Matt Johnson
5236f3ba4c
- edge1 (5.189.158.149): Debian 12 + Proxmox 8.4.19, mail-only; Mailcow in CT 101 (10.10.10.2); mail-port DNAT; mail_crypt key in extra.conf; tailnet node contabo now 100.64.0.40 - edge2 (184.174.35.153): permanent front door for vault/forge/notes/auth/matrix/element/vpn/proxmox + idahomesh/intermountainmesh; forgejo-ssh-dnat.service is permanent systemd unit on edge2 - runbook: mail/host-in-place rebuild (M1-M10) + mail_crypt capture + dual-key load + decryption-gate + SOGo bootstrap/cache + reverse-proxy-Host + front-door co-location lessons - credentials: edge1 SSH access note; Mailcow CT 101 location; mail_crypt key paths - DNS split documented: mail/* -> edge1 (5.189.158.149); all other services -> edge2 (184.174.35.153) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
154 lines
6.9 KiB
Markdown
Executable file
154 lines
6.9 KiB
Markdown
Executable file
---
|
||
title: Echo6 Network IP Allocation
|
||
type: reference
|
||
tags:
|
||
- proxmox
|
||
aliases: []
|
||
related:
|
||
- [[services]]
|
||
- [[environment]]
|
||
- [[caddy]]
|
||
- [[headscale-onboard-node]]
|
||
- [[meshtastic-headscale-runbook]]
|
||
updated: 2026-06-19
|
||
---
|
||
# Echo6 Network IP Allocation
|
||
|
||
## IP Ranges
|
||
|
||
| Range | Purpose |
|
||
|-------|---------|
|
||
| .1-.10 | Network Infrastructure (router, switches, APs) |
|
||
| .11-.99 | DHCP (phones, laptops, guests) |
|
||
| .100-.149 | LXC Containers |
|
||
| .150-.199 | VMs |
|
||
| .200-.224 | Security Cameras |
|
||
| .225-.239 | IoT/Embedded Devices |
|
||
| .240-.250 | Proxmox Hosts + Bare Metal Servers |
|
||
| .251-.254 | Meshtastic Nodes |
|
||
|
||
---
|
||
|
||
## Current Allocations
|
||
|
||
### Network Infrastructure (.1-.10)
|
||
| IP | Device | Notes |
|
||
|----|--------|-------|
|
||
| .1 | Router/Gateway | |
|
||
| .2-.10 | (available) | Switches, APs |
|
||
|
||
### LXC Containers (.100-.149)
|
||
| IP | Container | Host | Purpose |
|
||
|----|-----------|------|---------|
|
||
| .100 | meshmonitor (CT 100) | utility | MeshMonitor web UI |
|
||
| .101 | [[caddy]] (CT 101) | utility | Home reverse proxy |
|
||
| .102 | [[searxng]] (CT 102) | utility | Echo6 Search (SearXNG) |
|
||
| .103 | [[argus]] (CT 103) | utility | ARGUS OSINT platform |
|
||
| .104 | meshing-around (CT 104) | utility | Mesh bot + WebGUI |
|
||
| .106 | meshtastic-hs (CT 106) | utility | IdahoMesh Headscale |
|
||
| .107 | mesh-bridge (CT 107) | utility | Dual-tailscaled bridge |
|
||
| .109 | mmud (CT 109) | utility | MMUD game daemon + web dashboard |
|
||
| .111 | mmud-embr (CT 111) | utility | MMUD SIM: EMBR (game server) |
|
||
| .112 | mmud-dcrg (CT 112) | utility | MMUD SIM: DCRG (broadcast) |
|
||
| .113 | mmud-grst (CT 113) | utility | MMUD SIM: GRST (Grist barkeep) |
|
||
| .114 | mmud-mrn (CT 114) | utility | MMUD SIM: MRN (Maren healer) |
|
||
| .115 | mmud-trvl (CT 115) | utility | MMUD SIM: TRVL (Torval merchant) |
|
||
| .116 | mmud-wspr (CT 116) | utility | MMUD SIM: WSPR (Whisper sage) |
|
||
| .118 | [[archivist]] (CT 118) | utility | Signal/Matrix archive bot |
|
||
| .130 | [[recon]] (VM 1130) | data | RECON pipeline (migrated from CT 130) |
|
||
| .144 | meshai (CT 108) | utility | MeshAI assistant |
|
||
| .170 | peertube (CT 110) | media | PeerTube streaming |
|
||
| .182 | immich (CT 120) | cloud | Immich photos |
|
||
| .183 | nextcloud (CT 121) | cloud | Nextcloud AIO |
|
||
|
||
### edge1 LXC Containers (10.10.10.x, vmbr0) — mail-only host (5.189.158.149, rebuilt 2026-06-19)
|
||
|
||
edge1 (rebuilt Contabo VPS, 5.189.158.149 / Tailscale 100.64.0.40) runs Debian 12 + Proxmox 8.4.19, mail-only role. Same 10.10.10.0/24 subnet pattern on vmbr0 (gw 10.10.10.1); internal IP via `staticroute.service`.
