38 lines
2.4 KiB
Markdown
38 lines
2.4 KiB
Markdown
---
|
|
name: infra-office-network
|
|
description: ACG office LAN infrastructure — IPs, hosts, roles, and post-power-failure recovery
|
|
metadata:
|
|
type: project
|
|
---
|
|
|
|
ACG office LAN is 172.16.0.0/22, routed via Tailscale through pfSense node `pfsense-2` (100.119.153.74).
|
|
|
|
**Key hosts:**
|
|
| Host | IP | SSH | Role |
|
|
|------|----|-----|------|
|
|
| pfSense | 172.16.0.1 | port 2248, user admin | Router, DNS (Unbound), Tailscale subnet router |
|
|
| Jupiter | 172.16.3.20 | port 22, user root | Unraid NAS — all VMs + Docker containers |
|
|
| Uranus | 172.16.3.21 | (no key) | OwnCloud additional storage only — NOT a proxy |
|
|
| GuruRMM | 172.16.3.30 | port 22, user guru | PHYSICAL box (Ubuntu 26.04) — took the .30 IP when the Jupiter VM was retired 2026-06-11; runs GuruRMM, Coord API, MariaDB/PostgreSQL. Old VM parked at .46 (rollback) |
|
|
| Pluto | 172.16.3.36 | (Windows) | Windows Server 2019 VM on Jupiter — MSI build server |
|
|
|
|
**Why:** How to apply: check these IPs before assuming what's where. .21 is NOT the Seafile proxy — NPM on .20 is.
|
|
|
|
**Docker on Jupiter (.20):**
|
|
- `npm` — Nginx Proxy Manager (ports 1880/7818/18443)
|
|
- `seafile` + `seafile-mysql` + `seafile-elasticsearch` + `seafile-memcached` — Seafile stack (port 8082)
|
|
- `gitea` — port 3000 (also accessed as 172.16.3.20:3000 or via SSH port forward from GuruRMM VM at .30:3000)
|
|
|
|
**NPM → 443 routing:** iptables PREROUTING on Jupiter: `dpt:443 → 172.17.0.2:443` (NPM container). Persisted in `/boot/config/go`. DNS `sync.azcomputerguru.com` → 172.16.3.20.
|
|
|
|
**VMs on Jupiter (virsh):** GuruRMM, Unifi, OwnCloud, Claude-Builder (running); Windows 7, Windows Server 2016, Windows Server 2016_Template (shut off).
|
|
|
|
**Neptune (ACG infra, physically at Dataforth D2):**
|
|
- neptune.acghosting.com | internal 172.16.3.11 | external 67.206.163.124
|
|
- Exchange Server 2016 — active mail server for multiple ACG-hosted clients
|
|
- Physically colocated at Dataforth's D2 facility, NOT at ACG office
|
|
- Access from ACG office: must route through D2TESTNAS (192.168.0.9) because Dataforth's UDM runs a subnet overlapping ACG office LAN (both use 172.16.x.x range), making direct routing ambiguous
|
|
- **TODO:** Resubnet Dataforth UDM to a non-overlapping range to fix routing and simplify Neptune access
|
|
|
|
**Why:** How to apply: see [[power-failure-runbook]] for full post-outage recovery steps. Neptune is NOT on ACG office LAN despite the 172.16.x.x IP — always route via D2TESTNAS or Dataforth VPN.
|