echo6-docs/vault/docs/hardware/ip-allocation.md
Matt Johnson 74a0aaae43 docs: migrate Matrix + Headscale to edge2 (CT 106/107)
- Matrix -> edge2 CT 106 (5 containers, 3 Postgres DBs, Signal bridge state preserved)
- Headscale -> edge2 CT 107 (noise_private.key carried; tailnet data-plane survived cutover)
- runbook: tailnet-control-plane pattern + self-verifying auto-rollback tmux cutover
- both sources stopped + intact on Contabo as cold rollback

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-19 01:31:34 +00:00

5.9 KiB
Executable file

title type tags aliases related updated
Echo6 Network IP Allocation reference
proxmox
services
environment
caddy
headscale-onboard-node
meshtastic-headscale-runbook
2026-06-19

Echo6 Network IP Allocation

IP Ranges

Range Purpose
.1-.10 Network Infrastructure (router, switches, APs)
.11-.99 DHCP (phones, laptops, guests)
.100-.149 LXC Containers
.150-.199 VMs
.200-.224 Security Cameras
.225-.239 IoT/Embedded Devices
.240-.250 Proxmox Hosts + Bare Metal Servers
.251-.254 Meshtastic Nodes

Current Allocations

Network Infrastructure (.1-.10)

IP Device Notes
.1 Router/Gateway
.2-.10 (available) Switches, APs

LXC Containers (.100-.149)

IP Container Host Purpose
.100 meshmonitor (CT 100) utility MeshMonitor web UI
.101 caddy (CT 101) utility Home reverse proxy
.102 searxng (CT 102) utility Echo6 Search (SearXNG)
.103 argus (CT 103) utility ARGUS OSINT platform
.104 meshing-around (CT 104) utility Mesh bot + WebGUI
.106 meshtastic-hs (CT 106) utility IdahoMesh Headscale
.107 mesh-bridge (CT 107) utility Dual-tailscaled bridge
.109 mmud (CT 109) utility MMUD game daemon + web dashboard
.111 mmud-embr (CT 111) utility MMUD SIM: EMBR (game server)
.112 mmud-dcrg (CT 112) utility MMUD SIM: DCRG (broadcast)
.113 mmud-grst (CT 113) utility MMUD SIM: GRST (Grist barkeep)
.114 mmud-mrn (CT 114) utility MMUD SIM: MRN (Maren healer)
.115 mmud-trvl (CT 115) utility MMUD SIM: TRVL (Torval merchant)
.116 mmud-wspr (CT 116) utility MMUD SIM: WSPR (Whisper sage)
.118 archivist (CT 118) utility Signal/Matrix archive bot
.130 recon (VM 1130) data RECON pipeline (migrated from CT 130)
.144 meshai (CT 108) utility MeshAI assistant
.170 peertube (CT 110) media PeerTube streaming
.182 immich (CT 120) cloud Immich photos
.183 nextcloud (CT 121) cloud Nextcloud AIO

edge2 LXC Containers (10.10.10.x, vmbr0)

edge2 (Contabo Cloud VPS 184.174.35.153 / Tailscale 100.64.0.26) uses a separate 10.10.10.0/24 subnet on vmbr0 (gw 10.10.10.1). No DHCP — all IPs are static. Storage: local (dir, no local-lvm).

IP Container CTID Tailscale Purpose
10.10.10.10 pdm CT 100 100.64.0.28 Proxmox Datacenter Manager
10.10.10.11 wordpress CT 101 100.64.0.31 WordPress for intermountainmesh.com
10.10.10.20 vaultwarden CT 102 100.64.0.33 Vaultwarden password manager (migrated from Contabo 2026-06-16)
10.10.10.21 forgejo CT 103 100.64.0.34 Forgejo git server (migrated from Contabo 2026-06-16)
10.10.10.22 livesync CT 104 100.64.0.35 LiveSync Obsidian sync (CouchDB + provisioner; migrated from Contabo 2026-06-16)
10.10.10.23 authentik CT 105 100.64.0.36 Authentik SSO platform (migrated from Contabo 2026-06-18)
10.10.10.24 matrix CT 106 100.64.0.37 Matrix stack (Synapse + MAS + Element + mautrix-signal; migrated from Contabo 2026-06-18)
10.10.10.25 headscale CT 107 100.64.0.38 Headscale + Headplane tailnet control plane (migrated from Contabo 2026-06-19)

VMs (.150-.199)

IP VM Host Purpose
.150-.199 (available)

Security Cameras (.200-.224)

IP Camera Location
.200-.224 (available)

IoT/Embedded (.225-.239)

IP Device Notes
.225-.238 (available)
.239 (reserved) Former TOC IP

Proxmox Hosts + Bare Metal (.240-.250)

IP Hostname Role Tailscale
.240 data Proxmox - DB node 100.64.0.20
.241 utility Proxmox - Utility services 100.64.0.19
.242 cloud Proxmox - Cloud storage 100.64.0.22
.243 media Proxmox - Media server 100.64.0.21
.244 echo6-toc LLM/AI server 100.64.0.5
.245-.250 (available)

Meshtastic Nodes (.251-.254)

IP Node Notes
.251-.252 (available)
.253 AIDA-NEBRA Raspberry Pi running meshtasticd
.254 (available)

Tailscale IPs (100.64.0.x)

Tailscale IP Device Local IP
100.64.0.5 echo6-toc 192.168.1.244
100.64.0.6 contabo-mailcow 5.189.158.149 (external)
100.64.0.18 aida-nebra 192.168.1.253
100.64.0.19 utility 192.168.1.241
100.64.0.20 data 192.168.1.240
100.64.0.21 media 192.168.1.243
100.64.0.22 cloud 192.168.1.242
100.64.0.26 edge2 184.174.35.153 (external)
100.64.0.28 pdm (CT 100 on edge2) 10.10.10.10 (vmbr0)
100.64.0.33 vaultwarden (CT 102 on edge2) — node id 45 10.10.10.20 (vmbr0)
100.64.0.34 forgejo (CT 103 on edge2) — node id 46 10.10.10.21 (vmbr0)
100.64.0.35 livesync (CT 104 on edge2) — hostname livesync 10.10.10.22 (vmbr0)
100.64.0.36 authentik (CT 105 on edge2) — node id 48 10.10.10.23 (vmbr0)
100.64.0.37 matrix (CT 106 on edge2) — hostname matrix 10.10.10.24 (vmbr0)
100.64.0.38 headscale (CT 107 on edge2) — hostname headscale 10.10.10.25 (vmbr0)

Notes

  • DHCP range starts at .11 to leave room for network infra
  • LXC containers get .100-.149 for easy identification
  • Meshtastic nodes at .251-.254 (max 4 hardware nodes)
  • AIDA-NEBRA at .253 is technically a Meshtastic node (runs meshtasticd)

Last updated: 2026-06-19 — Added edge2 CT 106 (matrix) at 10.10.10.24 / 100.64.0.37 and CT 107 (headscale) at 10.10.10.25 / 100.64.0.38; previously added CT 105 (authentik), CT 104 (livesync), CT 103 (forgejo), CT 102 (vaultwarden)