AQUAPOOL - Benutzerbeiträge [de]

https://wiki.goedeke.de/api.php?action=feedcontributions&feedformat=atom&user=172.16.0.0%2F16 AQUAPOOL - Benutzerbeiträge [de] 2026-09-01T10:07:02Z Benutzerbeiträge MediaWiki 1.46.0 https://wiki.goedeke.de/index.php?title=Router2&diff=311 Router2 2024-08-26T17:00:44Z

<p>172.16.12.2: /* Netzwerkkonfiguration in /config/config.boot */</p> <hr /> <div><br /> == Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> <pre>Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU: 1<br /> RAM: 1024<br /> Virtual Disk: 10.00 GiB<br /> Source path: /storage/vms/router2.qcow2<br /> </pre><br /> <br /> == Betriebssystem ==<br /> <br /> <pre>mg@router.aquapool.de:~$ show version<br /> Version: VyOS 1.4-rolling-202303030317<br /> Release train: current<br /> <br /> Built by: autobuild@vyos.net<br /> Built on: Fri 03 Mar 2023 03:17 UTC<br /> Build UUID: 0ce89af1-6db9-4940-9ee6-6be3f1d7a079<br /> Build commit ID: afdaac1012d7b1<br /> <br /> Architecture: x86_64<br /> Boot via: installed image<br /> System type: guest<br /> <br /> Hardware vendor: QEMU<br /> Hardware model: Standard PC (Q35 + ICH9, 2009)<br /> Hardware S/N: <br /> Hardware UUID: f7fddb6d-e8b9-4cfd-81d6-1bbe2e58bb54<br /> <br /> Copyright: VyOS maintainers and contributors<br /> </pre><br /> <br /> === Netzwerkkonfiguration in /config/config.boot vom 11.Mai 2024 ===<br /> <pre><br /> firewall {<br /> all-ping enable<br /> broadcast-ping disable<br /> config-trap disable<br /> interface tun2 {<br /> in {<br /> ipv6-name tun2_in<br /> }<br /> }<br /> ipv6-name tun2_in {<br /> default-action reject<br /> rule 1 {<br /> action accept<br /> protocol ipv6-icmp<br /> }<br /> rule 2 {<br /> action accept<br /> protocol all<br /> state {<br /> established enable<br /> related enable<br /> }<br /> }<br /> rule 3 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 80<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> rule 4 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 443<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> }<br /> ipv6-receive-redirects disable<br /> ipv6-src-route disable<br /> ip-src-route disable<br /> log-martians enable<br /> receive-redirects disable<br /> send-redirects enable<br /> source-validation disable<br /> syn-cookies enable<br /> twa-hazards-protection disable<br /> }<br /> interfaces {<br /> ethernet eth0 {<br /> address 10.12.3.1/29<br /> duplex auto<br /> hw-id 52:54:00:64:19:ea<br /> offload {<br /> gro<br /> gso<br /> sg<br /> tso<br /> }<br /> }<br /> ethernet eth1 {<br /> address 172.16.10.1/24<br /> address 2001:470:1f0b:563::1/64<br /> hw-id 52:54:00:c1:6f:c2<br /> ipv6 {<br /> dup-addr-detect-transmits 1<br /> }<br /> offload {<br /> gro<br /> gso<br /> sg<br /> tso<br /> }<br /> speed auto<br /> }<br /> loopback lo {<br /> address 78.47.239.0/32<br /> address 78.47.239.1/32<br /> address 78.47.239.2/32<br /> address 78.47.239.3/32<br /> address 78.47.239.4/32<br /> address 78.47.239.5/32<br /> address 78.47.239.6/32<br /> address 78.47.239.7/32<br /> }<br /> openvpn vtun0 {<br /> mode server<br /> openvpn-option duplicate-cn<br /> protocol tcp-passive<br /> server {<br /> push-route 172.16.10.0/24 {<br /> }<br /> subnet 172.16.11.0/25<br /> }<br /> tls {<br /> ca-certificate openvpn_vtun0_1<br /> certificate openvpn_vtun0<br /> dh-params openvpn_vtun0<br /> }<br /> }<br /> tunnel tun0 {<br /> address 172.16.43.8/32<br /> address 172.16.43.8/31<br /> encapsulation gre<br /> remote 188.40.111.111<br /> source-address 78.47.239.0<br /> }<br /> tunnel tun1 {<br /> address 172.16.91.1/30<br /> encapsulation gre<br /> remote 78.46.79.155<br /> source-address 78.47.239.0<br /> }<br /> tunnel tun2 {<br /> address 2001:470:1f0a:563::2/64<br /> description "HE.NET IPv6 Tunnel"<br /> encapsulation sit<br /> remote 216.66.80.30<br /> source-address 78.47.239.0<br /> }<br /> wireguard wg0 {<br /> address 172.16.12.1/24<br /> peer michael {<br /> allowed-ips 192.168.178.0/24<br /> allowed-ips 192.168.188.0/24<br /> allowed-ips 172.16.12.2/32<br /> allowed-ips 192.168.198.0/24<br /> public-key 0G3hmNjYbE9/fcbqZGF+LG5r/uaZ5r1CJFyEkrEOSQc=<br /> }<br /> peer njk {<br /> allowed-ips 192.168.0.0/24<br /> allowed-ips 172.16.12.3/32<br /> public-key ugz2GJdirFGMCcI6pdTdEjca19LWIY3rzO+xwplbGzo=<br /> }<br /> port 51280<br /> private-key SBnPetaY1+xY7WAj5UvgbTq8uRdE4e3baedepnwS7GA=<br /> }<br /> }<br /> nat {<br /> destination {<br /> rule 2 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 443<br /> }<br /> }<br /> rule 3 {<br /> description "owncloud http"<br /> destination {<br /> address 78.47.239.1<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 80<br /> }<br /> }<br /> rule 4 {<br /> description "owncloud https"<br /> destination {<br /> address 78.47.239.1<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 443<br /> }<br /> }<br /> rule 5 {<br /> destination {<br /> address 78.47.239.5<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 80<br /> }<br /> }<br /> rule 6 {<br /> destination {<br /> address 78.47.239.5<br /> port 22222<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 22<br /> }<br /> }<br /> rule 7 {<br /> destination {<br /> address 78.47.239.5<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 443<br /> }<br /> }<br /> rule 8 {<br /> destination {<br /> address 78.47.239.5<br /> port 9443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 9443<br /> }<br /> }<br /> rule 9 {<br /> destination {<br /> address 78.47.239.5<br /> port 8443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 8443<br /> }<br /> }<br /> rule 10 {<br /> destination {<br /> address 78.47.239.5<br /> port 20<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 20<br /> }<br /> }<br /> rule 11 {<br /> destination {<br /> address 78.47.239.5<br /> port 21<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 21<br /> }<br /> }<br /> rule 12 {<br /> destination {<br /> address 78.47.239.5<br /> port 12000-13000<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 12000-13000<br /> }<br /> }<br /> rule 13 {<br /> destination {<br /> address 78.47.239.2<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 80<br /> }<br /> }<br /> rule 14 {<br /> destination {<br /> address 78.47.239.2<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 443<br /> }<br /> }<br /> rule 15 {<br /> destination {<br /> address 78.47.239.2<br /> port 6922<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 22<br /> }<br /> }<br /> rule 16 {<br /> destination {<br /> address 78.47.239.3<br /> port 993<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 993<br /> }<br /> }<br /> rule 17 {<br /> destination {<br /> address 78.47.239.3<br /> port 587<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 587<br /> }<br /> }<br /> rule 25 {<br /> destination {<br /> address 78.47.239.7<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.7<br /> port 443<br /> }<br /> }<br /> rule 26 {<br /> destination {<br /> address 78.47.239.3<br /> port 7080<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 27 {<br /> destination {<br /> address 78.47.239.6<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 