Onboard mx1 mail host and factor out per-host public IPs

- Register mx1 in the inventory and as a direct-SSH `internet` host; give it
  a static public IPv6 (2a01:4ff:2f0:1963::1).
- Point the cnx.email MX (plus SPF/DMARC) at mx1 and add its A record.
- Bring mx1 into monitoring: import exporters, add it to the mesh map and the
  node scrape job so its host metrics and journald reach control.
- Add a clan-mx1 Hetzner firewall: inbound SMTP + ZeroTier + ICMP, no public
  SSH (admin rides the mesh like the other hosts). 587/465/993 held for now.
- Extract per-host public IPv4/IPv6 into modules/hosts.nix, consumed by
  clan.nix's internet hosts and each machine's cnx.staticIPv6, so each address
  is declared once instead of being duplicated across configs.
- docs: add mx1 to the machines table.

This commit is contained in:

Berwn

2026-06-18 11:53:14 +07:00

parent 2c89ab913c

commit 6e4178df04

11 changed files with 94 additions and 23 deletions

									
										modules/monitoring/server.nix
									
		+1
		
												View File
												
				@@ -45,6 +45,7 @@ in

				            (target "control" "127.0.0.1" 9100)

				            (target "ns1" (v6 mesh.hosts.ns1) 9100)

				            (target "ns2" (v6 mesh.hosts.ns2) 9100)

				            (target "mx1" (v6 mesh.hosts.mx1) 9100)

				          ];

				        }

				        {