

---
 docs/INFRA_PLAYBOOK.md | 9 +++++++++
 1 file changed, 9 insertions(+)
 create mode 100644 docs/INFRA_PLAYBOOK.md

(limited to 'docs/INFRA_PLAYBOOK.md')

diff --git a/docs/INFRA_PLAYBOOK.md b/docs/INFRA_PLAYBOOK.md
new file mode 100644
index 0000000..043d4dc
--- /dev/null
+++ b/docs/INFRA_PLAYBOOK.md
@@ -0,0 +1,9 @@
+Registering a new internal machine <hostname>:
+
+1. Register <hostname>.pub.infra.hatecomputers.club A record -> public ipv4
+2. Register <hostname>.int.infra.hatecomputers.club A record -> internal ipv4 in 10.155.0.0/16 subnet
+3. Put it on the internal VPN. i.e. add <hostname>.pub... in the wireguard-mesh after allowing ssh to root and everything
+4. Run the wireguard-mesh playbook
+5. Update the inventory record in wireguard-mesh to <hostname>.int...
+6. Now run the deploy-common playbook to allow ssh only internally, debugging as necessary if needed ; it should just work :))
+7. Add your new roles!
-- 
cgit v1.2.3-70-g09d2