From eda477a854dcb34cd158042eed5c384af7a1585c Mon Sep 17 00:00:00 2001 From: Nico Schottelius Date: Thu, 17 Feb 2022 21:37:47 +0100 Subject: [PATCH 01/10] Add product: DNS servers as a service --- .../dns-server-as-a-service/contents.lr | 90 +++++++++++++++++++ 1 file changed, 90 insertions(+) create mode 100644 content/u/products/dns-server-as-a-service/contents.lr diff --git a/content/u/products/dns-server-as-a-service/contents.lr b/content/u/products/dns-server-as-a-service/contents.lr new file mode 100644 index 0000000..6d5e611 --- /dev/null +++ b/content/u/products/dns-server-as-a-service/contents.lr @@ -0,0 +1,90 @@ +_discoverable: no +--- +_hidden: no +--- +title: DNS Server (as a service) +--- +subtitle: Manage your own DNS records +--- +headline1: Unlimited number of domains +--- +headline2: GitOps flow +--- +headline3: Worry free DNS +--- +header_background_color: #1393B4 +--- +header_text_color: text-light +--- +nav_classes: navbar-dark +--- +FIXMEimage: /u/image/cards/supportsystem.jpg +--- +feature1_title: Scalable +--- +feature1_text: +Need just a single DNS server? Easy, we got you covered. +Need 2, 3 or many more DNS servers? No problem, deploy and manage them +exactly the same. +--- +feature2_title: Made for developers with GitOps +--- +feature2_text: +How should one manage DNS zones? What kind of configuration utility +should one use? There is a simple answer to this: none at all. Simply +commit your DNS zones to a git repository, push it - done. Everything +else is taken care of by the our infrastructure. +--- +feature3_title: +--- +feature3_text: Don't worry - be happy +With the hosted DNS server you can focus on your +core business. The system upgrade and maintaenance is taken cared by us. +--- +content1_text: + +## DNS Servers as a Service (DNSSaaS) + +This service allows you to manage DNS entries on your own DNS +servers. You manage zone files and zone records in the standard BIND +format. + +### Not included + +This service does not register a domain or manage your SSL +certificates. It is purely allowing you to manage your DNS zones files +without having to run your own DNS server. + +## Features + +The provided DNS servers are reachable via IPv6 and IPv4. +The DNS servers are configured to pull + +## How to use the DNS servers + +There are a few simple steps required: + +* Create a git repository anywhere you want - for instance on + [code.ungleich.ch](https://code.ungleich.ch) with an [ungleich + account](https://account.ungleich.ch). +* Create the zone files in the directory "zones/" +* Every file in the zones/ directory becomes a zone served by the DNS server + + +## Fully Open Source and IPv6 enabled + +The DNS is completely based on Open +Source Software components. From the operating system to the software +stack, nothing is closed. This service is based +on [Knot-DNS](https://www.knot-dns.cz/). + +## Zero Carbon + +The DNS servers are running in our [Zero Carbon +Data Center.](httsp://datacenterlight.ch) + +## How to order + +As the support system can be setup for very different use cases, we +recommend to contact us at **support -at- ungleich.ch** to discuss how +you would like to have your system setup. From 1014d2357e2c1a0f6b39c3a0c7babaab2b62f36e Mon Sep 17 00:00:00 2001 From: Nico Schottelius Date: Thu, 17 Feb 2022 21:45:35 +0100 Subject: [PATCH 02/10] +title for topic --- .../products/dns-server-as-a-service/contents.lr | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/content/u/products/dns-server-as-a-service/contents.lr b/content/u/products/dns-server-as-a-service/contents.lr index 6d5e611..408f89c 100644 --- a/content/u/products/dns-server-as-a-service/contents.lr +++ b/content/u/products/dns-server-as-a-service/contents.lr @@ -6,7 +6,7 @@ title: DNS Server (as a service) --- subtitle: Manage your own DNS records --- -headline1: Unlimited number of domains +headline1: Unlimited domains --- headline2: GitOps flow --- @@ -35,7 +35,7 @@ should one use? There is a simple answer to this: none at all. Simply commit your DNS zones to a git repository, push it - done. Everything