la-cc / hetzner-proxmox-single

I'm Artem Lajko. A passionate and driven Platform Engineer with a proven track record in designing, developing, and implementing efficient and scalable cloud infrastructures.

---

⚡️ A quick introduction

• 🔭 I’m currently working with at Hamburg Port Authority (HPA) and I´m responsible for utilizing cutting-edge technologies like Kubernetes 🖥️ to adapt the port's services, simplifying the lives of all involved 🚢👥👍.

---

🤝🏻 Connect, Follow, Start Chat

---

💻 Languages, Frameworks, Tools

---

✍🏻 Medium Blogs

➡️ more blogs...

hetzner-proxmox-single's Issues

IPV6

Thanks for the script.
I think you need to make a variable for the IPV6 address too. I'm testing it with:

#!/bin/bash

read -p "MAIN_SERVER_IP: " MAINSERVERIP
read -p "MAIN_SERVER_GATEWAY_ADRESS: " GATEWAYADRESS
read -p "NETMASK: " NETMASK
read -p "BROADCASTIP: " BROADCASTIP
read -p "ADDITIONAL_IP_ADRESS: " ADD_IP_ADRESS
read -p "NETWORK_INTERFACE: " NETWORK_INTERFACE

read -p "MAIN_SERVER_IPV6: " MAINSERVERIPV6

echo "

Hetzner Online GmbH installimage

source /etc/network/interfaces.d/*

auto lo
iface lo inet loopback
iface lo inet6 loopback

iface ${NETWORK_INTERFACE} inet manual

up ip route add -net up ip route add -net ${GATEWAYADRESS} netmask ${NETMASK} gw ${GATEWAYADRESS} vmbr0
up sysctl -w net.ipv4.ip_forward=1
up sysctl -w net.ipv4.conf.${NETWORK_INTERFACE}.send_redirects=0
up sysctl -w net.ipv6.conf.all.forwarding=1
up ip route add 192.168.0.0/16 via ${ADD_IP_ADRESS} dev vmbr0
up ip route add 172.16.0.0/12 via ${ADD_IP_ADRESS} dev vmbr0
up ip route add 10.0.0.0/8 via ${ADD_IP_ADRESS} dev vmbr0

iface ${NETWORK_INTERFACE} inet6 static
address $(MAINSERVERIPV6)
netmask 64
gateway fe80::1

auto vmbr0
iface vmbr0 inet static
address ${MAINSERVERIP}
netmask 32
gateway ${GATEWAYADRESS}
broadcast ${BROADCASTIP}
bridge-ports ${NETWORK_INTERFACE}
bridge-stp off
bridge-fd 0
pointopoint ${GATEWAYADRESS}
#WAN

Virtual switch for DMZ

(connect your firewall/router KVM instance and private DMZ hosts here)

auto vmbr1
iface vmbr1 inet manual
bridge_ports none
bridge_stp off
bridge_fd 0
#LAN0

" >interfaces

cat interfaces

while true; do
read -p "Config correct? [yes][no]: " yn
case $yn in
[Yy])
echo ""
break
;;
[Nn]) exit ;;
*) echo "Please answer yes or no." ;;
esac
done

uncoment when ok

mv /etc/network/interfaces /etc/network/interfaces.old

mv interfaces /etc/network/interfaces

echo "The network can be restarted with the following command: /etc/init.d/networking restart "

P.D. Sorry, not used on formatting text here.

Issue with routing in script

Hi,

After executing your script, I am not able to connect anymore to the server (ping = request timed out).
The issue lays within the routing applied to the script.

As I created a new server, I immediately requested a new IP address. This resulted in the same subnet as the one of my main IP address.
(info:
Main IP: xx.yy.zz.210
Gateway: xx.yy.zz.193
Netmask: 255.255.255.192
Broadcast: xx.yy.zz.255
extra IP: xx.yy.zz.208
)

as it adds a route:

iface wan inet manual
up ip route add -net up ip route add -net xx.yy.zzz.193 netmask 255.255.255.192 gw xx.yy.zz.193 vmbr0

this results routing all the trafic to the vmbr0.

(for privacy reasons i altered the first octets in the ip addresses to xx.yy.zz)

(tested with the network_config.sh and network_config_updated.sh)

Adding VLANs

Hi,
I just want to say thank you for the awesome blog. I have been playing with this setup for a while now and it has been great!

I was just wondering what changes I need to configure on Proxmox bridges to add VLANs support. I couldn't figure it out since just started learning about VLANs 🙄

I want to isolate some servers from the internet so I figured out VLANs is the way to go. I would appreciate any advice if you think there is a better option.

Thanks!