auto: docs sync 2026-07-13T12:00:23+00:00
Files changed: engine/.embcache.json engine/changelog.md engine/lint-report.md vault/.trash/2026-06-19.md vault/docs/hardware/environment.md vault/docs/hardware/ip-allocation.md vault/docs/matrix/archivist.md vault/docs/matrix/matrix_host.md vault/docs/matrix/mautrix_signal.md vault/docs/matrix/synapse.md vault/docs/matrix/synapse_retention_discovery.md vault/docs/navi/cc-rules.md vault/docs/navi/deployment.md vault/docs/navi/themes.md vault/docs/services/ots-setup.md vault/docs/services/services.md vault/docs/services/usenet.md vault/docs/software/authentik.md vault/docs/software/caddy.md vault/docs/software/central.md vault/docs/software/dns.md vault/docs/software/geo-tools.md vault/docs/software/navi.md vault/docs/software/recon.md vault/docs/software/searxng.md vault/glossary.md vault/notes/echo6-landing-page-data-export.md vault/notes/ia-download-queue.md vault/projects/advbbs-project.md vault/projects/argus.md vault/projects/deploy-livesync.md vault/projects/fleet-patch-audit.md vault/projects/fleet-platform-baseline.md vault/projects/matrix-synapse-deployment.md vault/projects/meshai-config-hot-apply.md vault/projects/meshai-region-routing-plan.md vault/projects/meshai.md vault/projects/meshcore-transport.md vault/projects/meshtastic-headscale-runbook.md vault/projects/mmud-project.md vault/projects/nominatim-v5-reimport.md vault/runbooks/add-peertube-channel.md vault/runbooks/authentik-access-groups.md vault/runbooks/authentik-create-invitation.md vault/runbooks/authentik-oidc-application.md vault/runbooks/authentik-upgrade.md vault/runbooks/central-deploy-cutover.md vault/runbooks/ct-runbook.md vault/runbooks/edge2-access-reference.md vault/runbooks/expose-service-contabo.md vault/runbooks/expose-service-edge2.md vault/runbooks/expose-service-home.md vault/runbooks/fleet-magicdns-resolved-migration.md vault/runbooks/headless-browser-page-verification.md vault/runbooks/headscale-oidc-boot-order.md vault/runbooks/headscale-onboard-node.md vault/runbooks/ia-cli-reference.md vault/runbooks/ia-download-mirror.md vault/runbooks/idahomesh-bridge-setup.md vault/runbooks/idahomesh-vpn-device-setup.md vault/runbooks/lxc-service-migration.md vault/runbooks/mailcow-create-mailbox.md vault/runbooks/meshai-prod-compose-override.md vault/runbooks/meshmonitor-password-reset.md vault/runbooks/meshtastic-sidecar-node.md vault/runbooks/meshtasticd-sim-nodes-runbook.md vault/runbooks/nordvpn-lxc.md vault/runbooks/peertube-remote-runner.md vault/runbooks/pg-backup.md vault/runbooks/pi-nas-omv-runbook.md vault/runbooks/pipeline-patterns.md vault/runbooks/proxmox-create-ubuntu-vm.md vault/runbooks/proxmox-onboard-node.md vault/runbooks/pymc-repeater-kiss-tnc-reenumeration.md vault/runbooks/recon-operations.md vault/runbooks/recon-service-integration.md vault/runbooks/syncthing-add-node.md vault/runbooks/toc-cortex-pve9.2-update.md vault/session-resume/SESSION-HANDOFF-meshai-test.md
This commit is contained in:
echo6-autocommit
parent
7931172cb7
commit
ef8b1e0bd9
79 changed files with 448 additions and 360 deletions
|
|
@ -8,9 +8,9 @@ related:
|
|||
- [[authentik-oidc-application]]
|
||||
- [[mailcow-create-mailbox]]
|
||||
- [[caddy]]
|
||||
- [[echo6-landing-page-data-export]]
|
||||
- [[authentik-access-groups]]
|
||||
updated: 2026-07-11
|
||||
- [[edge2-access-reference]]
|
||||
- [[headscale-oidc-boot-order]]
|
||||
updated: 2026-07-13
|
||||
---
|
||||
# Authentik SSO Configuration
|
||||
|
||||
|
|
|
|||
|
|
@ -2,15 +2,15 @@
