echo6-docs/docs/hardware/ip-allocation.md
Matt Johnson 9fdb6fcac3 docs: migrate Vaultwarden + Forgejo to edge2 LXCs; validate lxc-service-migration runbook
- Vaultwarden -> edge2 CT 102 (SQLite pilot): plan v2 + services/env/ip-allocation, credentials, stale-archive banner
- Forgejo -> edge2 CT 103 (PostgreSQL + non-Caddy git SSH :2222 via iptables DNAT)
- Add & upgrade runbooks/lxc-service-migration.md: SQLite + Postgres data variants, multi-volume tar, iptables-DNAT systemd-unit pattern, gotchas G11-G13
- Both source services left stopped + intact on Contabo as cold rollback

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-17 17:17:00 +00:00

4.7 KiB
Executable file

Echo6 Network IP Allocation

IP Ranges

Range Purpose
.1-.10 Network Infrastructure (router, switches, APs)
.11-.99 DHCP (phones, laptops, guests)
.100-.149 LXC Containers
.150-.199 VMs
.200-.224 Security Cameras
.225-.239 IoT/Embedded Devices
.240-.250 Proxmox Hosts + Bare Metal Servers
.251-.254 Meshtastic Nodes

Current Allocations

Network Infrastructure (.1-.10)

IP Device Notes
.1 Router/Gateway
.2-.10 (available) Switches, APs

LXC Containers (.100-.149)

IP Container Host Purpose
.100 meshmonitor (CT 100) utility MeshMonitor web UI
.101 caddy (CT 101) utility Home reverse proxy
.102 searxng (CT 102) utility Echo6 Search (SearXNG)
.103 argus (CT 103) utility ARGUS OSINT platform
.104 meshing-around (CT 104) utility Mesh bot + WebGUI
.106 meshtastic-hs (CT 106) utility IdahoMesh Headscale
.107 mesh-bridge (CT 107) utility Dual-tailscaled bridge
.109 mmud (CT 109) utility MMUD game daemon + web dashboard
.111 mmud-embr (CT 111) utility MMUD SIM: EMBR (game server)
.112 mmud-dcrg (CT 112) utility MMUD SIM: DCRG (broadcast)
.113 mmud-grst (CT 113) utility MMUD SIM: GRST (Grist barkeep)
.114 mmud-mrn (CT 114) utility MMUD SIM: MRN (Maren healer)
.115 mmud-trvl (CT 115) utility MMUD SIM: TRVL (Torval merchant)
.116 mmud-wspr (CT 116) utility MMUD SIM: WSPR (Whisper sage)
.118 archivist (CT 118) utility Signal/Matrix archive bot
.130 recon (VM 1130) data RECON pipeline (migrated from CT 130)
.144 meshai (CT 108) utility MeshAI assistant
.170 peertube (CT 110) media PeerTube streaming
.182 immich (CT 120) cloud Immich photos
.183 nextcloud (CT 121) cloud Nextcloud AIO

edge2 LXC Containers (10.10.10.x, vmbr0)

edge2 (Contabo Cloud VPS 184.174.35.153 / Tailscale 100.64.0.26) uses a separate 10.10.10.0/24 subnet on vmbr0 (gw 10.10.10.1). No DHCP — all IPs are static. Storage: local (dir, no local-lvm).

IP Container CTID Tailscale Purpose
10.10.10.10 pdm CT 100 100.64.0.28 Proxmox Datacenter Manager
10.10.10.11 wordpress CT 101 100.64.0.31 WordPress for intermountainmesh.com
10.10.10.20 vaultwarden CT 102 100.64.0.33 Vaultwarden password manager (migrated from Contabo 2026-06-16)
10.10.10.21 forgejo CT 103 100.64.0.34 Forgejo git server (migrated from Contabo 2026-06-16)

VMs (.150-.199)

IP VM Host Purpose
.150-.199 (available)

Security Cameras (.200-.224)

IP Camera Location
.200-.224 (available)

IoT/Embedded (.225-.239)

IP Device Notes
.225-.238 (available)
.239 (reserved) Former TOC IP

Proxmox Hosts + Bare Metal (.240-.250)

IP Hostname Role Tailscale
.240 data Proxmox - DB node 100.64.0.20
.241 utility Proxmox - Utility services 100.64.0.19
.242 cloud Proxmox - Cloud storage 100.64.0.22
.243 media Proxmox - Media server 100.64.0.21
.244 echo6-toc LLM/AI server 100.64.0.5
.245-.250 (available)

Meshtastic Nodes (.251-.254)

IP Node Notes
.251-.252 (available)
.253 AIDA-NEBRA Raspberry Pi running meshtasticd
.254 (available)

Tailscale IPs (100.64.0.x)

Tailscale IP Device Local IP
100.64.0.5 echo6-toc 192.168.1.244
100.64.0.6 contabo-mailcow 5.189.158.149 (external)
100.64.0.18 aida-nebra 192.168.1.253
100.64.0.19 utility 192.168.1.241
100.64.0.20 data 192.168.1.240
100.64.0.21 media 192.168.1.243
100.64.0.22 cloud 192.168.1.242
100.64.0.26 edge2 184.174.35.153 (external)
100.64.0.28 pdm (CT 100 on edge2) 10.10.10.10 (vmbr0)
100.64.0.33 vaultwarden (CT 102 on edge2) — node id 45 10.10.10.20 (vmbr0)
100.64.0.34 forgejo (CT 103 on edge2) — node id 46 10.10.10.21 (vmbr0)

Notes

  • DHCP range starts at .11 to leave room for network infra
  • LXC containers get .100-.149 for easy identification
  • Meshtastic nodes at .251-.254 (max 4 hardware nodes)
  • AIDA-NEBRA at .253 is technically a Meshtastic node (runs meshtasticd)

Last updated: 2026-06-17 — Added edge2 CT 103 (forgejo) at 10.10.10.21 / 100.64.0.34 (Headscale node 46); previously added CT 102 (vaultwarden)