80<br /> }<br /> }<br /> rule 28 {<br /> destination {<br /> address 78.47.239.6<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 443<br /> }<br /> }<br /> rule 29 {<br /> destination {<br /> address 78.47.239.0<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 80<br /> }<br /> }<br /> rule 30 {<br /> destination {<br /> address 78.47.239.0<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 443<br /> }<br /> }<br /> rule 31 {<br /> destination {<br /> address 78.47.239.0<br /> port 2223<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 22<br /> }<br /> }<br /> rule 32 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 33 {<br /> description "crm http"<br /> destination {<br /> address 78.47.239.7<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.7<br /> port 80<br /> }<br /> }<br /> rule 34 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 25<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 25<br /> }<br /> }<br /> rule 35 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 143<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 143<br /> }<br /> }<br /> rule 36 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 465<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 465<br /> }<br /> }<br /> rule 40 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 443<br /> }<br /> }<br /> rule 41 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 80<br /> }<br /> }<br /> }<br /> source {<br /> rule 100 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.22/32<br /> }<br /> translation {<br /> address 78.47.239.3<br /> }<br /> }<br /> rule 200 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.0/24<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> rule 201 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.11.128/25<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> }<br /> }<br /> pki {<br /> ca openvpn_vtun0_1 {<br /> certificate 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<br /> }<br /> certificate openvpn_vtun0 {<br /> certificate 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<br /> private {<br /> key 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<br /> }<br /> }<br /> dh openvpn_vtun0 {<br /> parameters MIIBCAKCAQEAiPNa/hPGzwM1ZEJAL5JrIUrYRPdD4vMa38q5Fph6xobWmZA+ysg0tsROFAnBxD9a5J13NWumIVyZ7Mslgr+FfuE/tAyMpZ2roi4+0Ge4YdWeR0hfRC+qqLJuOXHc2q4PI6EnbYdG5/47AipmTVhy50MDfvZxRBkz1o/zgKUQwMuRYfISPT+/4utL/qJ34XIyqndvZ8rWjJ6B9hHwFNAZpS4AHiUSu81nccw2T1GJiMkCRXwYIr3Kcp73YpZVg+zTGyV4rdkOoAOtjDTAgNs7BzekuhMeSlrHiDMfOpv5/WqDJbnjvOSpzdvUEz2NwP4oPTmRn+E5P+p3D7IIn7LXEwIBAg==<br /> }<br /> }<br /> protocols {<br /> static {<br /> route 0.0.0.0/0 {<br /> next-hop 10.12.3.2 {<br /> }<br /> }<br /> route 172.16.41.0/24 {<br /> next-hop 172.16.91.2 {<br /> }<br /> }<br /> route 172.16.42.0/24 {<br /> next-hop 172.16.43.9 {<br /> }<br /> }<br /> route 192.168.0.0/16 {<br /> interface wg0 {<br /> }<br /> }<br /> route6 ::/0 {<br /> next-hop 2001:470:1f0a:563::1 {<br /> }<br /> }<br /> }<br /> }<br /> service {<br /> dns {<br /> forwarding {<br /> allow-from 172.16.0.0/12<br /> cache-size 150<br /> listen-address 172.16.10.1<br /> name-server 8.8.8.8<br /> }<br /> }<br /> ntp {<br /> allow-client {<br /> address 0.0.0.0/0<br /> address ::/0<br /> }<br /> server 0.pool.ntp.org {<br /> }<br /> server 0.vyatta.pool.ntp.org {<br /> }<br /> server 1.pool.ntp.org {<br /> }<br /> server 1.vyatta.pool.ntp.org {<br /> }<br /> server 2.pool.ntp.org {<br /> }<br /> server 2.vyatta.pool.ntp.org {<br /> }<br /> }<br /> router-advert {<br /> interface eth1 {<br /> prefix 2001:470:1f0b:563::/64 {<br /> }<br /> }<br /> }<br /> snmp {<br /> community aquapool {<br /> authorization ro<br /> network 172.16.10.0/24<br /> }<br /> listen-address 172.16.10.1 {<br /> port 161<br /> }<br /> }<br /> ssh {<br /> disable-password-authentication<br /> listen-address 78.47.239.0<br /> port 22<br /> }<br /> }<br /> system {<br /> config-management {<br /> commit-revisions 20<br /> }<br /> conntrack {<br /> modules {<br /> ftp<br /> h323<br /> nfs<br /> pptp<br /> sip<br /> sqlnet<br /> tftp<br /> }<br /> }<br /> console {<br /> device ttyS0 {<br /> speed 9600<br /> }<br /> }<br /> host-name router.aquapool.de<br /> login {<br /> user falk {<br /> authentication {<br /> encrypted-password $1$voX2XI/s$4LcZVA.PZRcHJlS2T7Q5w/<br /> plaintext-password ""<br /> public-keys fstern@nb-stern {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAzAMO7qr+wTBJy5koRY/1QMbK/GyEttp1DE0VimrqCG7yF3kyMPhMj0Pc2pLBEFbsh9Boec54hGUBnT4+1xC6I5sHxbxnkWpImTyF1KnNDAwh4qYHZby3iJu08xLgsG1XCaeoX8vyzyrXU0n2iH6TjRycgi63jYz+F4vcYKn9tT3ijciFdxMHz82kCpbCa+AfqUex902MB2PhFu2ymKJHQSdT2PmIUqmeEdSPBcmGyhFtTBgpGc+9ZjEFZd34Y0kgXbYNYSnG7lycLY9tWKq379uL3gBBNScuKMJHldjC7KVe8lkvHY563OZ9Y0OvdBXRGKL06+Xl9ZHIRqXa4tC/FQ==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user mg {<br /> authentication {<br /> public-keys mg {<br /> key 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<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user njk {<br /> authentication {<br /> encrypted-password $1$QmEAxU4/$AZZjjd2fA9QxQxbN1yrQt/<br /> plaintext-password ""<br /> public-keys me@njk {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAvLKBzTArq91swhxmS8UDCaEIhX1CDD35aeubyUnU3WSM8rguHTxbDjY4XWfPGO38uABmt5GEk1DqNcqOXG9XwSH523jxaG/2KsJpuBHBngM2rxZmR7LL9Gxy4GNPNuRsVk8R9iqJU7DD4N+g1WJZC/mM3so12YjKE+dfPGJhimUt0wWYqkU6fBX7COZb0p56g02AO5ovVmDQTfqJ9qSXLumWnvt0eGN8us4g/+cNO9RqJBMj+hsXfkbi6bnYVy6fhHVan9B4tLllzSCfxli5Q+NfzIu5rpIR63TiheSQNlvPEqrVs44OkOPLFhBX8McSUlWebwofbPhck+DLrBwz1Q==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> }<br /> name-server 1.1.1.1<br /> static-host-mapping {<br /> host-name crm1.aquapool.de {<br /> inet 172.16.10.11<br /> }<br /> host-name crm.aquapool.de {<br /> alias wiki.aquapool.de<br /> alias vtiger.aquapool.de<br /> inet 172.16.10.7<br /> }<br /> host-name db1.aquapool.de {<br /> inet 172.16.10.8<br /> }<br /> host-name mail.aquapool.de {<br /> inet 172.16.10.22<br /> }<br /> host-name owncloud.aquapool.de {<br /> alias cloud.aquapool.de<br /> inet 172.16.10.3<br /> }<br /> host-name service.aquapool.de {<br /> alias backup.aquapool.de<br /> inet 172.16.10.12<br /> }<br /> host-name swimflow.de {<br /> alias trainigpool.de<br /> inet 172.16.10.14<br /> }<br /> }<br /> syslog {<br /> global {<br /> facility all {<br /> level notice<br /> }<br /> facility protocols {<br /> level debug<br /> }<br /> }<br /> }<br /> time-zone GMT<br /> }<br /> <br /> <br /> // Warning: Do not remove the following line.<br /> // vyos-config-version: "bgp@3:broadcast-relay@1:cluster@1:config-management@1:conntrack@3:conntrack-sync@2:container@1:dhcp-relay@2:dhcp-server@6:dhcpv6-server@1:dns-forwarding@3:firewall@9:flow-accounting@1:https@4:ids@1:interfaces@28:ipoe-server@1:ipsec@12:isis@2:l2tp@4:lldp@1:mdns@1:monitoring@1:nat@5:nat66@1:ntp@2:openconnect@2:ospf@1:policy@5:pppoe-server@6:pptp@2:qos@2:quagga@10:rpki@1:salt@1:snmp@3:ssh@2:sstp@4:system@25:vrf@3:vrrp@3:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2"<br /> // Release version: 1.4-rolling-202303030317<br /> <br /> </pre></div>

