[x] eno1, the physical nic, will have an ipv4 address of 192.168.20.190 either statically or by reservation on the router
[x] eno1 will have an ipv6 address
[x] eno1 will have a sub-interface on vlan 23 (my DMZ vlan) without an ip
[x] br1-23 will be a bridge interface connected to vlan 23 without an ip
[x] a microvm systemd-nspawn container named nginx-proxy will be created
[x] nginx-proxy will have one nic connected to br1-23
[x] nginx-proxy will have an ipv4 address of 192.168.23.21
[x] nginx-proxy will accept connections on ports 80 & 443
[x] nginx-proxy will combine name based server blocks (virtual hosts) with Let’s Encrypt certificates and proxy connections to backend services running elsewhere.
genebean
commented
3 months ago
This will implement the following:
microvmsystemd-nspawn container named nginx-proxy will be created