else is taken care of by the our infrastructure. --- -feature3_title: +feature3_title: Concentrate your core business --- feature3_text: Don't worry - be happy With the hosted DNS server you can focus on your @@ -58,7 +58,12 @@ without having to run your own DNS server. ## Features The provided DNS servers are reachable via IPv6 and IPv4. -The DNS servers are configured to pull +The DNS servers are configured to pull from the configured repository +every 5 minutes. + +If you order more than one DNS server, we offer to place them into +different data centers. + ## How to use the DNS servers @@ -83,6 +88,11 @@ on [Knot-DNS](https://www.knot-dns.cz/). The DNS servers are running in our [Zero Carbon Data Center.](httsp://datacenterlight.ch) +## Pricing + +The hosted DNS server including IPv6 and IPv4 reachability is 17 +CHF/month with a 25 CHF setup fee. + ## How to order As the support system can be setup for very different use cases, we From b54913df2926633ca8c2909795c6efb4d1d11c92 Mon Sep 17 00:00:00 2001 From: Nico Schottelius Date: Thu, 17 Feb 2022 21:50:49 +0100 Subject: [PATCH 03/10] ++ symlinks --- content/u/products/dns-server-as-a-service/contents.lr | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/content/u/products/dns-server-as-a-service/contents.lr b/content/u/products/dns-server-as-a-service/contents.lr index 408f89c..ab769f3 100644 --- a/content/u/products/dns-server-as-a-service/contents.lr +++ b/content/u/products/dns-server-as-a-service/contents.lr @@ -73,7 +73,9 @@ There are a few simple steps required: [code.ungleich.ch](https://code.ungleich.ch) with an [ungleich account](https://account.ungleich.ch). * Create the zone files in the directory "zones/" -* Every file in the zones/ directory becomes a zone served by the DNS server +* Every file in the zones/ directory becomes a zone served by the DNS + server +* Symbolic links are supported ## Fully Open Source and IPv6 enabled From 87b308d278aa10294e081d9f7e4badc6641b36f7 Mon Sep 17 00:00:00 2001 From: Nico Schottelius Date: Thu, 17 Feb 2022 21:53:26 +0100 Subject: [PATCH 04/10] ++ information --- content/u/products/dns-server-as-a-service/contents.lr | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/content/u/products/dns-server-as-a-service/contents.lr b/content/u/products/dns-server-as-a-service/contents.lr index ab769f3..9418c7c 100644 --- a/content/u/products/dns-server-as-a-service/contents.lr +++ b/content/u/products/dns-server-as-a-service/contents.lr @@ -55,6 +55,10 @@ This service does not register a domain or manage your SSL certificates. It is purely allowing you to manage your DNS zones files without having to run your own DNS server. +The DNS server does not support IXFR or AXFR request. The +distribution of DNS information is assumed to be done by other means +such as git. + ## Features The provided DNS servers are reachable via IPv6 and IPv4. @@ -75,7 +79,9 @@ There are a few simple steps required: * Create the zone files in the directory "zones/" * Every file in the zones/ directory becomes a zone served by the DNS server -* Symbolic links are supported +* The zone ("domain") is infered from the filename +* Symbolic links are supported, so you can have different zones with + the same content ## Fully Open Source and IPv6 enabled From e5107e84ff57d2e5e20cef2097848fec34e604cd Mon Sep 17 00:00:00 2001 From: Nico Schottelius Date: Thu, 17 Feb 2022 22:03:55 +0100 Subject: [PATCH 05/10] [products] phase in VPN --- .../dns-server-as-a-service/contents.lr | 5 +- .../vpn-server-as-a-service/contents.lr | 111 ++++++++++++++++++ 2 files changed, 113 insertions(+), 3 deletions(-) create mode 100644 content/u/products/vpn-server-as-a-service/contents.lr diff --git a/content/u/products/dns-server-as-a-service/contents.lr b/content/u/products/dns-server-as-a-service/contents.lr index 9418c7c..9473b1e 100644 --- a/content/u/products/dns-server-as-a-service/contents.lr +++ b/content/u/products/dns-server-as-a-service/contents.lr @@ -43,7 +43,7 @@ core business. The system upgrade and maintaenance is taken cared by us. --- content1_text: -## DNS