172.16.12.2 https://wiki.goedeke.de/index.php?title=Router2&diff=310 Router2 2024-08-26T16:59:20Z

<p>172.16.12.2: /* Netzwerkkonfiguration in /config/config.boot */</p> <hr /> <div><br /> == Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> <pre>Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU: 1<br /> RAM: 1024<br /> Virtual Disk: 10.00 GiB<br /> Source path: /storage/vms/router2.qcow2<br /> </pre><br /> <br /> == Betriebssystem ==<br /> <br /> <pre>mg@router.aquapool.de:~$ show version<br /> Version: VyOS 1.4-rolling-202303030317<br /> Release train: current<br /> <br /> Built by: autobuild@vyos.net<br /> Built on: Fri 03 Mar 2023 03:17 UTC<br /> Build UUID: 0ce89af1-6db9-4940-9ee6-6be3f1d7a079<br /> Build commit ID: afdaac1012d7b1<br /> <br /> Architecture: x86_64<br /> Boot via: installed image<br /> System type: guest<br /> <br /> Hardware vendor: QEMU<br /> Hardware model: Standard PC (Q35 + ICH9, 2009)<br /> Hardware S/N: <br /> Hardware UUID: f7fddb6d-e8b9-4cfd-81d6-1bbe2e58bb54<br /> <br /> Copyright: VyOS maintainers and contributors<br /> </pre><br /> <br /> === Netzwerkkonfiguration in /config/config.boot ===<br /> <pre><br /> firewall {<br /> all-ping enable<br /> broadcast-ping disable<br /> config-trap disable<br /> interface tun2 {<br /> in {<br /> ipv6-name tun2_in<br /> }<br /> }<br /> ipv6-name tun2_in {<br /> default-action reject<br /> rule 1 {<br /> action accept<br /> protocol ipv6-icmp<br /> }<br /> rule 2 {<br /> action accept<br /> protocol all<br /> state {<br /> established enable<br /> related enable<br /> }<br /> }<br /> rule 3 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 80<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> rule 4 {<br /> action accept<br /> destination {<br /> address 2001:470:1f0b:563::15<br /> port 443<br /> }<br /> protocol tcp<br /> state {<br /> new enable<br /> }<br /> }<br /> }<br /> ipv6-receive-redirects disable<br /> ipv6-src-route disable<br /> ip-src-route disable<br /> log-martians enable<br /> receive-redirects disable<br /> send-redirects enable<br /> source-validation disable<br /> syn-cookies enable<br /> twa-hazards-protection disable<br /> }<br /> interfaces {<br /> ethernet eth0 {<br /> address 10.12.3.1/29<br /> duplex auto<br /> hw-id 52:54:00:64:19:ea<br /> offload {<br /> gro<br /> gso<br /> sg<br /> tso<br /> }<br /> }<br /> ethernet eth1 {<br /> address 172.16.10.1/24<br /> address 2001:470:1f0b:563::1/64<br /> hw-id 52:54:00:c1:6f:c2<br /> ipv6 {<br /> dup-addr-detect-transmits 1<br /> }<br /> offload {<br /> gro<br /> gso<br /> sg<br /> tso<br /> }<br /> speed auto<br /> }<br /> loopback lo {<br /> address 78.47.239.0/32<br /> address 78.47.239.1/32<br /> address 78.47.239.2/32<br /> address 78.47.239.3/32<br /> address 78.47.239.4/32<br /> address 78.47.239.5/32<br /> address 78.47.239.6/32<br /> address 78.47.239.7/32<br /> }<br /> openvpn vtun0 {<br /> mode server<br /> openvpn-option duplicate-cn<br /> protocol tcp-passive<br /> server {<br /> push-route 172.16.10.0/24 {<br /> }<br /> subnet 172.16.11.0/25<br /> }<br /> tls {<br /> ca-certificate openvpn_vtun0_1<br /> certificate openvpn_vtun0<br /> dh-params openvpn_vtun0<br /> }<br /> }<br /> tunnel tun0 {<br /> address 172.16.43.8/32<br /> address 172.16.43.8/31<br /> encapsulation gre<br /> remote 188.40.111.111<br /> source-address 78.47.239.0<br /> }<br /> tunnel tun1 {<br /> address 172.16.91.1/30<br /> encapsulation gre<br /> remote 78.46.79.155<br /> source-address 78.47.239.0<br /> }<br /> tunnel tun2 {<br /> address 2001:470:1f0a:563::2/64<br /> description "HE.NET IPv6 Tunnel"<br /> encapsulation sit<br /> remote 216.66.80.30<br /> source-address 78.47.239.0<br /> }<br /> wireguard wg0 {<br /> address 172.16.12.1/24<br /> peer michael {<br /> allowed-ips 192.168.178.0/24<br /> allowed-ips 192.168.188.0/24<br /> allowed-ips 172.16.12.2/32<br /> allowed-ips 192.168.198.0/24<br /> public-key 0G3hmNjYbE9/fcbqZGF+LG5r/uaZ5r1CJFyEkrEOSQc=<br /> }<br /> peer njk {<br /> allowed-ips 192.168.0.0/24<br /> allowed-ips 172.16.12.3/32<br /> public-key ugz2GJdirFGMCcI6pdTdEjca19LWIY3rzO+xwplbGzo=<br /> }<br /> port 51280<br /> private-key SBnPetaY1+xY7WAj5UvgbTq8uRdE4e3baedepnwS7GA=<br /> }<br /> }<br /> nat {<br /> destination {<br /> rule 2 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 443<br /> }<br /> }<br /> rule 3 {<br /> description "owncloud http"<br /> destination {<br /> address 78.47.239.1<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 80<br /> }<br /> }<br /> rule 4 {<br /> description "owncloud https"<br /> destination {<br /> address 78.47.239.1<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.3<br /> port 443<br /> }<br /> }<br /> rule 5 {<br /> destination {<br /> address 78.47.239.5<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 80<br /> }<br /> }<br /> rule 6 {<br /> destination {<br /> address 78.47.239.5<br /> port 22222<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 22<br /> }<br /> }<br /> rule 7 {<br /> destination {<br /> address 78.47.239.5<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 443<br /> }<br /> }<br /> rule 8 {<br /> destination {<br /> address 78.47.239.5<br /> port 9443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 9443<br /> }<br /> }<br /> rule 9 {<br /> destination {<br /> address 78.47.239.5<br /> port 8443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 8443<br /> }<br /> }<br /> rule 10 {<br /> destination {<br /> address 78.47.239.5<br /> port 20<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 20<br /> }<br /> }<br /> rule 11 {<br /> destination {<br /> address 78.47.239.5<br /> port 21<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 21<br /> }<br /> }<br /> rule 12 {<br /> destination {<br /> address 78.47.239.5<br /> port 12000-13000<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.6<br /> port 12000-13000<br /> }<br /> }<br /> rule 13 {<br /> destination {<br /> address 78.47.239.2<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 80<br /> }<br /> }<br /> rule 14 {<br /> destination {<br /> address 78.47.239.2<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 443<br /> }<br /> }<br /> rule 15 {<br /> destination {<br /> address 78.47.239.2<br /> port 6922<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.5<br /> port 22<br /> }<br /> }<br /> rule 16 {<br /> destination {<br /> address 78.47.239.3<br /> port 993<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 993<br /> }<br /> }<br /> rule 17 {<br /> destination {<br /> address 78.47.239.3<br /> port 587<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 587<br /> }<br /> }<br /> rule 25 {<br /> destination {<br /> address 78.47.239.7<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.7<br /> port 443<br /> }<br /> }<br /> rule 26 {<br /> destination {<br /> address 78.47.239.3<br /> port 7080<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 27 {<br /> destination {<br /> address 78.47.239.6<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 80<br /> }<br /> }<br /> rule 28 {<br /> destination {<br /> address 78.47.239.6<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.20<br /> port 443<br /> }<br /> }<br /> rule 29 {<br /> destination {<br /> address 78.47.239.0<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 80<br /> }<br /> }<br /> rule 30 {<br /> destination {<br /> address 78.47.239.0<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 443<br /> }<br /> }<br /> rule 31 {<br /> destination {<br /> address 78.47.239.0<br /> port 