|
|||
title: "Caddy & DNS Reference"
|
||||
type: reference
|
||||
tags:
|
||||
- dns
|
||||
- mesh
|
||||
aliases: []
|
||||
related:
|
||||
- [[services]]
|
||||
- [[ip-allocation]]
|
||||
- [[headscale-onboard-node]]
|
||||
- [[expose-service-home]]
|
||||
- [[lxc-service-migration]]
|
||||
updated: 2026-07-11
|
||||
- [[expose-service-edge2]]
|
||||
- [[authentik]]
|
||||
updated: 2026-07-13
|
||||
---
|
||||
# Caddy & DNS Reference
|
||||
|
||||
|
|
@ -64,7 +64,7 @@ journalctl -u caddy -f
|
|||
|
||||
| Domain | Backend | Pattern | Service |
|
||||
|--------|---------|---------|---------|
|
||||
| mesh.echo6.co | 192.168.1.100:8080 | Local IP | meshmonitor (Authentik forward auth) |
|
||||
| mesh.echo6.co | 192.168.1.100:8080 | Local IP | meshmonitor ([[authentik]] forward auth) |
|
||||
| echo6.co | 100.64.0.15:8080 | Tailscale | Echo6 Search ([[searxng]]) + Matrix well-known |
|
||||
| search.echo6.co | — | — | 301 redirect to echo6.co |
|
||||
| nas.echo6.co | 100.64.0.21:80 | Tailscale | OpenMediaVault (pi-nas) |
|
||||
|
|
@ -92,7 +92,7 @@ ssh root@192.168.1.241 'pct exec 101 -- journalctl -u caddy -f'
|
|||
|
||||
## dnsmasq (Tailscale Split DNS) — HISTORICAL / OBSOLETE
|
||||
|
||||
> **Not in use.** Tailnet split-DNS for echo6.co was retired: echo6.co now resolves via public GoDaddy DNS, not internal dnsmasq (see [[services]]). This section documents the OLD setup that ran on the original Contabo VPS (100.64.0.1) before its 2026-06-19 rebuild into edge1 (mail-only). That host and its 100.64.0.1 tailnet identity are dead — do not repoint these records to edge1 or edge2; kept below for historical reference only.
|
||||
> **Not in use.** Tailnet split-DNS for echo6.co was retired: echo6.co now resolves via public GoDaddy [[dns]], not internal dnsmasq (see [[services]]). This section documents the OLD setup that ran on the original Contabo VPS (100.64.0.1) before its [[2026-06-19]] rebuild into edge1 (mail-only). That host and its 100.64.0.1 tailnet identity are dead — do not repoint these records to edge1 or edge2; kept below for historical reference only.
|
||||
|
||||
**Config:** `/etc/dnsmasq.d/tailscale-dns.conf` on Contabo (dead host, pre-2026-06-19)
|
||||
**Listens on:** 100.64.0.1:53 (dead)
|
||||
|
|
@ -114,11 +114,11 @@ ssh root@192.168.1.241 'pct exec 101 -- journalctl -u caddy -f'
|
|||
| requests.echo6.co | 100.64.0.8 | Jellyseer (via utility Caddy) |
|
||||
| wt.echo6.co | 100.64.0.1 | WATCHTOWER ops dashboard |
|
||||
| ai.echo6.co | 100.64.0.8 | Open WebUI (via utility Caddy) |
|
||||
| matrix.echo6.co | 100.64.0.1 | Matrix Synapse (via Contabo Caddy) |
|
||||
| matrix.echo6.co | 100.64.0.1 | Matrix [[synapse]] (via Contabo Caddy) |
|
||||
| element.echo6.co | 100.64.0.1 | Element Web (via Contabo Caddy) |
|
||||
| echo6.co | 100.64.0.8 | Echo6 Search homepage (via utility Caddy) |
|
||||
| files.echo6.co | 100.64.0.8 | [[recon]] PDF library (via utility Caddy) |
|
||||
| recon.echo6.co | 100.64.0.8 | RECON dashboard (via utility Caddy) |
|
||||
| recon.echo6.co | 100.64.0.8 | [[recon]] dashboard (via utility Caddy) |
|
||||
| lidarr.echo6.co | 100.64.0.8 | Lidarr music automation (via utility Caddy) |
|
||||
| navidrome.echo6.co | 100.64.0.8 | Navidrome music server (via utility Caddy) |
|
||||
|
||||
|
|
@ -172,7 +172,7 @@ dig +short forge.echo6.co @100.64.0.1 # Test
|
|||
| jellyfin | Jellyfin |
|
||||
| mesh | MeshMonitor |
|
||||
| nas | OpenMediaVault (pi-nas) |
|
||||
| search | SearXNG (redirects to echo6.co) |
|
||||
