222a2f198e
Files changed: engine/.embcache.json engine/changelog.md engine/lint-report.md vault/docs/hardware/environment.md vault/docs/hardware/ip-allocation.md vault/docs/services/services.md vault/glossary.md vault/projects/fleet-patch-audit.md
155 lines
7.1 KiB
Markdown
Executable file
155 lines
7.1 KiB
Markdown
Executable file
---
|
||
title: Echo6 Network IP Allocation
|
||
type: reference
|
||
tags:
|
||
- proxmox
|
||
aliases: []
|
||
related:
|
||
- [[caddy]]
|
||
- [[services]]
|
||
- [[environment]]
|
||
- [[glossary]]
|
||
- [[headscale-onboard-node]]
|
||
updated: 2026-07-18
|
||
---
|
||
# Echo6 Network IP Allocation
|
||
|
||
## IP Ranges
|
||
|
||
| Range | Purpose |
|
||
|-------|---------|
|
||
| .1-.10 | Network Infrastructure (router, switches, APs) |
|
||
| .11-.99 | DHCP (phones, laptops, guests) |
|
||
| .100-.149 | LXC Containers |
|
||
| .150-.199 | VMs |
|
||
| .200-.224 | Security Cameras |
|
||
| .225-.239 | IoT/Embedded Devices |
|
||
| .240-.250 | Proxmox Hosts + Bare Metal Servers |
|
||
| .251-.254 | Meshtastic Nodes |
|
||
|
||
---
|
||
|
||
## Current Allocations
|
||
|
||
### Network Infrastructure (.1-.10)
|
||
| IP | Device | Notes |
|
||
|----|--------|-------|
|
||
| .1 | Router/Gateway | |
|
||
| .2-.10 | (available) | Switches, APs |
|
||
|
||
### LXC Containers (.100-.149)
|
||
| IP | Container | Host | Purpose |
|
||
|----|-----------|------|---------|
|
||
| .100 | meshmonitor (CT 100) | utility | MeshMonitor web UI |
|
||
| .101 | [[caddy]] (CT 101) | utility | Home reverse proxy |
|
||
| .102 | [[searxng]] (CT 102) | utility | Echo6 Search ([[searxng]]) |
|
||
| .103 | [[argus]] (CT 103) | utility | [[argus]] OSINT platform |
|
||
| .104 | meshing-around (CT 104) | utility | Mesh bot + WebGUI |
|
||
| .106 | meshtastic-hs (CT 106) | utility | IdahoMesh Headscale |
|
||
| .107 | mesh-bridge (CT 107) | utility | Dual-tailscaled bridge |
|
||
| .109 | mmud (CT 109) | utility | MMUD game daemon + web dashboard |
|
||
| .111 | mmud-embr (CT 111) | utility | MMUD SIM: EMBR (game server) |
|
||
| .112 | mmud-dcrg (CT 112) | utility | MMUD SIM: DCRG (broadcast) |
|
||
| .113 | mmud-grst (CT 113) | utility | MMUD SIM: GRST (Grist barkeep) |
|
||
| .114 | mmud-mrn (CT 114) | utility | MMUD SIM: MRN (Maren healer) |
|
||
| .115 | mmud-trvl (CT 115) | utility | MMUD SIM: TRVL (Torval merchant) |
|
||
| .116 | mmud-wspr (CT 116) | utility | MMUD SIM: WSPR (Whisper sage) |
|
||
| .118 | [[archivist]] (CT 118) | utility | Signal/Matrix archive bot |
|
||
| .130 | [[recon]] (VM 1130) | data | [[recon]] pipeline (migrated from CT 130) |
|
||
| .144 | [[meshai]] (CT 108) | utility | [[meshai]] assistant |
|
||
| .170 | peertube (CT 110) | media | PeerTube streaming |
|
||
| .182 | immich (CT 120) | cloud | Immich photos |
|
||
| .183 | nextcloud (CT 121) | cloud | Nextcloud AIO |
|
||
|
||
### edge1 LXC Containers (10.10.10.x, vmbr0) — mail-only host (5.189.158.149, rebuilt 2026-06-19)
|
||
|
||
edge1 (rebuilt Contabo VPS, 5.189.158.149 / Tailscale 100.64.0.40) runs Debian 12 + Proxmox 8.4.19, mail-only role. Same 10.10.10.0/24 subnet pattern on vmbr0 (gw 10.10.10.1); internal IP via `staticroute.service`.