2223<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.13<br /> port 22<br /> }<br /> }<br /> rule 32 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 80<br /> }<br /> }<br /> rule 33 {<br /> description "crm http"<br /> destination {<br /> address 78.47.239.7<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.7<br /> port 80<br /> }<br /> }<br /> rule 34 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 25<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 25<br /> }<br /> }<br /> rule 35 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 143<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 143<br /> }<br /> }<br /> rule 36 {<br /> description mail2<br /> destination {<br /> address 78.47.239.3<br /> port 465<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.22<br /> port 465<br /> }<br /> }<br /> rule 40 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 443<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 443<br /> }<br /> }<br /> rule 41 {<br /> description swimflow<br /> destination {<br /> address 78.47.239.4<br /> port 80<br /> }<br /> inbound-interface eth0<br /> protocol tcp<br /> translation {<br /> address 172.16.10.14<br /> port 80<br /> }<br /> }<br /> }<br /> source {<br /> rule 100 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.22/32<br /> }<br /> translation {<br /> address 78.47.239.3<br /> }<br /> }<br /> rule 200 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.10.0/24<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> rule 201 {<br /> outbound-interface eth0<br /> source {<br /> address 172.16.11.128/25<br /> }<br /> translation {<br /> address 78.47.239.1<br /> }<br /> }<br /> }<br /> }<br /> pki {<br /> ca openvpn_vtun0_1 {<br /> certificate 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<br /> }<br /> certificate openvpn_vtun0 {<br /> certificate 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<br /> private {<br /> key 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<br /> }<br /> }<br /> dh openvpn_vtun0 {<br /> parameters MIIBCAKCAQEAiPNa/hPGzwM1ZEJAL5JrIUrYRPdD4vMa38q5Fph6xobWmZA+ysg0tsROFAnBxD9a5J13NWumIVyZ7Mslgr+FfuE/tAyMpZ2roi4+0Ge4YdWeR0hfRC+qqLJuOXHc2q4PI6EnbYdG5/47AipmTVhy50MDfvZxRBkz1o/zgKUQwMuRYfISPT+/4utL/qJ34XIyqndvZ8rWjJ6B9hHwFNAZpS4AHiUSu81nccw2T1GJiMkCRXwYIr3Kcp73YpZVg+zTGyV4rdkOoAOtjDTAgNs7BzekuhMeSlrHiDMfOpv5/WqDJbnjvOSpzdvUEz2NwP4oPTmRn+E5P+p3D7IIn7LXEwIBAg==<br /> }<br /> }<br /> protocols {<br /> static {<br /> route 0.0.0.0/0 {<br /> next-hop 10.12.3.2 {<br /> }<br /> }<br /> route 172.16.41.0/24 {<br /> next-hop 172.16.91.2 {<br /> }<br /> }<br /> route 172.16.42.0/24 {<br /> next-hop 172.16.43.9 {<br /> }<br /> }<br /> route 192.168.0.0/16 {<br /> interface wg0 {<br /> }<br /> }<br /> route6 ::/0 {<br /> next-hop 2001:470:1f0a:563::1 {<br /> }<br /> }<br /> }<br /> }<br /> service {<br /> dns {<br /> forwarding {<br /> allow-from 172.16.0.0/12<br /> cache-size 150<br /> listen-address 172.16.10.1<br /> name-server 8.8.8.8<br /> }<br /> }<br /> ntp {<br /> allow-client {<br /> address 0.0.0.0/0<br /> address ::/0<br /> }<br /> server 0.pool.ntp.org {<br /> }<br /> server 0.vyatta.pool.ntp.org {<br /> }<br /> server 1.pool.ntp.org {<br /> }<br /> server 1.vyatta.pool.ntp.org {<br /> }<br /> server 2.pool.ntp.org {<br /> }<br /> server 2.vyatta.pool.ntp.org {<br /> }<br /> }<br /> router-advert {<br /> interface eth1 {<br /> prefix 2001:470:1f0b:563::/64 {<br /> }<br /> }<br /> }<br /> snmp {<br /> community aquapool {<br /> authorization ro<br /> network 172.16.10.0/24<br /> }<br /> listen-address 172.16.10.1 {<br /> port 161<br /> }<br /> }<br /> ssh {<br /> disable-password-authentication<br /> listen-address 78.47.239.0<br /> port 22<br /> }<br /> }<br /> system {<br /> config-management {<br /> commit-revisions 20<br /> }<br /> conntrack {<br /> modules {<br /> ftp<br /> h323<br /> nfs<br /> pptp<br /> sip<br /> sqlnet<br /> tftp<br /> }<br /> }<br /> console {<br /> device ttyS0 {<br /> speed 9600<br /> }<br /> }<br /> host-name router.aquapool.de<br /> login {<br /> user falk {<br /> authentication {<br /> encrypted-password $1$voX2XI/s$4LcZVA.PZRcHJlS2T7Q5w/<br /> plaintext-password ""<br /> public-keys fstern@nb-stern {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAzAMO7qr+wTBJy5koRY/1QMbK/GyEttp1DE0VimrqCG7yF3kyMPhMj0Pc2pLBEFbsh9Boec54hGUBnT4+1xC6I5sHxbxnkWpImTyF1KnNDAwh4qYHZby3iJu08xLgsG1XCaeoX8vyzyrXU0n2iH6TjRycgi63jYz+F4vcYKn9tT3ijciFdxMHz82kCpbCa+AfqUex902MB2PhFu2ymKJHQSdT2PmIUqmeEdSPBcmGyhFtTBgpGc+9ZjEFZd34Y0kgXbYNYSnG7lycLY9tWKq379uL3gBBNScuKMJHldjC7KVe8lkvHY563OZ9Y0OvdBXRGKL06+Xl9ZHIRqXa4tC/FQ==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user mg {<br /> authentication {<br /> public-keys mg {<br /> key AAAAB3NzaC1yc2EAAAADAQABAAACAQC8nakviS7pW6x8Guw0/+qqngJNJfqZdjfsZEDfDtaHMPmGlUAo30kWMXQdzBT8B0WgPBjy66vqKPoZJTQ9d0XGElMcaR1lEWS6eRB7ND4sEHO3wNCFL74rwetu4I2nzpIZxJ4ctXhrXS34RVPS0YksiVltoRBVAORETqesgiuQIQtBzZCtKxymD6BjbX/lkE5YPoyszahkKFSVbHeRbiIS0yPpAu6LaJ0Lmpk+o3Fi8xB4Ouc9VL3yqbtb7yVnF4HRzeF3W56ntkAjeEkl8ZW2Hs+pRQSdh/NEsqs2vX0f+FA6RRGYy5SRQonyUVhNPYP8O8BRM71CLXJFOSZ+c4mTy1aLgbRTuf6ipETpdhvcXnKN4Bx1Ph7uOhkvQFOmtEo7DJCvTQG5VkNKkmHFxrGlpHXyJsjbBf4WKog8fNzxSWBcKr6Z7mc0a5pplXILjgRWO0BZUHk9I7ZuXP9ZBe5/LtNENjyFgXtjeNhyyZNTtNl5RVeXsvJYPHn23+W9++lZeIXrZDUF5iHhcD2v8aRWzIBGNKZw6pNONG2S7MumfeCJnkJl2piS1xaEgPo2es/g9p9jHTC/vRUPzGiACSq+8KrBPSIqookK8XdK4w7kPzoizLnTmd8CbXih5qFsJOTuAlVdyzeAzqVh3zOakUxzRQLrfe7IHEQN2HOYMObtUQ==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> user njk {<br /> authentication {<br /> encrypted-password $1$QmEAxU4/$AZZjjd2fA9QxQxbN1yrQt/<br /> plaintext-password ""<br /> public-keys me@njk {<br /> key AAAAB3NzaC1yc2EAAAABIwAAAQEAvLKBzTArq91swhxmS8UDCaEIhX1CDD35aeubyUnU3WSM8rguHTxbDjY4XWfPGO38uABmt5GEk1DqNcqOXG9XwSH523jxaG/2KsJpuBHBngM2rxZmR7LL9Gxy4GNPNuRsVk8R9iqJU7DD4N+g1WJZC/mM3so12YjKE+dfPGJhimUt0wWYqkU6fBX7COZb0p56g02AO5ovVmDQTfqJ9qSXLumWnvt0eGN8us4g/+cNO9RqJBMj+hsXfkbi6bnYVy6fhHVan9B4tLllzSCfxli5Q+NfzIu5rpIR63TiheSQNlvPEqrVs44OkOPLFhBX8McSUlWebwofbPhck+DLrBwz1Q==<br /> type ssh-rsa<br /> }<br /> }<br /> }<br /> }<br /> name-server 1.1.1.1<br /> static-host-mapping {<br /> host-name crm1.aquapool.de {<br /> inet 172.16.10.11<br /> }<br /> host-name crm.aquapool.de {<br /> alias wiki.aquapool.de<br /> alias vtiger.aquapool.de<br /> inet 172.16.10.7<br /> }<br /> host-name db1.aquapool.de {<br /> inet 172.16.10.8<br /> }<br /> host-name mail.aquapool.de {<br /> inet 172.16.10.22<br /> }<br /> host-name owncloud.aquapool.de {<br /> alias cloud.aquapool.de<br /> inet 172.16.10.3<br /> }<br /> host-name service.aquapool.de {<br /> alias backup.aquapool.de<br /> inet 172.16.10.12<br /> }<br /> host-name swimflow.de {<br /> alias trainigpool.de<br /> inet 172.16.10.14<br /> }<br /> }<br /> syslog {<br /> global {<br /> facility all {<br /> level notice<br /> }<br /> facility protocols {<br /> level debug<br /> }<br /> }<br /> }<br /> time-zone GMT<br /> }<br /> <br /> <br /> // Warning: Do not remove the following line.<br /> // vyos-config-version: "bgp@3:broadcast-relay@1:cluster@1:config-management@1:conntrack@3:conntrack-sync@2:container@1:dhcp-relay@2:dhcp-server@6:dhcpv6-server@1:dns-forwarding@3:firewall@9:flow-accounting@1:https@4:ids@1:interfaces@28:ipoe-server@1:ipsec@12:isis@2:l2tp@4:lldp@1:mdns@1:monitoring@1:nat@5:nat66@1:ntp@2:openconnect@2:ospf@1:policy@5:pppoe-server@6:pptp@2:qos@2:quagga@10:rpki@1:salt@1:snmp@3:ssh@2:sstp@4:system@25:vrf@3:vrrp@3:vyos-accel-ppp@2:wanloadbalance@3:webproxy@2"<br /> // Release version: 1.4-rolling-202303030317<br /> <br /> </pre></div>