| search | [[searxng]] (redirects to echo6.co) |
|
||||
| immich | Immich |
|
||||
| nextcloud | Nextcloud |
|
||||
| requests | Jellyseer |
|
||||
|
|
@ -245,4 +245,4 @@ oidc:
|
|||
|
||||
---
|
||||
|
||||
*Last updated: 2026-07-11 — Flip off Contabo completed: "Contabo Caddy" section → "edge2 Caddy" (front door for auth/forge/vpn/vault/matrix/element/notes/proxmox, CTs verified against [[ip-allocation]]/[[services]]); Mailcow + autodiscover/autoconfig moved to edge1 (separate mail-only host, not on edge2); WATCHTOWER + TAK/SIGIL marked decommissioned (dead 100.64.0.1 backends removed); Headscale config location + Port Map updated to edge2; `ssh root@100.64.0.1` → `ssh edge2`. dnsmasq split-DNS section marked HISTORICAL/OBSOLETE (echo6.co split-DNS retired, ran on the dead pre-2026-06-19 Contabo host, not repointed to edge1/edge2 per [[services]]); GoDaddy DNS Records section corrected — edge2 services (auth/forge/vpn/vault/matrix/element/notes/proxmox) → 184.174.35.153, mail → edge1 5.189.158.149 (unchanged public IP), wt/tak marked as removed records. Prior: 2026-04-13 — Audit sync: added MAS routing on matrix.echo6.co, lidarr/navidrome/vpn.idahomesh.com to utility Caddy, proxmox/tak to GoDaddy, removed ghost docs.echo6.co entries, added dnsmasq lidarr/navidrome*
|
||||
*Last updated: 2026-07-11 — Flip off Contabo completed: "Contabo Caddy" section → "edge2 Caddy" (front door for auth/forge/vpn/vault/matrix/element/notes/proxmox, CTs verified against [[ip-allocation]]/[[services]]); Mailcow + autodiscover/autoconfig moved to edge1 (separate mail-only host, not on edge2); WATCHTOWER + TAK/SIGIL marked decommissioned (dead 100.64.0.1 backends removed); Headscale config location + Port Map updated to edge2; `ssh root@100.64.0.1` → `ssh edge2`. dnsmasq split-DNS section marked HISTORICAL/OBSOLETE (echo6.co split-DNS retired, ran on the dead pre-2026-06-19 Contabo host, not repointed to edge1/edge2 per [[services]]); GoDaddy DNS Records section corrected — edge2 [[services]] (auth/forge/vpn/vault/matrix/element/notes/proxmox) → 184.174.35.153, mail → edge1 5.189.158.149 (unchanged public IP), wt/tak marked as removed records. Prior: 2026-04-13 — Audit sync: added MAS routing on matrix.echo6.co, lidarr/navidrome/vpn.idahomesh.com to utility Caddy, proxmox/tak to GoDaddy, removed ghost docs.echo6.co entries, added dnsmasq lidarr/navidrome*
|
||||
|
|
|
|||
|
|
@ -1,15 +1,22 @@
|
|||
---
|
||||
title: central — Data-Hub Spine
|
||||
type: reference
|
||||
tags: [recon]
|
||||
related: ["[[navi]]", "[[services]]", "[[environment]]"]
|
||||
updated: 2026-06-27
|
||||
tags:
|
||||
- mesh
|
||||
aliases: []
|
||||
related:
|
||||
- [[navi]]
|
||||
- [[central-deploy-cutover]]
|
||||
- [[services]]
|
||||
- [[fleet-platform-baseline]]
|
||||
- [[caddy]]
|
||||
updated: 2026-07-13
|
||||
---
|
||||
# central — Data-Hub Spine
|
||||
|
||||
## Overview
|
||||
|
||||
central is a multi-domain real-time data-hub spine. Adapters normalize upstream sources, publish CloudEvents to **NATS/JetStream**, and archive to **TimescaleDB/PostGIS** for historical and geospatial query. It is the live data backbone for navi traffic tiles and related situational-awareness feeds.
|
||||
central is a multi-domain real-time data-hub spine. Adapters normalize upstream sources, publish CloudEvents to **NATS/JetStream**, and archive to **TimescaleDB/PostGIS** for historical and geospatial query. It is the live data backbone for [[navi]] traffic tiles and related situational-awareness feeds.