|
||
|
||
| IP | Container | CTID | Tailscale | Purpose |
|
||
|----|-----------|------|-----------|---------|
|
||
| 10.10.10.2 | mailcow | CT 101 | — | Mailcow email server (privileged LXC; reached via host DNAT ports 25/465/587/110/143/993/995/4190 and host Caddy for mail/autodiscover/autoconfig.echo6.co → :8453) |
|
||
|
||
### edge2 LXC Containers (10.10.10.x, vmbr0) — permanent front door (184.174.35.153)
|
||
|
||
edge2 (Contabo Cloud VPS 184.174.35.153 / Tailscale 100.64.0.26) uses a separate 10.10.10.0/24 subnet on vmbr0 (gw 10.10.10.1). No DHCP — all IPs are static. Storage: `local` (dir, no local-lvm). **Front door for:** vault/forge/notes/auth/matrix/element/vpn/proxmox.echo6.co + idahomesh/intermountainmesh.
|
||
|
||
| IP | Container | CTID | Tailscale | Purpose |
|
||
|----|-----------|------|-----------|---------|
|
||
| 10.10.10.10 | pdm | CT 100 | 100.64.0.28 | Proxmox Datacenter Manager |
|
||
| 10.10.10.11 | wordpress | CT 101 | 100.64.0.31 | WordPress for intermountainmesh.com |
|
||
| 10.10.10.20 | vaultwarden | CT 102 | 100.64.0.33 | Vaultwarden password manager (migrated from Contabo 2026-06-16) |
|
||
| 10.10.10.21 | forgejo | CT 103 | 100.64.0.34 | Forgejo git server (migrated from Contabo 2026-06-16); git SSH → edge2 forgejo-ssh-dnat.service |
|
||
| 10.10.10.22 | livesync | CT 104 | 100.64.0.35 | LiveSync Obsidian sync (CouchDB + provisioner; migrated from Contabo 2026-06-16) |
|
||
| 10.10.10.23 | [[authentik]] | CT 105 | 100.64.0.36 | Authentik SSO platform (migrated from Contabo 2026-06-18) |
|
||
| 10.10.10.24 | matrix | CT 106 | 100.64.0.37 | Matrix stack (Synapse + MAS + Element + mautrix-signal; migrated from Contabo 2026-06-18) |
|
||
| 10.10.10.25 | headscale | CT 107 | 100.64.0.38 | Headscale + Headplane tailnet control plane (migrated from Contabo 2026-06-19) |
|
||
| 10.10.10.26 | mailcow-staging | CT 108 | — | Stopped Mailcow staging replica (fallback; prune after soak) |
|
||
|
||
### VMs (.150-.199)
|
||
| IP | VM | Host | Purpose |
|
||
|----|-----|------|---------|
|
||
| .150-.199 | (available) | | |
|
||
|
||
### Security Cameras (.200-.224)
|
||
| IP | Camera | Location |
|
||
|----|--------|----------|
|
||
| .200-.224 | (available) | |
|
||
|
||
### IoT/Embedded (.225-.239)
|
||
| IP | Device | Notes |
|
||
|----|--------|-------|
|
||
| .225-.238 | (available) | |
|
||
| .239 | (reserved) | Former TOC IP |
|
||
|
||
### Proxmox Hosts + Bare Metal (.240-.250)
|
