nixos/hosts.nix

rec {
  vlans = {
    srv = {id = 2;};
    srv-nat = {id = 3;};
    san = {id = 4;};
    adm = {id = 10;};
    adh = {id = 12;};
    adm-adh = {id = 13;};
    vr = {id = 27;};
    aurore = {id = 28;};
    imprimante = {id = 2756;};
    vlan-mlag = {id = 4094;};
  };

  reseaux = {
    aurore = {
      vlans = with vlans; [
        aurore
      ];
      switch = {
        carapuce = 19;
      };
    };
    # vr = {
    #  vlans = with vlans; [
    #    vr
    #  ];
    #  switch = {
    #    arceus = 21;
    #  };
    # };
    ens = {
      vlans = with vlans; [
        imprimante
      ];
      switch = {
        carapuce = 17;
      };
    };
  };
  
  physiques ={ 
    thot = {
      id = 14;
      vlans = with vlans; [
        adm
      ];
      serveur_type = ["backup"];
      description = ''
        Serveur de backup du Crans, actuellement en SQ39
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    ft = {
      is_debian = true;
      id = 15;
      vlans = with vlans; [
        adm
      ];
      serveur_type = ["backup"];
      description = ''
        Serveur de backup du Crans, actuellement en SQ39
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
      switch = {
        carapuce = 13;
        arceus = 13;
        ilo = {
          carapuce = 25; # TODO
        };
      };
    };    

    tealc = {
      is_debian = true;
      id = 1;
      vlans = with vlans; [
        adm
        san
      ];
      serveur_type = ["san"];
      description = ''
        Stockage adm
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
      switch = {
        carapuce = 10;
        arceus = 10;
        ilo = {
          carapuce = 10; # TODO
        };
      };
    };    
    cameron = {
      is_debian = true;
      id = 2;
      vlans = with vlans; [
        adm
        san
      ];
      serveur_type = ["san"];
      description = ''
        Stockage adh
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    # cephirot = {
    #   id = 3;
    #   vlans = with vlans; [
    #     adm
    #     san
    #   ];
    #   serveur_type = ["san"];
    #   description = ''
    #     Un serveur avec peut etre un jour ceph
    #   '';
    #   public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    # };    
    
    arceus = {
      is_debian = true;
      id = 7;
      vlans = with vlans; [
        adm
        san
      ];
      serveur_type = ["switch"];
      description = ''
        Switch principal
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    carapuce = {
      is_debian = true;
      id = 8;
      vlans = with vlans; [
        adm
        san
      ];
      serveur_type = ["switch"];
      description = ''
        Switch principal
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    
    sam = {
      is_debian = true;
      id = 11;
      vlans = with vlans; [
        adm
        san
        srv-nat
      ];
      serveur_type = ["pve"];
      description = ''
        PVE adm
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
      switch = {
        carapuce = 1;
        arceus = 1;
        ilo = {
          carapuce = 25; # TODO
        };
      };
    };    
    daniel = {
      is_debian = true;
      id = 12;
      vlans = with vlans; [
        adm
        san
        srv-nat
      ];
      serveur_type = ["pve"];
      description = ''
        PVE adm
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
      switch = {
        carapuce = 3;
        arceus = 3;
        ilo = {
          carapuce = 25; # TODO
        };
      };
    };    
    jack = {
      is_debian = true;
      id = 13;
      vlans = with vlans; [
        adm
        san
        srv-nat
      ];
      serveur_type = ["pve"];
      description = ''
        PVE adm
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
      switch = {
        carapuce = 5;
        arceus = 5;
        ilo = {
          carapuce = 25; # TODO
        };
      };
    };    

    odlyd = {
      is_debian = true;
      id = 16;
      vlans = with vlans; [
        adh
        adm
      ];
      serveur_type = ["pve"];
      description = ''
        PVE adh, fait actuellement le mort
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    stitch = {
      is_debian = true;
      id = 17;
      vlans = with vlans; [
        adh
        adm
      ];
      serveur_type = ["pve"];
      description = ''
        PVE adh
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    gulp = with vlans; {
      is_debian = true;
      id = 18;
      vlans = [
        adh
        adm
      ];
      serveur_type = ["pve"];
      description = ''
        PVE adh
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    
    zamok = with vlans; {
      is_debian = true;
      id = 31;
      vlans = [
        adh
        adm
        san
      ];
      serveur_type = ["pve"];
      description = ''
        Serveur de calcul adhérent
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
  };

  vms = {
    romanesco = {
      name = "romanesco";
      is_debian = true;
      id = 145;
      vlans = with vlans; [
        adm
        (adh "185.230.78.252")
        (srv "185.230.79.59")
      ];
      description = ''
        DNS récursif
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    neo = with vlans; {
      name = "neo";
      id = 145;
      vlans = [
        adm
        # pas besoin de spécifier l'ipv6 car elle est construite depuis l'id
        (srv "180.230.79.5")
      ];
      description = ''
        Matrix du crans, heberge également le bridge IRC <-> Matrix
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    nextcloud = {
      id = 146;
      vlans = with vlans; [
        adm
        san
        srv-nat
      ];
      description = ''
        NextCloud du Crans
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    apprentix = {
      id = 150;
      vlans = with vlans; [
        adm
      ];
      description = ''
        VM NixOs apprentie
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    jitsi = {
      id = 163;
      vlans = with vlans; [
        adm
        (srv "185.230.79.15")
      ];
      description = ''
        Jitsi du crans
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    livre = {
      id = 140;
      vlans = with vlans; [
        adm
        srv-nat
      ];
      description = ''
        Stirling PDF
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    periodique = {
      id = 118;
      vlans = with vlans; [
        adm
        srv-nat
      ];
      description = ''
        Client matrix web (element)
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    redite = {
      id = 139;
      vlans = with vlans; [
        adm
        srv-nat
      ];
      description = ''
        Redite
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    reverseproxy = with vlans; {
      id = 151;
      vlans = [
        adm
        srv-nat
        (srv "185.230.79.42")
      ];
      description = ''
        NextCloud du Crans
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    two = {
      id = 135;
      vlans = with vlans; [
        adm
        srv-nat
      ];
      description = ''
        Une vm de test
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
    vaultwarden = {
      id = 159;
      vlans = with vlans; [
        adm
        srv-nat
      ];
      description = ''
        Vaultwarden
      '';
      public-ssh = "ssh-rsa TODOTODOTODOTODOTODOTODOTODO";
    };    
  };
}