graphene-os-server-infrastructure/hosts.sh

declare -Ar hosts_reserved_ports=(
    [staging.attestation.app]=8080
    [attestation.app]=8080
    [matrix.grapheneos.org]=8008
    [0.grapheneos.network]=7275
    [1.grapheneos.network]=7275
    [2.grapheneos.network]=7275
    [3.grapheneos.network]=7275
)

declare -Ar hosts_ssh_users=(
    [staging.attestation.app]="root attestation"
    [attestation.app]="root attestation"
    [discuss.grapheneos.org]="root flarum-admin"
)

declare -Ar hosts_journald_system_max_use=(
    [0.grapheneos.org]=16G
    [1.grapheneos.org]=16G
    [2.grapheneos.org]=16G
    [3.grapheneos.org]=16G
    [0.grapheneos.network]=16G
    [1.grapheneos.network]=16G
    [2.grapheneos.network]=16G
    [3.grapheneos.network]=16G
    [0.releases.grapheneos.org]=8G
    [1.releases.grapheneos.org]=8G
    [2.releases.grapheneos.org]=8G
    [3.releases.grapheneos.org]=8G
    [4.releases.grapheneos.org]=8G
    [5.releases.grapheneos.org]=8G
    [6.releases.grapheneos.org]=8G
    [7.releases.grapheneos.org]=8G
)

declare -Ar hosts_journald_max_retention_sec=(
    [ns1.staging.grapheneos.org]=4day
    [ns1.grapheneos.org]=4day
    [0.ns2.grapheneos.org]=4day
    [1.ns2.grapheneos.org]=4day
    [2.ns2.grapheneos.org]=4day
    [0.grapheneos.network]=4day
    [1.grapheneos.network]=4day
    [2.grapheneos.network]=4day
    [3.grapheneos.network]=4day
)

declare -Ar hosts_ipv4_address=(
    [ns1.staging.grapheneos.org]=198.98.56.238
    [ns1.grapheneos.org]=51.161.34.158
    [0.ns2.grapheneos.org]=198.98.53.141
    [1.ns2.grapheneos.org]=205.185.124.155
    [2.ns2.grapheneos.org]=107.189.3.168
    [mail.grapheneos.org]=192.99.98.22
    [staging.grapheneos.org]=199.195.250.78
    [0.grapheneos.org]=192.99.43.50
    [1.grapheneos.org]=209.141.35.164
    [2.grapheneos.org]=51.178.136.41
    [3.grapheneos.org]=51.79.160.212
    [0.grapheneos.network]=51.79.54.68
    [1.grapheneos.network]=209.141.37.35
    [2.grapheneos.network]=146.59.144.170
    [3.grapheneos.network]=51.79.165.181
    [0.releases.grapheneos.org]=167.114.114.114
    [1.releases.grapheneos.org]=51.79.74.15
    [2.releases.grapheneos.org]=51.222.159.48
    [3.releases.grapheneos.org]=51.222.140.199
    [4.releases.grapheneos.org]=141.94.71.158
    [5.releases.grapheneos.org]=141.94.71.72
    [6.releases.grapheneos.org]=135.125.183.155
    [7.releases.grapheneos.org]=141.95.0.242
    [matrix.grapheneos.org]=51.79.51.42
    [discuss.grapheneos.org]=51.161.11.34
    [grapheneos.social]=51.222.30.159
    [staging.attestation.app]=198.98.57.157
    [attestation.app]=51.79.50.249
)