||
| IP | Hostname | Role | Tailscale |
|
||
|----|----------|------|-----------|
|
||
| .240 | data | Proxmox - DB node | 100.64.0.20 |
|
||
| .241 | utility | Proxmox - Utility [[services]] | 100.64.0.19 |
|
||
| .242 | cloud | Proxmox - Cloud storage | 100.64.0.22 |
|
||
| .243 | media | Proxmox - Media server | 100.64.0.21 |
|
||
| .244 | echo6-toc | LLM/AI server | 100.64.0.5 |
|
||
| .245-.250 | (available) | | |
|
||
|
||
### Meshtastic Nodes (.251-.254)
|
||
| IP | Node | Notes |
|
||
|----|------|-------|
|
||
| .251-.252 | (available) | |
|
||
| .253 | AIDA-NEBRA | Raspberry Pi running meshtasticd |
|
||
| .254 | (available) | |
|
||
|
||
---
|
||
|
||
## Tailscale IPs (100.64.0.x)
|
||
|
||
| Tailscale IP | Device | Local IP |
|
||
|--------------|--------|----------|
|
||
| 100.64.0.5 | echo6-toc | 192.168.1.244 |
|
||
| 100.64.0.40 | contabo / edge1 (rebuilt 2026-06-19, mail-only) | 5.189.158.149 (external) |
|
||
| 100.64.0.18 | aida-nebra | 192.168.1.253 |
|
||
| 100.64.0.19 | utility | 192.168.1.241 |
|
||
| 100.64.0.20 | data | 192.168.1.240 |
|
||
| 100.64.0.21 | media | 192.168.1.243 |
|
||
| 100.64.0.22 | cloud | 192.168.1.242 |
|
||
| 100.64.0.26 | edge2 | 184.174.35.153 (external) |
|
||
| 100.64.0.28 | pdm (CT 100 on edge2) | 10.10.10.10 (vmbr0) |
|
||
| 100.64.0.33 | vaultwarden (CT 102 on edge2) — node id 45 | 10.10.10.20 (vmbr0) |
|
||
| 100.64.0.34 | forgejo (CT 103 on edge2) — node id 46 | 10.10.10.21 (vmbr0) |
|
||
| 100.64.0.35 | livesync (CT 104 on edge2) — hostname `livesync` | 10.10.10.22 (vmbr0) |
|
||
| 100.64.0.36 | authentik (CT 105 on edge2) — node id 48 | 10.10.10.23 (vmbr0) |
|
||
| 100.64.0.37 | matrix (CT 106 on edge2) — hostname `matrix` | 10.10.10.24 (vmbr0) |
|
||
| 100.64.0.38 | headscale (CT 107 on edge2) — hostname `headscale` | 10.10.10.25 (vmbr0) |
|
||
|
||
---
|
||
|
||
## Notes
|
||
|
||
- DHCP range starts at .11 to leave room for network infra
|
||
- LXC containers get .100-.149 for easy identification
|
||
- Meshtastic nodes at .251-.254 (max 4 hardware nodes)
|
||
- AIDA-NEBRA at .253 is technically a Meshtastic node (runs meshtasticd)
|
||
|
||
---
|
||
|
||
*Last updated: 2026-06-19 — Added edge1 section (rebuilt Contabo VPS, 5.189.158.149 / 100.64.0.40, mail-only, Mailcow CT 101 at 10.10.10.2); added edge2 CT 108 (mailcow-staging, stopped); Tailscale table: contabo-mailcow entry replaced with edge1 at 100.64.0.40; previously added edge2 CTs 102–107*
|