172.16.12.2 https://wiki.goedeke.de/index.php?title=Hauptseite&diff=309 Hauptseite 2024-03-29T18:55:17Z

<p>172.16.12.2: /* Der Host und die Gäste */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web3|web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]</div>

172.16.12.2 https://wiki.goedeke.de/index.php?title=Hauptseite&diff=308 Hauptseite 2024-03-29T18:54:49Z

<p>172.16.12.2: </p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web|web3]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]</div>

172.16.12.2 https://wiki.goedeke.de/index.php?title=Hauptseite&diff=307 Hauptseite 2024-03-29T18:41:10Z

<p>172.16.12.2: /* Der Host und die Gäste */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[web]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]</div>

172.16.12.2 https://wiki.goedeke.de/index.php?title=Hauptseite&diff=306 Hauptseite 2024-03-29T18:40:38Z

<p>172.16.12.2: /* Der Host und die Gäste */</p> <hr /> <div>== Dedicated Server Hosting by Hetzner (RZ Helsinki) ==<br /> <br /> [[AX41_NVMe #1380159|Server]] <br /> <br /> [[BX40 #145149|Storeage Box]]<br /> <br /> == Der Host und die Gäste ==<br /> <br /> [[Übersicht|Übersicht]]<br /> <br /> *[[AX41_NVMe 1380159|KVM]] <br /> **[[Router2|router2]] <br /> **[[Cloud (Owncloud)|cloud (owncloud)]]<br /> **[[CRM1|crm1]]<br /> **[[CRM|crm]]<br /> **[[Backup (Service)|Backup (Service)]]<br /> **[[Web|web3]]<br /> **[[Web4|web4]] <br /> **[[db1|db1]] <br /> **[[Mail2|mail2]] <br /> **[[Om|om]]<br /> <br /> == Das Netzwerk ==<br /> <br /> ==== Interne IP´s mit Zuordnung ====<br /> <br /> [[IP´s_172.16.10.0/24|IP´s 172.16.10.0/24]]<br /> <br /> ==== Externe IP´s mit Zuordnung ====<br /> <br /> [[IP´s_78.47.239.0/29|IP´s 78.47.239.0/29]]<br /> <br /> ==== Links: Extern ====<br /> <br /> [https://mail.aquapool.de MailcowAdmin]<br /> <br /> [https://mail.aquapool.de/sogo/ Webmail]<br /> <br /> [https://crm.aquapool.de CRM]<br /> <br /> [https://cloud.aquapool.de Nextcloud]<br /> <br /> [https://wiki.aquapool.de Wiki]<br /> <br /> ==== Links: intern via VPN ====<br /> <br /> [http://172.16.10.12/backuppc/ BackupPC]<br /> <br /> [http://172.16.10.8/phpmyadmin/ phpMyAdmin]<br /> <br /> == HOWTOs ==<br /> <br /> [[Restart/Start/Shutdown_VMs_-_KVM|Restart/Start/Shutdown VMs - KVM]]<br /> <br /> [[Backup der VMs|Backup der VMs]]<br /> <br /> == Domain Hosting ==<br /> <br /> [[Schlundtech | Schlundtech]]<br /> <br /> == Büro Server 192.168.188.0/24==<br /> <br /> ==== Interne IP´s und Server ====<br /> <br /> [[IP´s_192.168.188.*|IP´s 192.168.188.0/24]]<br /> <br /> ==== Cisco Telefone ====<br /> <br /> [[Cisco Konfig|Konfiguration]]<br /> <br /> ==== Asterisk ====<br /> <br /> [[ Asterisk Konfiguration| Konfiguration]]<br /> <br /> == aquacaetum ==<br /> <br /> [[ Laufende Installationen| Laufende Installationen]]<br /> <br /> [[ Anleitungen| Anleitungen]]</div>

172.16.12.2 https://wiki.goedeke.de/index.php?title=Backup_der_VMs&diff=197 Backup der VMs 2023-04-16T17:47:14Z

