claudetools/.claude/memory/reference_ix_server_access.md at 8885f0086d9d0642c742d8dbce5b7dfbdf1b41f2

Files

Mike Swanson f98b111193 docs(wiki): full IX server inventory from live SSH

Expand wiki/systems/ix-server.md with a 2026-06-05 live SSH inventory:
- Host: CloudLinux 9.7, cPanel/WHM 134, 64-core Xeon Gold 6130, 62 GiB,
  4.4 T /home; Apache 2.4.67, MariaDB 10.11.16, ea-php 5.6-8.5,
  Exim 4.99.4, Dovecot 2.4.2, BIND 9.16.
- 72 cPanel accounts / 185 domains / 101 WordPress; full account ->
  primary-domain -> disk map (the "where does client X live" reference).
- ACG subdomain docroots (radio, community/Flarum, analytics/Matomo,
  portal, support, etc.) under the azcomputerguru account.
- GuruRMM agent enrolled (gururmm-agent.service).
- Backups appear unconfigured (/backup ~178M vs 1.6T /home) - flagged.
- SSH key auth from GURU-5070 now works; updated reference_ix_server_access
  memory (was stale: claimed key auth not set up) + index summary.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-05 17:58:10 -07:00

1.7 KiB

Raw Blame History

name: IX server access — network + SSH description: How to reach ix.azcomputerguru.com (172.16.3.10) — Tailscale-on means it's directly reachable, no separate VPN. SSH KEY AUTH from GURU-5070 now works (verified 2026-06-05); sshpass+password is only the fallback. Also enrolled in GuruRMM (gururmm-agent.service). Full inventory: wiki/systems/ix-server.md. type: reference

Network reachability

Host: ix.azcomputerguru.com / 172.16.3.10 (also 172.16.1.39)
Access: directly reachable when Tailscale is on. No separate VPN connection required. External 72.194.62.5:22 is firewalled — internal only.
Also enrolled in GuruRMM (gururmm-agent.service, binary /usr/local/bin/gururmm-agent, config /etc/gururmm/agent.toml) — drivable via /rmm when SSH isn't handy.

SSH

User: root
SSH key auth: WORKS from GURU-5070 (verified 2026-06-05 via system OpenSSH, internal IP, Tailscale up):
```
/c/Windows/System32/OpenSSH/ssh.exe -o BatchMode=yes root@172.16.3.10 'whmapi1 listaccts'
```
Password fallback: vault infrastructure/ix-server.sops.yaml (root password). Use sshpass only if key auth ever breaks:
```
sshpass -p "$PASSWORD" ssh -o StrictHostKeyChecking=no -o PubkeyAuthentication=no root@172.16.3.10
```
Account-level (gurushow) paths from scripts: paramiko with look_for_keys=False, allow_agent=False (that account's key auth is disabled).

What's on it

Full systems inventory (host specs, web/mail/DB stack versions, 72 cPanel accounts → domains → disk, ACG subdomain docroots, backup gap) is documented in wiki/systems/ix-server.md (live SSH inventory 2026-06-05). cPanel 134, CloudLinux 9.7, 64-core Xeon, 4.4 T /home. reference_radio_website is hosted here.

1.7 KiB Raw Blame History

Network reachability

SSH

What's on it

1.7 KiB

Raw Blame History