Servers as a Service (DNSSaaS) +## DNS Server as a Service (DNSSaaS) This service allows you to manage DNS entries on your own DNS servers. You manage zone files and zone records in the standard BIND @@ -66,8 +66,7 @@ The DNS servers are configured to pull from the configured repository every 5 minutes. If you order more than one DNS server, we offer to place them into -different data centers. - +different data centers and IP ranges. ## How to use the DNS servers diff --git a/content/u/products/vpn-server-as-a-service/contents.lr b/content/u/products/vpn-server-as-a-service/contents.lr new file mode 100644 index 0000000..a2e485c --- /dev/null +++ b/content/u/products/vpn-server-as-a-service/contents.lr @@ -0,0 +1,111 @@ +_discoverable: no +--- +_hidden: no +--- +title: VPN Server (as a service) +--- +subtitle: Manage your own VPN connections +--- +headline1: Your own VPN server +--- +headline2: GitOps flow +--- +headline3: Worry free VPN +--- +header_background_color: #1393B4 +--- +header_text_color: text-light +--- +nav_classes: navbar-dark +--- +FIXMEimage: /u/image/cards/supportsystem.jpg +--- +feature1_title: Scalable +--- +feature1_text: +Need just a single VPN server? Easy, we got you covered. +Need 2, 3 or many more VPN servers? No problem, deploy and manage them +exactly the same. +--- +feature2_title: Made for developers with GitOps +--- +feature2_text: +How should one manage VPN zones? What kind of configuration utility +should one use? There is a simple answer to this: none at all. Simply +commit your VPN zones to a git repository, push it - done. Everything +else is taken care of by the our infrastructure. +--- +feature3_title: Concentrate your core business +--- +feature3_text: Don't worry - be happy +With the hosted VPN server you can focus on your +core business. The system upgrade and maintaenance is taken cared by us. +--- +content1_text: + +## VPN Server as a Service (VPNSaaS) + +This service allows you to manage VPN connections on your own VPN +servers. You manage zone files and zone records in the standard BIND +format. + +### Not included + +This service does not register a domain or manage your SSL +certificates. It is purely allowing you to manage your VPN zones files +without having to run your own VPN server. + +The VPN server does not support IXFR or AXFR request. The +distribution of VPN information is assumed to be done by other means +such as git. + +## Features + +The provided VPN servers are reachable via IPv6 and IPv4. +The VPN servers are configured to pull from the configured repository +every 5 minutes. + +If you order more than one VPN server, we offer to place them into +different data centers and IP ranges. + +## How to use the VPN servers + +There are a few simple steps required: + +* Create a git repository anywhere you want - for instance on + [code.ungleich.ch](https://code.ungleich.ch) with an [ungleich + account](https://account.ungleich.ch). +* Create the zone files in the directory "zones/" +* Every file in the zones/ directory becomes a zone served by the VPN + server +* The zone ("domain") is infered from the filename +* Symbolic links are supported, so you can have different zones with + the same content + + +## Fully Open Source and IPv6 enabled + +The VPN is completely based on Open +Source Software components. From the operating system to the software +stack, nothing is closed. This service is based +on [Knot-VPN](https://www.knot-vpn.cz/). + +## Zero Carbon Hosting + +The VPN servers are running in our [Zero Carbon +Data Center.](httsp://datacenterlight.ch) + +## Pricing + +Your own VPN server is available in 2 versions: + +* IPv6 only VPN server with a /48 network: + +including IPv6 and IPv4 reachability is 17 +CHF/month with a 25 CHF setup fee. + +## How to order + +As the support system can be setup for very different use cases, we +recommend to contact us at **support -at- ungleich.ch** to discuss how +you would like to have your system setup. From 0125b7d2570723adfbab0a772648da3a51d11134 Mon Sep 17 00:00:00 2001 From: Nico Schottelius Date: Thu, 17 Feb 2022 22:35:27 +0100 Subject: [PATCH 06/10] products/vpn: add introduction --- .../vpn-server-as-a-service/contents.lr | 70 +++++++++++-------- 1 file changed, 41 insertions(+), 29 deletions(-) diff --git a/content/u/products/vpn-server-as-a-service/contents.lr b/content/u/products/vpn-server-as-a-service/contents.lr index a2e485c..aaadb72 100644 --- a/content/u/products/vpn-server-as-a-service/contents.lr +++ b/content/u/products/vpn-server-as-a-service/contents.lr @@ -20,12 +20,11 @@ nav_classes: navbar-dark --- FIXMEimage: /u/image/cards/supportsystem.jpg --- -feature1_title: Scalable +feature1_title: Ready for teams --- feature1_text: -Need just a single VPN server? Easy, we got you covered. -Need 2, 3 or many more VPN servers? No problem, deploy and manage them -exactly the same. + + --- feature2_title: Made for developers with GitOps --- @@ -46,22 +45,15 @@ content1_text: ## VPN Server as a Service (VPNSaaS) This service allows you to manage VPN connections on your own VPN -servers. You manage zone files and zone records in the standard BIND -format. - -### Not included - -This service does not register a domain or manage your SSL -certificates. It is purely allowing you to manage your VPN zones files -without having to run your own VPN server. - -The VPN server does not support IXFR or AXFR request. The -distribution of VPN information is assumed to be done by other means -such as git. +servers. You manage client configurations using the standard +Wireguard configuration format. ## Features The provided VPN servers are reachable via IPv6 and IPv4. + +They are available in IPv6 only and dual stack (IPv6 + IPv4) versions. + The VPN servers are configured to pull from the configured repository every 5 minutes. @@ -75,20 +67,39 @@ There are a few simple steps required: * Create a git repository anywhere you want - for instance on [code.ungleich.ch](https://code.ungleich.ch) with an [ungleich account](https://account.ungleich.ch). -* Create the zone files in the directory "zones/" -* Every file in the zones/ directory becomes a zone served by the VPN - server -* The zone ("domain") is infered from the filename -* Symbolic links are supported, so you can have different zones with - the same content +* Create a wireguard configuration file named wg0.conf +## VPN Server modes + +The needs for VPN protection are different depending on your situation +and we show some common modes on how to use the VPN server. + +### IPv6 only + +If you want to enable your clients with IPv6, you can assign +IPv6 addresses or IPv6 subnetworks to the clients. + +### Dedicated Public IPv4 + +If you want your client to be reachable via IPv4 from the outside, you +can make them reachable by assigning the client a dedicated public +IPv4 address. + +This mode can be combined with the IPv6 mode above. + +### Shared Public IPv4 + +If you want your your clients to reach the IPv4 Internet via a shared +public IPv4 address. This is the "typical VPN mode". + +This mode can be combined with the IPv6 mode above. ## Fully Open Source and IPv6 enabled The VPN is completely based on Open Source Software components. From the operating system to the software stack, nothing is closed. This service is based -on [Knot-VPN](https://www.knot-vpn.cz/). +on [Wireguard](https://www.wireguard.com/). ## Zero Carbon Hosting @@ -99,13 +110,14 @@ Data Center.](httsp://datacenterlight.ch) Your own VPN server is available in 2 versions: -* IPv6 only VPN server with a /48 network: +* IPv6 only VPN server with a /48 network: 37 CHF/month +* Dual stack (IPv6+IPv4) VPN server with a /48 network: 46.5 CHF/month -including IPv6 and IPv4 reachability is 17 -CHF/month with a 25 CHF setup fee. +Every additional public IPv6 /48 network is 5 CHF/month. +Every additional public IPv4 address is 9.5 CHF/month. + +The one time setup fee is 25 CHF. ## How to order -As the support system can be setup for very different use cases, we -recommend to contact us at **support -at- ungleich.ch** to discuss how -you would like to have your system setup. +You can order via **support -at- ungleich.ch**. From 53dedbba1ad8088cc6223ff67f195607ca39a363 Mon Sep 17 00:00:00 2001 From: Nico Schottelius Date: Thu, 17 Feb 2022 22:41:21 +0100 Subject: [PATCH 07/10] --typo --- content/u/products/vpn-server-as-a-service/contents.lr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/u/products/vpn-server-as-a-service/contents.lr b/content/u/products/vpn-server-as-a-service/contents.lr index aaadb72..b9592c6 100644 --- a/content/u/products/vpn-server-as-a-service/contents.lr +++ b/content/u/products/vpn-server-as-a-service/contents.lr @@ -104,7 +104,7 @@ on [Wireguard](https://www.wireguard.com/). ## Zero Carbon Hosting The VPN servers are running in our [Zero Carbon -Data Center.](httsp://datacenterlight.ch) +Data Center.](https://datacenterlight.ch) ## Pricing From a5e048570db05a88885b7656fd0d7a5c8971a4e2 Mon Sep 17 00:00:00 2001 From: Nico Schottelius Date: Fri, 25 Feb 2022 19:42:02 +0100 Subject: [PATCH 08/10] Update jobs section --- .../projects/jobs-hacks-bounties/contents.lr | 42 ++++++++++++------- 1 file changed, 27 insertions(+), 15 deletions(-) diff --git a/content/u/projects/jobs-hacks-bounties/contents.lr b/content/u/projects/jobs-hacks-bounties/contents.lr index 7e2fe29..90cf20b 100644 --- a/content/u/projects/jobs-hacks-bounties/contents.lr +++ b/content/u/projects/jobs-hacks-bounties/contents.lr @@ -77,7 +77,12 @@ Create a django project that provides the following features: ## Jobs -Currently there are no permanent job openings. +We are currently looking for three new engineers to join us: + +* Senior DevOps (K8S, cdist, Alpine Linux) Engineer (20-100% role) +* Senior Developer (Python, Django) (20-100% role) + + ## Bounties @@ -106,20 +111,6 @@ updates for some time, so we offer the following bounties: * Eboard does not work in NAT64 scenarios, because it does not have IPv6 support ** Bounty successful when a new eboard release was made with it -### Bounty 2: Alpine Linux installable in IPv6 only networks - -Alpine Linux currently does not start rdnssd in the installer nor does -it have the ndisc package installed. - -The installer in particular needs to assign itself IPv6 addresses -(SLAAC should already work), needs to accept DNS servers and search -suffix from router advertisements (requires rdnssd running) and -wget/curl need to have IPv6 support to retrieve files via IPv6. - -Present a short video that successfully shows the updated upstream -installer working in an IPv6 only network to install Alpine -Linux. Bounty is __100 CHF__. - ### Bounty 3: Enable IPv6 only in the Linux kernel As you might remember, we created @@ -176,3 +167,24 @@ On the wireguard mailing list it was discussed whether a peer can have multiple IP addresses. This could be a proper solution, as it also addresses the case when a VPN server has multiple IPv6 or IPv4 addresses. + +## Historic Bounties + +### Bounty 2: Alpine Linux installable in IPv6 only networks + +Alpine Linux currently does not start rdnssd in the installer nor does +it have the ndisc package installed. + +The installer in particular needs to assign itself IPv6 addresses +(SLAAC should already work), needs to accept DNS servers and search +suffix from router advertisements (requires rdnssd running) and +wget/curl need to have IPv6 support to retrieve files via IPv6. + +Present a short video that successfully shows the updated upstream +installer working in an IPv6 only network to install Alpine +Linux. Bounty is __100 CHF__. + +``` +Solution: Alpine Linux now ships with dhcpcd enabling IPv6 address +acquisition as well as name resolution. +``` From 6c295b640f03e89cdf4cf956b92e27a2427feab2 Mon Sep 17 00:00:00 2001 From: Nico Schottelius Date: Sun, 27 Feb 2022 16:08:19 +0100 Subject: [PATCH 09/10] ++h4g / mini --- content/u/projects/hack4glarus/contents.lr | 2 +- .../mini-hack4glarus-2022-01/contents.lr | 24 +++++++++++++++++++ 2 files changed, 25 insertions(+), 1 deletion(-) create mode 100644 content/u/projects/hack4glarus/mini-hack4glarus-2022-01/contents.lr diff --git a/content/u/projects/hack4glarus/contents.lr b/content/u/projects/hack4glarus/contents.lr index