<p>172.16.12.2: </p> <hr /> <div>Die VM´s werden via zwei Backup-scripte (auf dem [[KVM]]) automatisch mit einem Crontab monatlich inkrementell auf die [[BX40|Storeage Box]] gesichert:<br /> <pre>30 0 2 */1 0 /storage/vms/backup-part1.sh 2>&1 | msmtp michael@goedeke.de<br /> 30 0 3 */1 0 /storage/vms/backup-part2.sh 2>&1 | msmtp michael@goedeke.de</pre><br /> <br /> /storage/vms/backup-vms.sh<br /> <pre><br /> #!/bin/bash<br /> <br /> #################### config variables########################<br /> <br /> #Uncomment to backup domains myVMa and myVMb<br /> DOMAINS="<alle in part1 bzw. in part2>"<br /> <br /> #Alternatively list all VMs and back them all up<br /> #DOMAINS=$(virsh list --all | tail -n +3 | awk '{print $2}')<br /> <br /> BACKUPROOT=/var/backups/kvms/backup_vms/$(hostname)<br /> <br /> LOG="$BACKUPROOT/logs/qemu-backup.$(date +%Y-%m-%d).log"<br /> SNAPPREFIX=snaptemp-<br /> <br /> # Path to XML files for stopped VM...<br /> PATH_LIBVIRT_QEMU="/etc/libvirt/qemu"<br /> <br /> #pause before blockcommit<br /> pause_domain_bc=false<br /> #pause after blockcommit fail. if pause_domain_bc is set to true, this option is skiped<br /> pause_domain_after_bc_fail=true<br /> #on fail blockcommit try blockjob<br /> enable_bj_attemts=true<br /> blockjob_retrycount=1<br /> blockjob_delay="30s"<br /> pause_while_bj_attemtps=true<br /> #if blockjob attempts fail, try pause domain? (if pause_while_bj_attemtps is set to true, script ignore this option)<br /> pause_domain_after_bj_fail=true<br /> <br /> EMR="michael@goedeke.de"<br /> #****************************<br /> #you can create conf file with variables which overwrite those above<br /> #fo example if name of yours script is backup_vms.sh,create file in location wher is your script and name him-> backup_vms.conf<br /> #if you want other name and path, you need to find and change value for variable below (outsite config variables block) named-> confFile<br /> #it is usefull if we work with many hypervisiors and make some changes in script<br /> #****************************<br /> <br /> #################### end of config variables#################<br /> <br /> SHCMD="$(basename -- $0)"<br /> SHCMD_path=$(dirname $(readlink -f $0))<br /> confFile="$SHCMD_path/${SHCMD%.*}.conf"<br /> if [ -f "$confFile" ]; then<br /> source "$confFile"<br /> echo "overwrite vars from config file"<br /> else<br /> echo "no config file, but if you set variables on begining it is not necessary"<br /> fi<br /> <br /> [ ! -f $BACKUPROOT/logs ] && mkdir -p $BACKUPROOT/logs<br /> DATE="$(date +%Y-%m-%d.%H%M%S)"<br /> <br /> ERRORED=0<br /> COMMITSNAPTAB[0]=false<br /> BREAK=false<br /> <br /> <br /> <br /> <br /> <br /> <br /> # extract the date coding in FILEFULLNAME (note: filename format must be YYYY-MM-DD)<br /> dtmatch () { sed -n -e 's/.*\(2[0-1][0-9][0-9]-[0-1][0-9]-[0-3][0-9]\).*/\1/p'; }<br /> #check if previous instance of script is not running, it's mandatory for blockcommit after interput script from some reason<br /> if pidof -x "$SHCMD" -o $$ >/dev/null;then<br /> ERR="An another instance of this script is already running, please clear all the sessions of this script before starting a new one<br /> If you are sure to stop previous instance, try command: kill -9 \$(pidof -x \"$SHCMD\")"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> exit 1<br /> fi<br /> echo "$SHCMD: Starting backups on $(date +'%d-%m-%Y %H:%M:%S')" >> $LOG<br /> for DOMAIN in $DOMAINS; do<br /> BREAK=false<br /> #check if domain exists<br /> VMSRC=$(virsh list --all | grep [[:space:]]$DOMAIN[[:space:]] | awk '{print $3}')<br /> VMSRC=${#VMSRC}<br /> if [[ $VMSRC -eq 0 ]]; then<br /> ERR="Domain $DOMAIN on this hypervisior not exists"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR" <br /> continue<br /> fi<br /> <br /> echo "---- VM Backup start $DOMAIN ---- $(date +'%d-%m-%Y %H:%M:%S')" >> $LOG<br /> <br /> VM_RUNNING=1<br /> <br /> VMSTATE=$(LC_ALL=en_EN virsh list --all | grep [[:space:]]$DOMAIN[[:space:]] | awk '{print $3}')<br /> echo "$VMSTATE"<br /> if [[ $VMSTATE == "running" || $VMSTATE == "paused" ]]; then<br /> MSG="-> VM $DOMAIN running or paused."<br /> echo "$MSG" >> $LOG<br /> echo "$MSG" <br /> else<br /> <br /> MSG="-> VM $DOMAIN not running. No snapshot and blockcommit. Only copy."<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> VM_RUNNING=0<br /> fi<br /> <br /> BACKUPFOLDER=$BACKUPROOT/$DOMAIN<br /> [ ! -d $BACKUPFOLDER ] && mkdir -p $BACKUPFOLDER<br /> TARGETS=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $3}')<br /> IMAGES=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $4}')<br /> <br /> # check to make sure the VM is running on a standard image, not<br /> # a snapshot that may be from a backup that previously failed<br /> unset COMMITSNAPTAB[*]<br /> i=0<br /> COMMITSNAP=false<br /> for IMAGE in $IMAGES; do<br /> set -o noglob<br /> if [[ $IMAGE == *${SNAPPREFIX}* ]]; then<br /> set +o noglob<br /> if [[ $VM_RUNNING -eq 0 ]]; then<br /> ERR="$SHCMD: Error VM $DOMAIN is not running but is on a snapshot disk image: $IMAGE"<br /> echo $ERR >> $LOG<br /> echo "$ERR"<br /> echo "$ERR<br /> Host: $HOST<br /> Disk Image: $IMAGE<br /> Domain: $DOMAIN<br /> Command: virsh domblklist $DOMAIN --details" | mail -s "$SHCMD snapshot Exception for $DOMAIN" $EMR<br /> BREAK=true<br /> ERRORED=$(($ERRORED+1))<br /> break<br /> else<br /> COMMITSNAPTAB[$i]=true<br /> COMMITSNAP=true<br /> MSG="VM $DOMAIN is running but is on snapshot image $IMAGE so mark him for blockcommit first"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> fi<br /> else<br /> # if not running on snapshot still must check if ther is no tmp file, if is presents, must be deleted before start new snapshot<br /> FILEPATH="${IMAGE%/*}"<br /> FILEFULLNAME=`basename "$IMAGE"`<br /> FILENAME="${FILEFULLNAME%.*}"<br /> #FILEEXT="${FILEFULLNAME#*.}<br /> TMPFILE="$FILEPATH/$FILENAME.$SNAPPREFIX$DOMAIN"<br /> if [ -f "$TMPFILE" ]; then<br /> CMD="rm -f $TMPFILE >> $LOG 2>&1"<br /> MSG=" Deleting temporary image $TMPFILE after making snapshot"<br /> echo "$MSG" >>$LOG<br /> echo "$MSG"<br /> echo "Command: $CMD" >> $LOG<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> fi<br /> fi<br /> set +o noglob<br /> i=$i+1<br /> done<br /> [ $BREAK == true ] && continue<br /> <br /> if [[ $VM_RUNNING -eq 1 ]]; then<br /> #if vm running on snap, first i need to merge<br /> #i=0<br /> if [[ $COMMITSNAP == true ]]; then<br /> i=0<br /> for TARGET in $TARGETS; do<br /> if [[ ${COMMITSNAPTAB[$i]} == true ]]; then<br /> if [[ $VMSTATE == "paused" ]]; then<br /> pause_enabled=true<br /> else<br /> pause_enabled=false<br /> fi<br /> if [[ $pause_domain_bc == true && $pause_enabled == false ]]; then<br /> MSG="Try to pause domain $DOMAIN first"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh suspend $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't pause domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=true<br /> fi<br /> fi<br /> MSG="$TARGET BLOCKCOMMIT previous snapshot "<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMD="virsh blockcommit $DOMAIN $TARGET --active --pivot >> $LOG 2>&1"<br /> echo "Command: $CMD" >> $LOG<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> if [ $? -ne 0 ]; then<br /> ERR="Could not merge changes for disk $TARGET of $DOMAIN with blockcommit. VM may be in an invalid state."<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> echo "$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD" | mail -s "$SHCMD blockcommit Exception for $DOMAIN" $EMR<br /> if [[ $pause_domain_after_bc_fail == true && $pause_enabled == false ]]; then<br /> MSG="Try to pause domain $DOMAIN and retry bc"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh suspend $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't pause domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=true<br /> fi<br /> MSG="$TARGET BLOCKCOMMIT previous snapshot "<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMD="virsh blockcommit $DOMAIN $TARGET --active --pivot >> $LOG 2>&1"<br /> echo "Command: $CMD" >> $LOG<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> if [ $? -ne 0 ]; then<br /> ERR="Could not merge changes for disk $TARGET of $DOMAIN (paused) with blockcommit. VM may be in an invalid state."<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> echo "$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD" | mail -s "$SHCMD blockcommit Exception for $DOMAIN" $EMR<br /> else<br /> #if bc succes need to disable bj, so set to false<br /> enable_bj_attemts=false<br /> fi<br /> fi <br /> if [ $enable_bj_attemts == true ]; then<br /> if [[ $pause_while_bj_attemtps == true ]]; then<br /> MSG="Try to pause domain $DOMAIN first"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh suspend $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't pause domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=true<br /> fi<br /> else<br /> if [[ $pause_enabled == true && $VMSTATE == "running" ]]; then<br /> MSG="Resume domain $DOMAIN"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh resume $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't resume domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> fi<br /> <br /> for (( j=1; j<=$blockjob_retrycount; j++ )) do<br /> CMD="virsh blockjob --domain $DOMAIN --pivot $TARGET"<br /> echo "Command: $CMD" >> $LOG<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> if [ $? -ne 0 ]; then<br /> ERR="virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET failed"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> if [[ $j -eq $blockjob_retrycount ]]; then<br /> ERR="all blockjob attempts --domain $DOMAIN --pivot $TARGET failed."