|
||||
|
||||
- **URL (internal):** http://central.echo6.mesh:8000 (mesh-only, no public exposure)
|
||||
- **Host:** utility CT 104 (unprivileged Ubuntu LXC)
|
||||
|
|
@ -32,7 +39,7 @@ The data flow is: upstream APIs → adapters (central-supervisor) → NATS/JetSt
|
|||
|
||||
## Systemd Services
|
||||
|
||||
All three units are **enabled and active**; deployment survives reboot. Deps: `nats-server`, `postgresql@16-main`.
|
||||
All three units are **enabled and active**; [[deployment]] survives reboot. Deps: `nats-server`, `postgresql@16-main`.
|
||||
|
||||
| Unit | Role |
|
||||
|------|------|
|
||||
|
|
|
|||
|
|
@ -5,12 +5,12 @@ tags:
|
|||
- dns
|
||||
aliases: []
|
||||
related:
|
||||
- [[usenet]]
|
||||
- [[caddy]]
|
||||
- [[services]]
|
||||
- [[expose-service-contabo]]
|
||||
- [[headscale-onboard-node]]
|
||||
- [[authentik-oidc-application]]
|
||||
updated: 2026-07-11
|
||||
- [[usenet]]
|
||||
- [[expose-service-edge2]]
|
||||
updated: 2026-07-13
|
||||
---
|
||||
# GoDaddy DNS Management
|
||||
|
||||
|
|
@ -29,7 +29,7 @@ Stored in `/home/zvx/projects/.ref/credentials` as:
|
|||
| Purpose | IP |
|
||||
|---------|-----|
|
||||
| External (home [[services]]) | `199.6.36.163` |
|
||||
| edge1 (mail/autodiscover/autoconfig only — mail-only host, rebuilt 2026-06-19) | `5.189.158.149` |
|
||||
| edge1 (mail/autodiscover/autoconfig only — mail-only host, rebuilt [[2026-06-19]]) | `5.189.158.149` |
|
||||
| edge2 (front door: auth/forge/vpn/vault/matrix/element/notes/proxmox) | `184.174.35.153` |
|
||||
|
||||
## Managed Domains
|
||||
|
|
|
|||
|
|
@ -5,12 +5,12 @@ tags:
|
|||
- storage
|
||||
aliases: []
|
||||
related:
|
||||
- [[cc-rules]]
|
||||
- [[navi]]
|
||||
- [[ct-runbook]]
|
||||
- [[cc-rules]]
|
||||
- [[environment]]
|
||||
- [[meshtasticd-sim-nodes-runbook]]
|
||||
- [[recon-operations]]
|
||||
updated: 2026-06-18
|
||||
- [[toc-cortex-pve9.2-update]]
|
||||
updated: 2026-07-13
|
||||
---
|
||||
# Geo Processing Tools — Cortex
|
||||
|
||||
|
|
|
|||
|
|
@ -1,9 +1,16 @@
|
|||
---
|
||||
title: navi — Offline Navigation Platform
|
||||
type: reference
|
||||
tags: [recon]
|
||||
related: ["[[recon]]", "[[services]]", "[[environment]]"]
|
||||
updated: 2026-06-23
|
||||
tags:
|
||||
- recon
|
||||
aliases: []
|
||||
related:
|
||||
- [[deployment]]
|
||||
- [[central]]
|
||||
- [[themes]]
|
||||
- [[nominatim-v5-reimport]]
|
||||
- [[cc-rules]]
|
||||
updated: 2026-07-13
|
||||
---
|
||||
# navi — Offline Navigation Platform
|
||||
|
||||
|
|
@ -11,7 +18,7 @@ updated: 2026-06-23
|
|||
|
||||
navi is an offline-capable navigation web app served from **recon-vm** (VM 1130, 192.168.1.130). It provides geocoding, routing, land classification, fleet admin, and DEM-backed elevation data — all from self-hosted geo backends. Frontend is a Vite SPA; backend is a suite of 8 Python microservices behind nginx.
