maulanahirzan/ServerConfigs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added Configs

Browse source
This commit is contained in:
Alauddin Maulana Hirzan 2024-07-25 03:22:44 +07:00
commit 919c3c1ac5
Signed by: maulanahirzan
GPG key ID: 484DAC952787FA13
2 changed files with 79 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

40
pf.conf Normal file
View file

@ -0,0 +1,40 @@
table <jails> persist
ext_if = "em0" # macro for external interface - use tun0 for PPPoE
int_if = "bridge0" # macro for internal interface
localnet = $int_if:network
nat on $ext_if from $localnet to any -> ($ext_if)
nat on wg0 from $localnet to any -> (wg0)
rdr-anchor "rdr/*"
## Manually Redirect to Jail
# Grafana
rdr pass on em0 inet proto tcp from any to any port = 3000 -> 192.168.200.51 port 3000
rdr pass on wg0 inet proto tcp from any to any port = 3000 -> 192.168.200.51 port 3000
# CouchDB
rdr pass on em0 inet proto tcp from any to any port = 5984 -> 192.168.200.52 port 5984
rdr pass on wg0 inet proto tcp from any to any port = 5984 -> 192.168.200.52 port 5984
# Hosting
# SSH
rdr pass on em0 inet proto tcp from any to any port = 2024 -> 192.168.200.53 port 22
rdr pass on wg0 inet proto tcp from any to any port = 2024 -> 192.168.200.53 port 22
# Web
rdr pass on em0 inet proto tcp from any to any port = 8081 -> 192.168.200.53 port 8081
rdr pass on wg0 inet proto tcp from any to any port = 8081 -> 192.168.200.53 port 8081
# MariaDB
rdr pass on em0 inet proto tcp from any to any port = 3306 -> 192.168.200.53 port 3306
rdr pass on wg0 inet proto tcp from any to any port = 3306 -> 192.168.200.53 port 3306
# Webmin
rdr pass on em0 inet proto tcp from any to any port = 10000 -> 192.168.200.53 port 10000
rdr pass on wg0 inet proto tcp from any to any port = 10000 -> 192.168.200.53 port 10000
# MQTT
rdr pass on em0 inet proto tcp from any to any port = 1883 -> 192.168.200.54 port 1883
rdr pass on wg0 inet proto tcp from any to any port = 1883 -> 192.168.200.54 port 1883
# Uptime-Kuma
rdr pass on em0 inet proto tcp from any to any port = 3001 -> 192.168.200.55 port 3001
rdr pass on wg0 inet proto tcp from any to any port = 3001 -> 192.168.200.55 port 3001

39
rc.conf Normal file
View file

@ -0,0 +1,39 @@
clear_tmp_enable="YES"
hostname="FTIK-FreeBSD-Server"
sshd_enable="YES"
moused_enable="YES"
ntpd_enable="YES"
ntpd_sync_on_start="YES"
powerd_enable="YES"
# Set dumpdev to "AUTO" to enable crash dumps, "NO" to disable
dumpdev="AUTO"
zfs_enable="YES"
gateway_enable="YES"
# Ethernet
ifconfig_em0="DHCP"
# Wireguard
wireguard_enable="YES"
wireguard_interfaces="wg0"
# Firewall
pf_enable=yes
pf_rules="/etc/pf.conf"
pflog_enable=yes
# Bridge
cloned_interfaces="bridge0"
ifconfig_bridge0="inet 192.168.200.1 netmask 255.255.255.0"
# Bastille
bastille_enable="YES"
bastille_list="couchdb grafana hosting mqtt"
# Linux Jail
linux_enable="YES"
kld_list="nvidia"
# TTY
allscreens_flags="-f 8x16"