<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> echo "$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD" | mail -s "$SHCMD blockjob Exception for $DOMAIN" $EMR<br /> if [[ $pause_domain_after_bj_fail == true && $pause_enabled == false && $VMSTATE == "running" ]]; then<br /> MSG="Try to pause domain $DOMAIN first"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh suspend $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't pause domain $DOMAIN"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> echo "Command: $CMD" >> $LOG<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't blockjob --piovot $TARGET anyway, I'm giving up"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> echo "$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD" | mail -s "$SHCMD blockjob Exception for $DOMAIN" $EMR<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> fi<br /> MSG="Resume domain $DOMAIN"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh resume $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't resume domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> else<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> break<br /> fi<br /> fi<br /> sleep $blockjob_delay<br /> else<br /> MSG="virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET success"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> break<br /> fi<br /> done<br /> [ $BREAK == true ] && break<br /> fi<br /> fi<br /> if [[ $pause_enabled == true && $VMSTATE == "running" ]]; then<br /> MSG="Resume domain $DOMAIN"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh resume $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't resume domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> fi<br /> i=$i+1<br /> done<br /> [ $BREAK == true ] && continue<br /> #delete tmp images after blockcommit<br /> for IMAGE in $IMAGES; do<br /> set -o noglob<br /> if [[ $IMAGE == *${SNAPPREFIX}* ]]; then<br /> set +o noglob<br /> CMD="rm -f $IMAGE >> $LOG 2>&1"<br /> MSG=" Deleting temporary image $IMAGE"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> echo "Command: $CMD" >> $LOG<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> fi<br /> set +o noglob<br /> done<br /> #Reload images after blockcommit<br /> IMAGES=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $4}')<br /> fi<br /> DISKSPEC=""<br /> for TARGET in $TARGETS; do<br /> DISKSPEC="$DISKSPEC --diskspec $TARGET,snapshot=external"<br /> done<br /> <br /> # transfer the VM to snapshot disk image(s)<br /> CMD="virsh snapshot-create-as --domain $DOMAIN --name ${SNAPPREFIX}$DOMAIN --no-metadata --atomic --disk-only --quiesce $DISKSPEC >> $LOG 2>&1"<br /> echo "Command: $CMD" >> $LOG 2>&1<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> if [ $? -ne 0 ]; then<br /> MSG="Error create snapshot with --quiesce mode (it's require qemu-guest-agent), try without"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMD="virsh snapshot-create-as --domain $DOMAIN --name ${SNAPPREFIX}$DOMAIN --no-metadata --atomic --disk-only $DISKSPEC >> $LOG 2>&1"<br /> echo "Command: $CMD" >> $LOG 2>&1<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> fi<br /> if [ $? -ne 0 ]; then<br /> ERR="Failed to create snapshot for $DOMAIN"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> echo "$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD" | mail -s "$SHCMD snapshot Exception for $DOMAIN" $EMR<br /> ERRORED=$(($ERRORED+1))<br /> continue<br /> fi<br /> #i=$i+1<br /> <br /> fi<br /> <br /> <br /> ####################################<br /> #Rsync #<br /> ####################################<br /> MSG="Rsync"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> for IMAGE in $IMAGES; do<br /> FILEFULLNAME=`basename "$IMAGE"`<br /> if test -f "$BACKUPFOLDER/$FILEFULLNAME"; then<br /> MSG="Backup exists, merging only changes to image $BACKUPFOLDER/$FILEFULLNAME"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> #CMD="rsync -apvhz --inplace --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME "<br /> CMD="rsync -apvhz --inplace --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME "<br /> else<br /> MSG="Backup does not exist, creating a full sparse copy of image $IMAGE"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> #CMD="rsync -apvhz --sparse --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME "<br /> CMD="rsync -apvhz --sparse --progress $IMAGE $BACKUPFOLDER/$FILEFULLNAME "<br /> fi<br /> echo "Command: $CMD" >> $LOG<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> done<br /> ########################################<br /> # After sync file merge snapshots back #<br /> ########################################<br /> <br /> if [[ $VM_RUNNING -eq 1 ]]; then<br /> # Update the VM's disk image(s) with any changes recorded in the snapshot<br /> # while the copy process was running. In qemu lingo this is called a "pivot"<br /> BACKUPIMAGES=$(virsh domblklist $DOMAIN --details | grep disk | awk '{print $4}')<br /> for TARGET in $TARGETS; do<br /> #if [[ ${COMMITSNAPTAB[$i]} == true ]]; then<br /> #rsync can tak long time and state could changed so check once again <br /> #if state shut there will simple error becouse blockcommi and blockjob can't be done on shutdown domain.<br /> VMSTATE=$(LC_ALL=en_EN virsh list --all | grep [[:space:]]$DOMAIN[[:space:]] | awk '{print $3}')<br /> if [[ $VMSTATE == "paused" ]]; then<br /> pause_enabled=true<br /> else<br /> pause_enabled=false<br /> fi<br /> if [[ $pause_domain_bc == true && $pause_enabled == false ]]; then<br /> MSG="Try to pause domain $DOMAIN first"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh suspend $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't pause domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=true<br /> fi<br /> fi<br /> MSG="$TARGET BLOCKCOMMIT previous snapshot "<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMD="virsh blockcommit $DOMAIN $TARGET --active --pivot >> $LOG 2>&1"<br /> echo "Command: $CMD" >> $LOG<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> if [ $? -ne 0 ]; then<br /> ERR="Could not merge changes for disk $TARGET of $DOMAIN with blockcommit. VM may be in an invalid state."<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> echo "$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD" | mail -s "$SHCMD blockcommit Exception for $DOMAIN" $EMR<br /> if [[ $pause_domain_after_bc_fail == true && $pause_enabled == false ]]; then<br /> MSG="Try to pause domain $DOMAIN and retry bc"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh suspend $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't pause domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=true<br /> fi<br /> MSG="$TARGET BLOCKCOMMIT previous snapshot "<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMD="virsh blockcommit $DOMAIN $TARGET --active --pivot >> $LOG 2>&1"<br /> echo "Command: $CMD" >> $LOG<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> if [ $? -ne 0 ]; then<br /> ERR="Could not merge changes for disk $TARGET of $DOMAIN (paused) with blockcommit. VM may be in an invalid state."<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> echo "$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD" | mail -s "$SHCMD blockcommit Exception for $DOMAIN" $EMR<br /> else<br /> #if bc succes need to disable bj, so set to false<br /> enable_bj_attemts=false<br /> fi<br /> fi <br /> if [ $enable_bj_attemts == true ]; then<br /> if [[ $pause_while_bj_attemtps == true ]]; then<br /> MSG="Try to pause domain $DOMAIN first"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh suspend $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't pause domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=true<br /> fi<br /> else<br /> if [[ $pause_enabled == true && $VMSTATE == "running" ]]; then<br /> MSG="Resume domain $DOMAIN"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh resume $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't resume domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> fi<br /> <br /> for (( j=1; j<=$blockjob_retrycount; j++ )) do<br /> CMD="virsh blockjob --domain $DOMAIN --pivot $TARGET"<br /> echo "Command: $CMD" >> $LOG<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> if [ $? -ne 0 ]; then<br /> ERR="virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET failed"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> if [[ $j -eq $blockjob_retrycount ]]; then<br /> ERR="all blockjob attempt --domain $DOMAIN --pivot $TARGET failed."<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> echo "$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD" | mail -s "$SHCMD blockjob Exception for $DOMAIN" $EMR<br /> if [[ $pause_domain_after_bj_fail == true && $pause_enabled == false && $VMSTATE == "running" ]]; then<br /> MSG="Try to pause domain $DOMAIN first"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh suspend $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't pause domain $DOMAIN"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> echo "Command: $CMD" >> $LOG<br /> echo "Command: $CMD"<br /> eval "$CMD"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't blockjob --piovot $TARGET anyway, I'm giving up"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> echo "$ERR<br /> Host: $HOST<br /> Domain: $DOMAIN<br /> Command: $CMD" | mail -s "$SHCMD blockjob Exception for $DOMAIN" $EMR<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> fi<br /> MSG="Resume domain $DOMAIN"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh resume $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't resume domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> else<br /> BREAK=true<br /> ERRORORED=$(($ERRORED+1))<br /> break<br /> fi<br /> fi<br /> sleep $blockjob_delay<br /> else<br /> MSG="virsh blockjob attempt no $j --domain $DOMAIN --pivot $TARGET success"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> break<br /> fi<br /> done<br /> [ $BREAK == true ] && break<br /> fi<br /> fi<br /> if [[ $pause_enabled == true && $VMSTATE == "running" ]]; then<br /> MSG="Resume domain $DOMAIN"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> CMDst="virsh resume $DOMAIN"<br /> echo "Command: $CMDst" >> $LOG<br /> echo "Command: $CMDst"<br /> eval "$CMDst"<br /> if [ $? -ne 0 ]; then<br /> ERR="can't resume domain $DOMAIN, continue anyway"<br /> echo "$ERR" >> $LOG<br /> echo "$ERR"<br /> else<br /> pause_enabled=false<br /> fi<br /> fi<br /> #fi<br /> i=$i+1<br /> done<br /> [ $BREAK == true ] && continue<br /> <br /> # Now that the VM's disk image(s) have been successfully committed/pivoted to<br /> # back to the main disk image, remove the temporary snapshot image file(s)<br /> for BACKUP in $BACKUPIMAGES; do<br /> set -o noglob<br /> if [[ $BACKUP == *${SNAPPREFIX}* ]]; then<br /> set +o noglob<br /> CMD="rm -f $BACKUP >> $LOG 2>&1"<br /> MSG=" Deleting temporary image $BACKUP"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> MSG="Command: $CMD"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> eval "$CMD"<br /> fi<br /> set +o noglob<br /> done<br /> <br /> # capture the VM's definition in use at the time the backup was done<br /> CMD="virsh dumpxml $DOMAIN > $BACKUPFOLDER/$DOMAIN.xml 2>> $LOG"<br /> MSG="Command: $CMD"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> eval "$CMD"<br /> else<br /> # copy the VM's definition<br /> CMD="cp $PATH_LIBVIRT_QEMU/$DOMAIN.xml $BACKUPFOLDER/$DOMAIN.xml 2>> $LOG"<br /> MSG="Command: $CMD"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> eval "$CMD"<br /> fi<br /> <br /> <br /> MSG="---- Backup done $DOMAIN ---- $(date +'%d-%m-%Y %H:%M:%S') ----"<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> done<br /> MSG="$SHCMD: Finished backups at $(date +'%d-%m-%Y %H:%M:%S')<br /> ====================" >> $LOG<br /> echo "$MSG" >> $LOG<br /> echo "$MSG"<br /> <br /> exit $ERRORED<br /> <br /> </pre></div>

