Damien/infra-scripts
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove unused timezone configuration

Browse Source 
Use advertise-routes instead of advertise-exit-node for Tailscale
Update UFW rule to quote port variable
This commit is contained in:
Damien
2026-05-30 15:57:56 +02:00
parent 4df3ba57a4
commit 1caf3737fd
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
netlab/install.sh
View File

@@ -35,7 +35,6 @@ check_debian() {
# Configuration variables (can be overridden via environment) # Configuration variables (can be overridden via environment)
HOSTNAME="${NETLAB_HOSTNAME:-netlab}" HOSTNAME="${NETLAB_HOSTNAME:-netlab}"
SSH_PORT="${SSH_PORT:-15222}" SSH_PORT="${SSH_PORT:-15222}"
TIMEZONE="${TZ:-Europe/Paris}"
TAILSCALE_AUTHKEY="${TAILSCALE_AUTHKEY:-}" TAILSCALE_AUTHKEY="${TAILSCALE_AUTHKEY:-}"
main() { main() {
@@ -57,9 +56,9 @@ main() {
log_info "Connecting to Tailscale..." log_info "Connecting to Tailscale..."
if [[ -n "$TAILSCALE_AUTHKEY" ]]; then if [[ -n "$TAILSCALE_AUTHKEY" ]]; then
sudo tailscale up --ssh --advertise-exit-node --auth-key="$TAILSCALE_AUTHKEY" sudo tailscale up --ssh --advertise-routes=172.16.0.0/24 --auth-key="$TAILSCALE_AUTHKEY"
else else
sudo tailscale up --ssh --advertise-exit-node sudo tailscale up --ssh --advertise-routes=172.16.0.0/24
fi fi
log_info "Configuring sysctl for exit-node and containerlab support..." log_info "Configuring sysctl for exit-node and containerlab support..."
@@ -95,7 +94,7 @@ EOF
sudo ufw --force reset > /dev/null sudo ufw --force reset > /dev/null
sudo ufw default deny incoming > /dev/null sudo ufw default deny incoming > /dev/null
sudo ufw default allow outgoing > /dev/null sudo ufw default allow outgoing > /dev/null
sudo ufw allow ${SSH_PORT}/tcp > /dev/null sudo ufw allow "${SSH_PORT}"/tcp > /dev/null
sudo ufw allow in on tailscale0 > /dev/null sudo ufw allow in on tailscale0 > /dev/null
# Temporarily allow SSH port 22 during setup (safety net) # Temporarily allow SSH port 22 during setup (safety net)
sudo ufw allow 22/tcp > /dev/null sudo ufw allow 22/tcp > /dev/null