Matt Johnson
74a0aaae43
- Matrix -> edge2 CT 106 (5 containers, 3 Postgres DBs, Signal bridge state preserved) - Headscale -> edge2 CT 107 (noise_private.key carried; tailnet data-plane survived cutover) - runbook: tailnet-control-plane pattern + self-verifying auto-rollback tmux cutover - both sources stopped + intact on Contabo as cold rollback Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
145 lines
5.9 KiB
Markdown
Executable file
145 lines
5.9 KiB
Markdown
Executable file
---
|
|
title: Echo6 Network IP Allocation
|
|
type: reference
|
|
tags:
|
|
- proxmox
|
|
aliases: []
|
|
related:
|
|
- [[services]]
|
|
- [[environment]]
|
|
- [[caddy]]
|
|
- [[headscale-onboard-node]]
|
|
- [[meshtastic-headscale-runbook]]
|
|
updated: 2026-06-19
|
|
---
|
|
# Echo6 Network IP Allocation
|
|
|
|
## IP Ranges
|
|
|
|
| Range | Purpose |
|
|
|-------|---------|
|
|
| .1-.10 | Network Infrastructure (router, switches, APs) |
|
|
| .11-.99 | DHCP (phones, laptops, guests) |
|
|
| .100-.149 | LXC Containers |
|
|
| .150-.199 | VMs |
|
|
| .200-.224 | Security Cameras |
|
|
| .225-.239 | IoT/Embedded Devices |
|
|
| .240-.250 | Proxmox Hosts + Bare Metal Servers |
|
|
| .251-.254 | Meshtastic Nodes |
|
|
|
|
---
|
|
|
|
## Current Allocations
|
|
|
|
### Network Infrastructure (.1-.10)
|
|
| IP | Device | Notes |
|
|
|----|--------|-------|
|
|
| .1 | Router/Gateway | |
|
|
| .2-.10 | (available) | Switches, APs |
|
|
|
|
### LXC Containers (.100-.149)
|
|
| IP | Container | Host | Purpose |
|
|
|----|-----------|------|---------|
|
|
| .100 | meshmonitor (CT 100) | utility | MeshMonitor web UI |
|
|
| .101 | [[caddy]] (CT 101) | utility | Home reverse proxy |
|
|
| .102 | [[searxng]] (CT 102) | utility | Echo6 Search (SearXNG) |
|
|
| .103 | [[argus]] (CT 103) | utility | ARGUS OSINT platform |
|
|
| .104 | meshing-around (CT 104) | utility | Mesh bot + WebGUI |
|
|
| .106 | meshtastic-hs (CT 106) | utility | IdahoMesh Headscale |
|
|
| .107 | mesh-bridge (CT 107) | utility | Dual-tailscaled bridge |
|
|
| .109 | mmud (CT 109) | utility | MMUD game daemon + web dashboard |
|
|
| .111 | mmud-embr (CT 111) | utility | MMUD SIM: EMBR (game server) |
|
|
| .112 | mmud-dcrg (CT 112) | utility | MMUD SIM: DCRG (broadcast) |
|
|
| .113 | mmud-grst (CT 113) | utility | MMUD SIM: GRST (Grist barkeep) |
|
|
| .114 | mmud-mrn (CT 114) | utility | MMUD SIM: MRN (Maren healer) |
|
|
| .115 | mmud-trvl (CT 115) | utility | MMUD SIM: TRVL (Torval merchant) |
|
|
| .116 | mmud-wspr (CT 116) | utility | MMUD SIM: WSPR (Whisper sage) |
|
|
| .118 | [[archivist]] (CT 118) | utility | Signal/Matrix archive bot |
|
|
| .130 | [[recon]] (VM 1130) | data | RECON pipeline (migrated from CT 130) |
|
|
| .144 | meshai (CT 108) | utility | MeshAI assistant |
|
|
| .170 | peertube (CT 110) | media | PeerTube streaming |
|
|
| .182 | immich (CT 120) | cloud | Immich photos |
|
|
| .183 | nextcloud (CT 121) | cloud | Nextcloud AIO |
|
|
|
|
### edge2 LXC Containers (10.10.10.x, vmbr0)
|
|
|
|
edge2 (Contabo Cloud VPS 184.174.35.153 / Tailscale 100.64.0.26) uses a separate 10.10.10.0/24 subnet on vmbr0 (gw 10.10.10.1). No DHCP — all IPs are static. Storage: `local` (dir, no local-lvm).