172.16.12.2 https://wiki.goedeke.de/index.php?title=AX41_NVMe&diff=196 AX41 NVMe 2023-04-06T18:20:15Z

<p>172.16.12.2: </p> <hr /> <div>Das Web-Interface zur Konfiguration ist erreichbar unter https://robot.hetzner.com<br /> <br /> Server specs:<br /> <pre><br /> Dedicated Root Server AX41-NVMe<br /> AMD Ryzen 5 3600 Hexa-Core "Matisse" (Zen2)<br /> 64 GB DDR4 RAM<br /> 2 x 1 TB NVMe SSD (Software-RAID 1)<br /> 1 Gbit/s Anbindung<br /> Standort HEL 1<br /> IPv4-Adresse: 95.217.144.66<br /> IPv6-Adresse: 2a01:4f9:4a:4ce3::2</pre><br /> <br /> [[Datei:Bildschirmfoto 2023-04-05 um 09.05.54.jpg|mini|links]]</div>

172.16.12.2 https://wiki.goedeke.de/index.php?title=AX41_NVMe&diff=195 AX41 NVMe 2023-04-06T18:19:42Z

<p>172.16.12.2: </p> <hr /> <div>Das Web-Interface zur Konfiguration ist erreichbar unter https://robot.hetzner.com<br /> <br /> Server specs:<br /> <pre><br /> Dedicated Root Server AX41-NVMe<br /> AMD Ryzen 5 3600 Hexa-Core "Matisse" (Zen2)<br /> 64 GB DDR4 RAM<br /> 2 x 1 TB NVMe SSD (Software-RAID 1)<br /> 1 Gbit/s Anbindung<br /> Standort HEL 1<br /> IPv4-Adresse: 95.217.144.66<br /> Pv6-Adresse: 2a01:4f9:4a:4ce3::2</pre><br /> <br /> [[Datei:Bildschirmfoto 2023-04-05 um 09.05.54.jpg|mini|links]]</div>

172.16.12.2 https://wiki.goedeke.de/index.php?title=Web3&diff=113 Web3 2023-04-03T15:33:00Z

<p>172.16.12.2: /* Server */</p> <hr /> <div><br /> == Server ==<br /> <br /> Virtuelle Maschine auf [[AX41 NVMe 1380159|KVM]]<br /> <br /> <pre>Name: web3<br /> Hipervisor: KVM<br /> Architecture: x86_64<br /> CPU: 1<br /> RAM: 2048<br /> Boot device: VirtIO Disk 1<br /> VirtIO Disk 1: 10.00 GiB (Source path: /storage/vms/web3_vda.img)<br /> VirtIO Disk 2: 512.00 MB Swap (Source path: /storage/vms/web3_vdb.img)<br /> VirtIO Disk 3: 30.00 GiB (Source path: /storage/vms/web3_vdc.img)<br /> Emulator: /usr/bin/kvm<br /> Chipset: i440FX<br /> Firmware: Bios<br /> <br /> IP Adresse intern: 172.16.10.20 (2001:470:1f0b:563:5054:ff:fe92:a6bc/64)<br /> <br /> </pre><br /> <br /> === Network ===<br /> <br /> Interface<br /> <br /> <pre># The loopback network interface<br /> auto lo eth0 eth0:0<br /> iface lo inet loopback<br /> <br /> # The primary network interface<br /> iface eth0 inet static<br /> address 172.16.10.6<br /> netmask 255.255.255.0<br /> network 172.16.10.0<br /> broadcast 172.16.10.255<br /> gateway 172.16.10.1<br /> dns-nameservers 172.16.10.1<br /> dns-search aquapool.de<br /> <br /> iface eth0:0 inet static<br /> address 172.16.10.20<br /> netmask 255.255.255.0<br /> </pre><br /> <br /> == Betriebssystem ==<br /> <br /> Linux web3 5.10.0-10-686-pae #1 SMP Debian 5.10.84-1 (2021-12-08) i686 GNU/Linux<br /> <br /> == Domain Hosting ==<br /> <br /> <pre>3sachen.de<br /> aquapool.de sub: ap2 aquacaetum<br /> blog.fourecks.de<br /> boxart.de<br /> fragheide.de<br /> globe-swift.de<br /> kayila.de<br /> schwimmbadbau.com<br /> schwimmbadtechnik.com<br /> schwimmbadtechnik.de<br /> terratermica.de<br /> topprofil.de<br /> yumeihomassage.de<br /> z1k.de</pre></div>

172.16.12.2