|
||||
|
||||
- **URL:** https://navi.echo6.co (fronted by utility Caddy + Authentik)
|
||||
- **URL:** https://navi.echo6.co (fronted by utility [[caddy]] + [[authentik]])
|
||||
- **Host:** recon-vm (data node, VM 1130)
|
||||
- **Repos:** `github.com/zvx-echo6/navi` (canonical), Forge mirror `matt/navi`
|
||||
- **Layout:** monorepo — `backend/` (Python) + `frontend/` (Vite)
|
||||
|
|
@ -41,7 +48,7 @@ All 8 are gunicorn processes, bound to `127.0.0.1`, working directory `navi-mono
|
|||
| # | Service | Port | Status | Purpose |
|
||||
|---|---------|------|--------|---------|
|
||||
| 1 | navi-traffic | :8421 | **DISABLED** | Traffic — now proxied externally to `central.echo6.mesh:8000` |
|
||||
| 2 | navi-config | :8422 | Active | Deployment profile API |
|
||||
| 2 | navi-config | :8422 | Active | [[deployment]] profile API |
|
||||
| 3 | navi-contacts | :8423 | Active | Contacts + address book |
|
||||
| 4 | navi-landclass | :8424 | Active | PAD-US land classification (Postgres `padus` DB) |
|
||||
| 5 | navi-places | :8425 | Active | OSM place detail/enrichment (Postgres `overture` DB) |
|
||||
|
|
|
|||
|
|
@ -6,11 +6,11 @@ tags:
|
|||
aliases: []
|
||||
related:
|
||||
- [[recon-operations]]
|
||||
- [[recon-service-integration]]
|
||||
- [[ia-download-queue]]
|
||||
- [[services]]
|
||||
- [[usenet]]
|
||||
- [[caddy]]
|
||||
updated: 2026-07-11
|
||||
- [[navi]]
|
||||
- [[ia-download-mirror]]
|
||||
updated: 2026-07-13
|
||||
---
|
||||
# RECON — Knowledge Extraction Pipeline
|
||||
|
||||
|
|
@ -145,4 +145,4 @@ Key sections:
|
|||
|
||||
---
|
||||
|
||||
*Last updated: 2026-07-11 — Gemini model refs updated to gemini-3.1-flash-lite (retired gemini-2.5-flash-lite); backup destination corrected Contabo (100.64.0.1, dead) → edge1 (100.64.0.40). Prior: 2026-06-18 — Updated: repo/branch, recon-sparse :8091, recon_knowledge_hybrid collection, Entrypoints; PROJECT-BIBLE.md dated 2026-02-16 (predates current deployment) — verified against live 2026-06-18*
|
||||
*Last updated: 2026-07-11 — Gemini model refs updated to gemini-3.1-flash-lite (retired gemini-2.5-flash-lite); backup destination corrected Contabo (100.64.0.1, dead) → edge1 (100.64.0.40). Prior: 2026-06-18 — Updated: repo/branch, recon-sparse :8091, recon_knowledge_hybrid collection, Entrypoints; PROJECT-BIBLE.md dated 2026-02-16 (predates current [[deployment]]) — verified against live 2026-06-18*
|
||||
|
|
|
|||
|
|
@ -6,11 +6,11 @@ tags:
|
|||
aliases: []
|
||||
related:
|
||||
- [[echo6-landing-page-data-export]]
|
||||
- [[caddy]]
|
||||
- [[environment]]
|
||||
- [[ip-allocation]]
|
||||
- [[headscale-onboard-node]]
|
||||
- [[services]]
|
||||
updated: 2026-07-11
|
||||
- [[caddy]]
|
||||
- [[ots-setup]]
|
||||
updated: 2026-07-13
|
||||
---
|
||||
# SearXNG — Echo6 Search Homepage
|
||||
|
||||
|
|
@ -34,7 +34,7 @@ SearXNG is deployed as the branded Echo6 search homepage at `echo6.co`. The defa
|
|||
| Search engine | SearXNG (Docker, v2026.2.6) | searxng container |
|
||||
| Cache | Valkey (Redis-compatible) | valkey container |
|
||||
| Reverse proxy | Utility [[caddy]] (CT 101) | 192.168.1.101 |
|
||||
| SSL certs | acme.sh (Let's Encrypt) | /etc/caddy/certs/ on CT 101 |
|
||||
| SSL certs | acme.sh (Let's Encrypt) | /etc/[[caddy]]/certs/ on CT 101 |
|
||||
|
||||
## Theme Customization
|
||||
|
||||
|
|
@ -132,7 +132,7 @@ curl -s http://192.168.1.102:8080 | head -30
|
|||
- `echo6.co` → `100.64.0.15:8080` + Matrix `.well-known` handlers
|
||||
- `search.echo6.co` → 301 redirect to `https://echo6.co`
|
||||
|
||||
**dnsmasq (historical — this ran on Contabo, decommissioned 2026-06-19):**
|
||||
**dnsmasq (historical — this ran on Contabo, decommissioned [[2026-06-19]]):**
|
||||
- `echo6.co` → `100.64.0.8` (utility Caddy)
|
||||
- Per [[services]]: tailnet split-DNS is NOT used for `echo6.co` — it resolves via public GoDaddy DNS. This dnsmasq entry describes the pre-migration setup and should not be assumed current.
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue