Services Exposed to the Internet - wizzdom
¶
Firstly, it's important to mention that Redbrick is currently split in 2 parts:
- Redbrick 2.0 a.k.a. "old redbrick" (on
136.206.15.0/24
) - New Redbrick which includes Aperture (on
136.206.16.0/24
)
Old Redbrick¶
- motherlode -
136.206.15.250
- OS: NixOS 22.05
- Services:
- VM for dcuclubsandsocs.ie
- hardcase -
136.206.15.3
- OS: NixOS 22.05
- Services:
apache httpd
:- websites from the webtree (including, but not limited to):
- all user's websites
<user>.redbrick.dcu.ie
- other websites are mentioned in the nix-configs repo
- all user's websites
- legacy websites (pretty much anything that isn't dockerized)
- thecollegeview.ie
- thelookonline.dcu.ie
- websites from the webtree (including, but not limited to):
- email (
postfix
anddovecot
) - mailing lists (
mailman
) *.redbrick.dcu.ie
also points here
- paphos -
136.206.15.53
- OS: Ubuntu 14.04 LTS
- Services:
- DNS (bind)
New Redbrick¶
- azazel -
136.206.16.24
- OS: Debian 12
bookworm
- Services:
- primary ssh login box for users (see Logging in)
- jump-box for admins
- OS: Debian 12
- pygmalion -
136.206.16.25
- OS: Debian 12
bookworm
- Services:
- secondary ssh login box for users (see Logging in)
- jump-box for admins
- OS: Debian 12
Aperture¶
In aperture, things are done a little differently than on the other network. Instead of having a single host per service, aperture is configured to allow services to be allocated dynamically across all 3 servers using nomad, consul and traefik.
- glados -
136.206.16.4
- wheatley -
136.206.16.5
- chell -
136.206.16.6
- all 3 boxes are identical
- OS: Debian 11
bullseye
- Services:
- simple
nginx
containers with the mascot of each server in aperture: - the amikon.me website for DCU AMS in an
nginx
container - timetable.redbrick.dcu.ie a timetable that actually works, 10x better than the official DCU timetable
- Redbrick main site redbrick.dcu.ie
- HedgeDoc at: md.redbrick.dcu.ie
- Admin API at: api.redbrick.dcu.ie
- Wetty at: wetty.redbrick.dcu.ie
- DCU Solar Racing Website solarracing.ie
- Redbrick Password Vault (Vaultwarden) at: vault.redbrick.dcu.ie
- URL Shortener
- Plausible Analytics at plausible.redbrick.dcu.ie
- simple
- Notes:
- All web traffic is routed through traefik on the bastion VM
- All new services will be deployed here
- Most services here are deployed as docker containers but there's no reason you couldn't use any of the other nomad drivers
- For more information see redbrick's Nomad repo