|
||
|
||
| IP | Container | CTID | Tailscale | Purpose |
|
||
|----|-----------|------|-----------|---------|
|
||
| 10.10.10.2 | mailcow | CT 101 | — | Mailcow email server (privileged LXC; reached via host DNAT ports 25/465/587/110/143/993/995/4190 and host [[caddy]] for mail/autodiscover/autoconfig.echo6.co → :8453) |
|
||
|
||
### edge2 LXC Containers (10.10.10.x, vmbr0) — permanent front door (184.174.35.153)
|
||
|
||
edge2 (Contabo Cloud VPS 184.174.35.153 / Tailscale 100.64.0.26) uses a separate 10.10.10.0/24 subnet on vmbr0 (gw 10.10.10.1). No DHCP — all IPs are static. Storage: `local` (dir, no local-lvm). **Front door for:** vault/forge/notes/auth/matrix/element/vpn/proxmox.echo6.co + idahomesh.com.
|
||
|
||
| IP | Container | CTID | Tailscale | Purpose |
|
||
|----|-----------|------|-----------|---------|
|
||
| 10.10.10.10 | pdm | CT 100 | 100.64.0.28 | Proxmox Datacenter Manager |
|
||
| 10.10.10.11 | wordpress | CT 101 | 100.64.0.31 | Grav CMS 2.0.11 for idahomesh.com (migrated from WordPress 2026-07-17; hostname unchanged; MariaDB purged — no DB) |
|
||
| 10.10.10.20 | vaultwarden | CT 102 | 100.64.0.33 | Vaultwarden password manager (migrated from Contabo 2026-06-16) |
|
||
| 10.10.10.21 | forgejo | CT 103 | 100.64.0.34 | Forgejo git server (migrated from Contabo 2026-06-16); git SSH → edge2 forgejo-ssh-dnat.service |
|
||
| 10.10.10.22 | livesync | CT 104 | 100.64.0.35 | LiveSync Obsidian sync (CouchDB + provisioner; migrated from Contabo 2026-06-16) |
|
||
| 10.10.10.23 | [[authentik]] | CT 105 | 100.64.0.36 | [[authentik]] SSO platform (migrated from Contabo 2026-06-18) |
|
||
| 10.10.10.24 | matrix | CT 106 | 100.64.0.37 | Matrix stack ([[synapse]] + MAS + Element + [[mautrix_signal]]; migrated from Contabo 2026-06-18) |
|
||
| 10.10.10.25 | headscale | CT 107 | 100.64.0.38 | Headscale + Headplane tailnet control plane (migrated from Contabo [[2026-06-19]]) |
|
||
| 10.10.10.26 | mailcow-staging | CT 108 | — | Stopped Mailcow staging replica (fallback; prune after soak) |
|
||
|
||
### VMs (.150-.199)
|
||
| IP | VM | Host | Purpose |
|
||
|----|-----|------|---------|
|
||
| .151 | ha (VM 151) | cloud | Home Assistant (Docker, home automation) |
|
||
|
||
### Security Cameras (.200-.224)
|
||
| IP | Camera | Location |
|
||
|----|--------|----------|
|
||
| .200-.224 | (available) | |
|
||
|
||
### IoT/Embedded (.225-.239)
|
||
| IP | Device | Notes |
|
||
|----|--------|-------|
|
||
| .225-.238 | (available) | |
|
||
| .239 | (reserved) | Former TOC IP |
|
||
|
||