declare -Ar hosts_ipv6_address=(
    [ns1.staging.grapheneos.org]=2605:6400:10:c41:de92:c534:326a:711a
    [ns1.grapheneos.org]=2607:5300:205:200::eaa
    [0.ns2.grapheneos.org]=2605:6400:10:102e:95bc:89ef:2e7f:49bb
    [1.ns2.grapheneos.org]=2605:6400:20:1c8f:a0c9:372d:482e:945b
    [2.ns2.grapheneos.org]=2605:6400:30:ec25:102c:af6d:5be:1eb8
    [mail.grapheneos.org]=2607:5300:205:200::94f
    [staging.grapheneos.org]=2605:6400:10:9d6:6d84:e183:acda:16d7
    [0.grapheneos.org]=2607:5300:201:3100::1aae
    [1.grapheneos.org]=2605:6400:20:1131:8088:e08:84e6:632
    [2.grapheneos.org]=2001:41d0:304:200::a087
    [3.grapheneos.org]=2402:1f00:8000:800::25ba
    [0.grapheneos.network]=2607:5300:205:200::b44
    [1.grapheneos.network]=2605:6400:20:387:72d4:dab9:a369:f351
    [2.grapheneos.network]=2001:41d0:304:200::df95
    [3.grapheneos.network]=2402:1f00:8000:800::e14
    [0.releases.grapheneos.org]=2607:5300:201:3100::6210
    [1.releases.grapheneos.org]=2607:5300:205:200::2441
    [2.releases.grapheneos.org]=2607:5300:205:200::3f46
    [3.releases.grapheneos.org]=2607:5300:205:200::39fe
    [4.releases.grapheneos.org]=2001:41d0:304:200::14ff
    [5.releases.grapheneos.org]=2001:41d0:304:200::a687
    [6.releases.grapheneos.org]=2001:41d0:701:1100::2ec9
    [7.releases.grapheneos.org]=2001:41d0:701:1100::3e56
    [matrix.grapheneos.org]=2607:5300:205:200::26e1
    [discuss.grapheneos.org]=2607:5300:205:200::3df
    [grapheneos.social]=2607:5300:205:200::2706
    [staging.attestation.app]=2605:6400:10:aa9:1c0f:44d3:da15:c0ec
    [attestation.app]=2607:5300:205:200::86a
)

readonly hosts_dns=(
    ns1.staging.grapheneos.org
    ns1.grapheneos.org
    {0..2}.ns2.grapheneos.org
)

readonly hosts_staging=(
    ns1.staging.grapheneos.org
    staging.grapheneos.org
    staging.attestation.app
)

readonly hosts_certbot=(
    ns1.staging.grapheneos.org
    ns1.grapheneos.org
    0.ns2.grapheneos.org
    mail.grapheneos.org
    staging.grapheneos.org
    0.grapheneos.org
    0.grapheneos.network
    0.releases.grapheneos.org
    matrix.grapheneos.org
    discuss.grapheneos.org
    grapheneos.social
    staging.attestation.app
    attestation.app
)

readonly hosts_grapheneos=(
    staging.grapheneos.org
    {0..3}.grapheneos.org
)

readonly hosts_releases=(
    {0..7}.releases.grapheneos.org
)

readonly hosts_network=(
    {0..3}.grapheneos.network
)

readonly hosts_attestation=(
    staging.attestation.app
    attestation.app
)

readonly hosts_web=(
    "${hosts_dns[@]}"
    mail.grapheneos.org
    "${hosts_grapheneos[@]}"
    "${hosts_network[@]}"
    "${hosts_releases[@]}"
    matrix.grapheneos.org
    discuss.grapheneos.org
    grapheneos.social
    "${hosts_attestation[@]}"
)

readonly hosts_all=(
    "${hosts_web[@]}"
)

readonly hosts_buyvm=(
    ns1.staging.grapheneos.org
    {0..2}.ns2.grapheneos.org
    staging.grapheneos.org
    1.grapheneos.org
    1.grapheneos.network
    staging.attestation.app
)

readonly hosts_ovh=(
    ns1.grapheneos.org
    mail.grapheneos.org
    {0,2,3}.grapheneos.org
    {0,2,3}.grapheneos.network
    {0..7}.releases.grapheneos.org
    matrix.grapheneos.org
    discuss.grapheneos.org
    grapheneos.social
    attestation.app
)