---
title: Echo6 Network IP Allocation
type: reference
tags:
  - proxmox
aliases: []
related:
  - [[services]]
  - [[environment]]
  - [[caddy]]
  - [[headscale-onboard-node]]
  - [[meshtastic-headscale-runbook]]
updated: 2026-06-19
---
# Echo6 Network IP Allocation

## IP Ranges

| Range | Purpose |
|-------|---------|
| .1-.10 | Network Infrastructure (router, switches, APs) |
| .11-.99 | DHCP (phones, laptops, guests) |
| .100-.149 | LXC Containers |
| .150-.199 | VMs |
| .200-.224 | Security Cameras |
| .225-.239 | IoT/Embedded Devices |
| .240-.250 | Proxmox Hosts + Bare Metal Servers |
| .251-.254 | Meshtastic Nodes |

---

## Current Allocations

### Network Infrastructure (.1-.10)
| IP | Device | Notes |
|----|--------|-------|
| .1 | Router/Gateway | |
| .2-.10 | (available) | Switches, APs |

### LXC Containers (.100-.149)
| IP | Container | Host | Purpose |
|----|-----------|------|---------|
| .100 | meshmonitor (CT 100) | utility | MeshMonitor web UI |
| .101 | [[caddy]] (CT 101) | utility | Home reverse proxy |
| .102 | [[searxng]] (CT 102) | utility | Echo6 Search (SearXNG) |
| .103 | [[argus]] (CT 103) | utility | ARGUS OSINT platform |
| .104 | meshing-around (CT 104) | utility | Mesh bot + WebGUI |
| .106 | meshtastic-hs (CT 106) | utility | IdahoMesh Headscale |
| .107 | mesh-bridge (CT 107) | utility | Dual-tailscaled bridge |
| .109 | mmud (CT 109) | utility | MMUD game daemon + web dashboard |
| .111 | mmud-embr (CT 111) | utility | MMUD SIM: EMBR (game server) |
| .112 | mmud-dcrg (CT 112) | utility | MMUD SIM: DCRG (broadcast) |
| .113 | mmud-grst (CT 113) | utility | MMUD SIM: GRST (Grist barkeep) |
| .114 | mmud-mrn (CT 114) | utility | MMUD SIM: MRN (Maren healer) |
| .115 | mmud-trvl (CT 115) | utility | MMUD SIM: TRVL (Torval merchant) |
| .116 | mmud-wspr (CT 116) | utility | MMUD SIM: WSPR (Whisper sage) |
| .118 | [[archivist]] (CT 118) | utility | Signal/Matrix archive bot |
| .130 | [[recon]] (VM 1130) | data | RECON pipeline (migrated from CT 130) |
| .144 | meshai (CT 108) | utility | MeshAI assistant |
| .170 | peertube (CT 110) | media | PeerTube streaming |
| .182 | immich (CT 120) | cloud | Immich photos |
| .183 | nextcloud (CT 121) | cloud | Nextcloud AIO |

### edge1 LXC Containers (10.10.10.x, vmbr0) — mail-only host (5.189.158.149, rebuilt 2026-06-19)

edge1 (rebuilt Contabo VPS, 5.189.158.149 / Tailscale 100.64.0.40) runs Debian 12 + Proxmox 8.4.19, mail-only role. Same 10.10.10.0/24 subnet pattern on vmbr0 (gw 10.10.10.1); internal IP via `staticroute.service`.

| IP | Container | CTID | Tailscale | Purpose |
|----|-----------|------|-----------|---------|
| 10.10.10.2 | mailcow | CT 101 | — | Mailcow email server (privileged LXC; reached via host DNAT ports 25/465/587/110/143/993/995/4190 and host Caddy for mail/autodiscover/autoconfig.echo6.co → :8453) |

### edge2 LXC Containers (10.10.10.x, vmbr0) — permanent front door (184.174.35.153)

edge2 (Contabo Cloud VPS 184.174.35.153 / Tailscale 100.64.0.26) uses a separate 10.10.10.0/24 subnet on vmbr0 (gw 10.10.10.1). No DHCP — all IPs are static. Storage: `local` (dir, no local-lvm). **Front door for:** vault/forge/notes/auth/matrix/element/vpn/proxmox.echo6.co + idahomesh/intermountainmesh.

