Re: on to letsencrypt

[Ed Greshko]

On 01/05/2021 17:28, Jack Craig wrote:
> On Sat, May 1, 2021 at 2:19 AM Ed Greshko <[e-mail] > wrote:
> 2.  Configure your DNS server with, I think the correct term is "views", such that an
> internal system query returns internal IP addresses (10.0.0.X) and an internal query
> allows recursion.
>
> #1 is easy
> #2 requires research and work.
>
>
> I'll hold off deciding this for the moment, i need some sleep, ...
>
> Still, i got a start on views/zones and /etc/named.conf is currently setup as ..
>
> *view "wan-view"
> {
> zone "linuxlighthouse.com http://linuxlighthouse.com" {
>            type master;
>            file "/var/named/linuxlighthouse.com.db";
>            allow-update { none; };
> };
>
> zone "." IN {
>            type hint;
>            file "named.ca http://named.ca";
>         };
> };*

BTW, if you decide to go ahead with using views it would be helpful if you have
a system on the "outside" for you to use to test queries.

As I understand it, all your "internal" systems have 10.0.0.X IP addresses.

But, I recall that your ws host does have a virbr0 interface. Meaning it is already
configured for the creation of Virtual Machines.

So, you could deploy a VM which would acquire a 192.168.122.X address.
Then you treat that IP range as part of the WAN while your 10.0.0.X addresses
are your LAN.  Now you can test views from "inside" as well as "outside".