|
|
|
|
| IP | Container | CTID | Tailscale | Purpose |
|
|
|----|-----------|------|-----------|---------|
|
|
| 10.10.10.10 | pdm | CT 100 | 100.64.0.28 | Proxmox Datacenter Manager |
|
|
| 10.10.10.11 | wordpress | CT 101 | 100.64.0.31 | WordPress for intermountainmesh.com |
|
|
| 10.10.10.20 | vaultwarden | CT 102 | 100.64.0.33 | Vaultwarden password manager (migrated from Contabo 2026-06-16) |
|
|
| 10.10.10.21 | forgejo | CT 103 | 100.64.0.34 | Forgejo git server (migrated from Contabo 2026-06-16) |
|
|
| 10.10.10.22 | livesync | CT 104 | 100.64.0.35 | LiveSync Obsidian sync (CouchDB + provisioner; migrated from Contabo 2026-06-16) |
|
|
| 10.10.10.23 | [[authentik]] | CT 105 | 100.64.0.36 | Authentik SSO platform (migrated from Contabo 2026-06-18) |
|
|
| 10.10.10.24 | matrix | CT 106 | 100.64.0.37 | Matrix stack (Synapse + MAS + Element + mautrix-signal; migrated from Contabo 2026-06-18) |
|
|
| 10.10.10.25 | headscale | CT 107 | 100.64.0.38 | Headscale + Headplane tailnet control plane (migrated from Contabo 2026-06-19) |
|
|
|
|
### VMs (.150-.199)
|
|
| IP | VM | Host | Purpose |
|
|
|----|-----|------|---------|
|
|
| .150-.199 | (available) | | |
|
|
|
|
### Security Cameras (.200-.224)
|
|
| IP | Camera | Location |
|
|
|----|--------|----------|
|
|
| .200-.224 | (available) | |
|
|
|
|
### IoT/Embedded (.225-.239)
|
|
| IP | Device | Notes |
|
|
|----|--------|-------|
|
|
| .225-.238 | (available) | |
|
|
| .239 | (reserved) | Former TOC IP |
|
|
|
|
### Proxmox Hosts + Bare Metal (.240-.250)
|
|
| IP | Hostname | Role | Tailscale |
|
|
|----|----------|------|-----------|
|
|
| .240 | data | Proxmox - DB node | 100.64.0.20 |
|
|
| .241 | utility | Proxmox - Utility [[services]] | 100.64.0.19 |
|
|
| .242 | cloud | Proxmox - Cloud storage | 100.64.0.22 |
|
|
| .243 | media | Proxmox - Media server | 100.64.0.21 |
|
|
| .244 | echo6-toc | LLM/AI server | 100.64.0.5 |
|
|
| .245-.250 | (available) | | |
|
|
|
|
### Meshtastic Nodes (.251-.254)
|
|
| IP | Node | Notes |
|
|
|----|------|-------|
|
|
| .251-.252 | (available) | |
|
|
| .253 | AIDA-NEBRA | Raspberry Pi running meshtasticd |
|
|
| .254 | (available) | |
|
|
|
|
---
|
|
|
|
## Tailscale IPs (100.64.0.x)
|
|
|
|
| Tailscale IP | Device | Local IP |
|
|
|--------------|--------|----------|
|
|
| 100.64.0.5 | echo6-toc | 192.168.1.244 |
|
|
| 100.64.0.6 | contabo-mailcow | 5.189.158.149 (external) |
|
|
| 100.64.0.18 | aida-nebra | 192.168.1.253 |
|
|
| 100.64.0.19 | utility | 192.168.1.241 |
|
|
| 100.64.0.20 | data | 192.168.1.240 |
|
|
| 100.64.0.21 | media | 192.168.1.243 |
|
|
| 100.64.0.22 | cloud | 192.168.1.242 |
|
|
| 100.64.0.26 | edge2 | 184.174.35.153 (external) |
|
|
| 100.64.0.28 | pdm (CT 100 on edge2) | 10.10.10.10 (vmbr0) |
|
|
| 100.64.0.33 | vaultwarden (CT 102 on edge2) — node id 45 | 10.10.10.20 (vmbr0) |
|
|
| 100.64.0.34 | forgejo (CT 103 on edge2) — node id 46 | 10.10.10.21 (vmbr0) |
|
|
| 100.64.0.35 | livesync (CT 104 on edge2) — hostname `livesync` | 10.10.10.22 (vmbr0) |
|
|
| 100.64.0.36 | authentik (CT 105 on edge2) — node id 48 | 10.10.10.23 (vmbr0) |
|
|
| 100.64.0.37 | matrix (CT 106 on edge2) — hostname `matrix` | 10.10.10.24 (vmbr0) |
|
|
| 100.64.0.38 | headscale (CT 107 on edge2) — hostname `headscale` | 10.10.10.25 (vmbr0) |
|
|
|
|
---
|
|
|
|
## Notes
|
|
|
|
- DHCP range starts at .11 to leave room for network infra
|
|
- LXC containers get .100-.149 for easy identification
|
|
- Meshtastic nodes at .251-.254 (max 4 hardware nodes)
|
|
- AIDA-NEBRA at .253 is technically a Meshtastic node (runs meshtasticd)
|
|
|
|
---
|
|
|
|
*Last updated: 2026-06-19 — Added edge2 CT 106 (matrix) at 10.10.10.24 / 100.64.0.37 and CT 107 (headscale) at 10.10.10.25 / 100.64.0.38; previously added CT 105 (authentik), CT 104 (livesync), CT 103 (forgejo), CT 102 (vaultwarden)*
|