| IP | Container | CTID | Tailscale | Purpose |
|----|-----------|------|-----------|---------|
| 10.10.10.10 | pdm | CT 100 | 100.64.0.28 | Proxmox Datacenter Manager |
| 10.10.10.11 | wordpress | CT 101 | 100.64.0.31 | WordPress for intermountainmesh.com |
| 10.10.10.20 | vaultwarden | CT 102 | 100.64.0.33 | Vaultwarden password manager (migrated from Contabo 2026-06-16) |
| 10.10.10.21 | forgejo | CT 103 | 100.64.0.34 | Forgejo git server (migrated from Contabo 2026-06-16); git SSH → edge2 forgejo-ssh-dnat.service |
| 10.10.10.22 | livesync | CT 104 | 100.64.0.35 | LiveSync Obsidian sync (CouchDB + provisioner; migrated from Contabo 2026-06-16) |
| 10.10.10.23 | [[authentik]] | CT 105 | 100.64.0.36 | Authentik SSO platform (migrated from Contabo 2026-06-18) |
| 10.10.10.24 | matrix | CT 106 | 100.64.0.37 | Matrix stack (Synapse + MAS + Element + mautrix-signal; migrated from Contabo 2026-06-18) |
| 10.10.10.25 | headscale | CT 107 | 100.64.0.38 | Headscale + Headplane tailnet control plane (migrated from Contabo 2026-06-19) |
| 10.10.10.26 | mailcow-staging | CT 108 | — | Stopped Mailcow staging replica (fallback; prune after soak) |

### VMs (.150-.199)
| IP | VM | Host | Purpose |
|----|-----|------|---------|
| .150-.199 | (available) | | |

### Security Cameras (.200-.224)
| IP | Camera | Location |
|----|--------|----------|
| .200-.224 | (available) | |

### IoT/Embedded (.225-.239)
| IP | Device | Notes |
|----|--------|-------|
| .225-.238 | (available) | |
| .239 | (reserved) | Former TOC IP |

### Proxmox Hosts + Bare Metal (.240-.250)
| IP | Hostname | Role | Tailscale |
|----|----------|------|-----------|
| .240 | data | Proxmox - DB node | 100.64.0.20 |
| .241 | utility | Proxmox - Utility [[services]] | 100.64.0.19 |
| .242 | cloud | Proxmox - Cloud storage | 100.64.0.22 |
| .243 | media | Proxmox - Media server | 100.64.0.21 |
| .244 | echo6-toc | LLM/AI server | 100.64.0.5 |
| .245-.250 | (available) | | |

### Meshtastic Nodes (.251-.254)
| IP | Node | Notes |
|----|------|-------|
| .251-.252 | (available) | |
| .253 | AIDA-NEBRA | Raspberry Pi running meshtasticd |
| .254 | (available) | |

---

## Tailscale IPs (100.64.0.x)

| Tailscale IP | Device | Local IP |
|--------------|--------|----------|
| 100.64.0.5 | echo6-toc | 192.168.1.244 |
| 100.64.0.40 | contabo / edge1 (rebuilt 2026-06-19, mail-only) | 5.189.158.149 (external) |
| 100.64.0.18 | aida-nebra | 192.168.1.253 |
| 100.64.0.19 | utility | 192.168.1.241 |
| 100.64.0.20 | data | 192.168.1.240 |
| 100.64.0.21 | media | 192.168.1.243 |
| 100.64.0.22 | cloud | 192.168.1.242 |
| 100.64.0.26 | edge2 | 184.174.35.153 (external) |
| 100.64.0.28 | pdm (CT 100 on edge2) | 10.10.10.10 (vmbr0) |
| 100.64.0.33 | vaultwarden (CT 102 on edge2) — node id 45 | 10.10.10.20 (vmbr0) |
| 100.64.0.34 | forgejo (CT 103 on edge2) — node id 46 | 10.10.10.21 (vmbr0) |
| 100.64.0.35 | livesync (CT 104 on edge2) — hostname `livesync` | 10.10.10.22 (vmbr0) |
| 100.64.0.36 | authentik (CT 105 on edge2) — node id 48 | 10.10.10.23 (vmbr0) |
| 100.64.0.37 | matrix (CT 106 on edge2) — hostname `matrix` | 10.10.10.24 (vmbr0) |
| 100.64.0.38 | headscale (CT 107 on edge2) — hostname `headscale` | 10.10.10.25 (vmbr0) |

---

## Notes

- DHCP range starts at .11 to leave room for network infra
- LXC containers get .100-.149 for easy identification
- Meshtastic nodes at .251-.254 (max 4 hardware nodes)
- AIDA-NEBRA at .253 is technically a Meshtastic node (runs meshtasticd)

---

*Last updated: 2026-06-19 — Added edge1 section (rebuilt Contabo VPS, 5.189.158.149 / 100.64.0.40, mail-only, Mailcow CT 101 at 10.10.10.2); added edge2 CT 108 (mailcow-staging, stopped); Tailscale table: contabo-mailcow entry replaced with edge1 at 100.64.0.40; previously added edge2 CTs 102–107*
