Mike Swanson
f98b111193
Expand wiki/systems/ix-server.md with a 2026-06-05 live SSH inventory: - Host: CloudLinux 9.7, cPanel/WHM 134, 64-core Xeon Gold 6130, 62 GiB, 4.4 T /home; Apache 2.4.67, MariaDB 10.11.16, ea-php 5.6-8.5, Exim 4.99.4, Dovecot 2.4.2, BIND 9.16. - 72 cPanel accounts / 185 domains / 101 WordPress; full account -> primary-domain -> disk map (the "where does client X live" reference). - ACG subdomain docroots (radio, community/Flarum, analytics/Matomo, portal, support, etc.) under the azcomputerguru account. - GuruRMM agent enrolled (gururmm-agent.service). - Backups appear unconfigured (/backup ~178M vs 1.6T /home) - flagged. - SSH key auth from GURU-5070 now works; updated reference_ix_server_access memory (was stale: claimed key auth not set up) + index summary. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
28 lines
1.7 KiB
Markdown
28 lines
1.7 KiB
Markdown
---
|
|
name: IX server access — network + SSH
|
|
description: How to reach ix.azcomputerguru.com (172.16.3.10) — Tailscale-on means it's directly reachable, no separate VPN. SSH KEY AUTH from GURU-5070 now works (verified 2026-06-05); sshpass+password is only the fallback. Also enrolled in GuruRMM (gururmm-agent.service). Full inventory: wiki/systems/ix-server.md.
|
|
type: reference
|
|
---
|
|
|
|
## Network reachability
|
|
|
|
- **Host:** `ix.azcomputerguru.com` / `172.16.3.10` (also `172.16.1.39`)
|
|
- **Access:** directly reachable when Tailscale is on. No separate VPN connection required. External `72.194.62.5:22` is firewalled — internal only.
|
|
- **Also enrolled in GuruRMM** (`gururmm-agent.service`, binary `/usr/local/bin/gururmm-agent`, config `/etc/gururmm/agent.toml`) — drivable via `/rmm` when SSH isn't handy.
|
|
|
|
## SSH
|
|
|
|
- **User:** `root`
|
|
- **SSH key auth: WORKS from GURU-5070** (verified 2026-06-05 via system OpenSSH, internal IP, Tailscale up):
|
|
```bash
|
|
/c/Windows/System32/OpenSSH/ssh.exe -o BatchMode=yes root@172.16.3.10 'whmapi1 listaccts'
|
|
```
|
|
- **Password fallback:** vault `infrastructure/ix-server.sops.yaml` (root password). Use sshpass only if key auth ever breaks:
|
|
```bash
|
|
sshpass -p "$PASSWORD" ssh -o StrictHostKeyChecking=no -o PubkeyAuthentication=no root@172.16.3.10
|
|
```
|
|
- **Account-level (`gurushow`) paths from scripts:** paramiko with `look_for_keys=False, allow_agent=False` (that account's key auth is disabled).
|
|
|
|
## What's on it
|
|
Full systems inventory (host specs, web/mail/DB stack versions, 72 cPanel accounts → domains → disk, ACG subdomain docroots, backup gap) is documented in **`wiki/systems/ix-server.md`** (live SSH inventory 2026-06-05). cPanel 134, CloudLinux 9.7, 64-core Xeon, 4.4 T /home. [[reference_radio_website]] is hosted here.
|