### Proxmox Hosts + Bare Metal (.240-.250)
|
||
| IP | Hostname | Role | Tailscale |
|
||
|----|----------|------|-----------|
|
||
| .240 | data | Proxmox - DB node | 100.64.0.6 |
|
||
| .241 | utility | Proxmox - Utility [[services]] | 100.64.0.5 |
|
||
| .242 | cloud | Proxmox - Cloud storage | 100.64.0.4 |
|
||
| .243 | media | Proxmox - Media server | 100.64.0.3 |
|
||
| .244 | echo6-toc | LLM/AI server | 100.64.0.13 |
|
||
| .245-.250 | (available) | | |
|
||
|
||
### Meshtastic Nodes (.251-.254)
|
||
| IP | Node | Notes |
|
||
|----|------|-------|
|
||
| .251-.252 | (available) | |
|
||
| .253 | AIDA-NEBRA | Raspberry Pi running meshtasticd |
|
||
| .254 | (available) | |
|
||
|
||
---
|
||
|
||
## Tailscale IPs (100.64.0.x)
|
||
|
||
| Tailscale IP | Device | Local IP |
|
||
|--------------|--------|----------|
|
||
| 100.64.0.13 | echo6-toc | 192.168.1.244 |
|
||
| 100.64.0.40 | contabo / edge1 (rebuilt [[2026-06-19]], mail-only) | 5.189.158.149 (external) |
|
||
| 100.64.0.9 | aida-nebra | 192.168.1.253 |
|
||
| 100.64.0.5 | utility | 192.168.1.241 |
|
||
| 100.64.0.6 | data | 192.168.1.240 |
|
||
| 100.64.0.3 | media | 192.168.1.243 |
|
||
| 100.64.0.4 | cloud | 192.168.1.242 |
|
||
| 100.64.0.26 | edge2 | 184.174.35.153 (external) |
|
||
| 100.64.0.28 | pdm (CT 100 on edge2) | 10.10.10.10 (vmbr0) |
|
||
| 100.64.0.33 | vaultwarden (CT 102 on edge2) — node id 45 | 10.10.10.20 (vmbr0) |
|
||
| 100.64.0.34 | forgejo (CT 103 on edge2) — node id 46 | 10.10.10.21 (vmbr0) |
|
||
| 100.64.0.35 | livesync (CT 104 on edge2) — hostname `livesync` | 10.10.10.22 (vmbr0) |
|
||
| 100.64.0.36 | [[authentik]] (CT 105 on edge2) — node id 48 | 10.10.10.23 (vmbr0) |
|
||
| 100.64.0.37 | matrix (CT 106 on edge2) — hostname `matrix` | 10.10.10.24 (vmbr0) |
|
||
| 100.64.0.38 | headscale (CT 107 on edge2) — hostname `headscale` | 10.10.10.25 (vmbr0) |
|
||
| 100.64.0.16 | ha (VM 151 on cloud) — node id 54 | 192.168.1.151 |
|
||
|
||
---
|
||
|
||
## Notes
|
||
|
||
- DHCP range starts at .11 to leave room for network infra
|
||
- LXC containers get .100-.149 for easy identification
|
||
- Meshtastic nodes at .251-.254 (max 4 hardware nodes)
|
||
- AIDA-NEBRA at .253 is technically a Meshtastic node (runs meshtasticd)
|
||
|
||
---
|
||
|
||
*Last updated: [[2026-06-19]] — Added edge1 section (rebuilt Contabo VPS, 5.189.158.149 / 100.64.0.40, mail-only, Mailcow CT 101 at 10.10.10.2); added edge2 CT 108 (mailcow-staging, stopped); Tailscale table: contabo-mailcow entry replaced with edge1 at 100.64.0.40; previously added edge2 CTs 102–107*
|