e2d8eae..3bcf8d4 100644 --- a/content/u/projects/hack4glarus/contents.lr +++ b/content/u/projects/hack4glarus/contents.lr @@ -6,7 +6,7 @@ image: /u/image/cards/hack4glarus.png --- description1: -##The Hackathon of Glarus +## The Hackathon of Glarus Hack4Glarus is the first hackathon of Glarus. It is your chance to meet & hack with geniuses of Switzerland and the world. To our diff --git a/content/u/projects/hack4glarus/mini-hack4glarus-2022-01/contents.lr b/content/u/projects/hack4glarus/mini-hack4glarus-2022-01/contents.lr new file mode 100644 index 0000000..72e53f8 --- /dev/null +++ b/content/u/projects/hack4glarus/mini-hack4glarus-2022-01/contents.lr @@ -0,0 +1,24 @@ +title: Mini Hack4Glarus 2022-03 +--- +subtitle: The first Hack4Glarus since Corona started +--- +description1: + +## Hack4Glarus in the Corona times + +As many of you know, before Corona we had the bi-yearly +[Hack4Glarus](https://hack4glarus.ch) in Digital Glarus. +For everyone's protection, we cancelled all events. While the health +aspect was the main reason to cancel the event, the logistic aspects +(potentially quarantine 14 days on arrival, potentially quarantine 14 +days after departure) also played a big role for us to cancel the +event. + +## 2022: Mini-Hack4Glarus No. 1 + +The measures are slowly being removed in many countries, including +Switzerland. While we are taking it a bit slower at ungleich in +regards to opening up, we also want to try to slowly normalise our +lives. + +For this reason we are launching a series of Mini-Hack4Glarus From f666f98b1b2b15402cd9e97043a65ae9021910d9 Mon Sep 17 00:00:00 2001 From: Nico Schottelius Date: Sun, 27 Feb 2022 16:38:29 +0100 Subject: [PATCH 10/10] ++notes on application. --- .../mini-hack4glarus-2022-01/contents.lr | 31 +++++++++++++++++-- models/product.ini | 4 +++ 2 files changed, 33 insertions(+), 2 deletions(-) diff --git a/content/u/projects/hack4glarus/mini-hack4glarus-2022-01/contents.lr b/content/u/projects/hack4glarus/mini-hack4glarus-2022-01/contents.lr index 72e53f8..741af20 100644 --- a/content/u/projects/hack4glarus/mini-hack4glarus-2022-01/contents.lr +++ b/content/u/projects/hack4glarus/mini-hack4glarus-2022-01/contents.lr @@ -14,11 +14,38 @@ aspect was the main reason to cancel the event, the logistic aspects days after departure) also played a big role for us to cancel the event. -## 2022: Mini-Hack4Glarus No. 1 +## Introducting the Mini-Hack4Glarus The measures are slowly being removed in many countries, including Switzerland. While we are taking it a bit slower at ungleich in regards to opening up, we also want to try to slowly normalise our lives. -For this reason we are launching a series of Mini-Hack4Glarus +For this reason we are launching a series of Mini-Hack4Glarus at the +[Hacking Villa Diesbach](/u/projects/hacking-villa). Each of the +Mini-Hack4Glarus will be limited in terms of participants to keep it +comfortable for everyone attending. + + +## 2022-03: Mini-Hack4Glarus No. 1 + +The first Mini-Hack4Glarus will take place from the 18th of March to +20th of March. It is limited to 5 participants, so that we can ensure +that everyone can sleep in their own room and that we have enough +space. + +The topic of the Mini-Hack4Glarus No. 1 is: +"**Corona: been there, done that**". The objective is to discuss the +learning of the Corona pandemic, which learnings there are +from it and which role Open Source and offsite places like Digital +Glarus can play in our future lives. + +If you are interested in participating, submit a proposal +in the [Mini +Hack4Glarus +2022-03 Redmine +project](https://redmine.ungleich.ch/projects/mini-hack4glarus-2022-03/issues/new) +until 2022-03-11. + +If you do not yet have an ungleich account, you can create one +on [account.ungleich.ch](https://account.ungleich.ch). diff --git a/models/product.ini b/models/product.ini index a0fa0d7..a46efc9 100644 --- a/models/product.ini +++ b/models/product.ini @@ -198,3 +198,7 @@ type = url [fields.image] label = Index Image type = url + +[children] +model = product +order_by = title \ No newline at end of file