PKGDATA

openstack --os-cloud admin project create pkgdata --description "PKGDATA"

openstack --os-cloud admin role add member --project pkgdata --user remi

openstack --os-cloud pkgdata security group create --description '[PUBLIC] SSH from bastion' public-ssh
openstack --os-cloud pkgdata security group rule delete $(openstack --os-cloud pkgdata security group rule list public-ssh --egress --column ID --format value | xargs)
openstack --os-cloud pkgdata security group rule create public-ssh --remote-ip 163.172.110.29/32 --protocol tcp --dst-port 22 --description "SSH input from on002.pkgdata.net" --ingress

openstack --os-cloud pkgdata security group create --description '[PUBLIC] HAProxy from all' public-haproxy
openstack --os-cloud pkgdata security group rule delete $(openstack --os-cloud pkgdata security group rule list public-haproxy --egress --column ID --format value | xargs)
openstack --os-cloud pkgdata security group rule create public-haproxy --remote-ip 0.0.0.0/0 --protocol tcp --dst-port 80 --description "HTTP input from all" --ingress
openstack --os-cloud pkgdata security group rule create public-haproxy --remote-ip 0.0.0.0/0 --protocol tcp --dst-port 443 --description "HTTPS input from all" --ingress
openstack --os-cloud pkgdata security group rule create public-haproxy --remote-ip 0.0.0.0/0 --protocol tcp --dst-port 8081 --description "Stats input from all" --ingress

openstack --os-cloud pkgdata network create private-network --mtu 1350
openstack --os-cloud pkgdata subnet create private-subnet --network private-network --subnet-range 192.168.0.0/24 --gateway 192.168.0.1 --dns-nameserver 1.1.1.1 --dns-nameserver 8.8.8.8
openstack --os-cloud admin router add subnet router1 private-subnet

openstack --os-cloud pkgdata server create os001 --availability-zone Germany --flavor cpu4-ram8-disk20 --image debian-11-genericcloud-arm64_2022-11-21 --network private-network --security-group default --security-group public-ssh --security-group public-haproxy --key-name remi --user-data os1/user_data.txt

openstack --os-cloud admin floating ip create --project pkgdata public-network1 --port $(openstack --os-cloud pkgdata port list --server os001 --column ID --format value) --description "IP publique 1 PKGDATA"

openstack --os-cloud pkgdata volume create --size 100 --type lvm --description "/home for os001" --availability-zone hn005 os001-home
openstack --os-cloud pkgdata server add volume os001 os001-home

ssh os001
mv /home /home.bak
mkfs.ext4 /dev/sdb
tune2fs -O project -Q prjquota /dev/sdb

cat >> /etc/fstab <<EOF
UUID=11aeb1c7-e4ee-4abe-8716-f94bf670ad99 /home ext4 rw,discard,errors=remount-ro,x-systemd.growfs,prjquota 0 2
EOF

mkdir /home && mount /home
mv /home.bak/* /home/