viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(phpipam): deploy phpIPAM for live IP address management

Browse source 
Lightweight IPAM with auto-discovery scanning every 15min via fping.
Replaces disabled NetBox (OOM'd). Uses existing MySQL InnoDB cluster
with Vault-rotated credentials. Cloudflare DNS + Authentik auth.

[ci skip]

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Viktor Barzin 2026-04-10 14:19:25 +00:00
parent d2fdc481ef
commit 4d3d3316ab
4 changed files with 277 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
stacks/vault/main.tf
View file

@ -466,7 +466,7 @@ resource "vault_database_secret_backend_connection" "mysql" {
allowed_roles = [
"mysql-speedtest", "mysql-wrongmove", "mysql-codimd",
"mysql-nextcloud", "mysql-shlink", "mysql-grafana",
"mysql-technitium"
"mysql-technitium", "mysql-phpipam"
]
mysql {
@ -553,6 +553,14 @@ resource "vault_database_secret_backend_static_role" "mysql_technitium" {
rotation_period = 604800
}
resource "vault_database_secret_backend_static_role" "mysql_phpipam" {
backend = vault_mount.database.path
db_name = vault_database_secret_backend_connection.mysql.name
name = "mysql-phpipam"
username = "phpipam"
rotation_period = 604800
}
# --- PostgreSQL Static Roles ---
/*