echo6-docs/vault/docs/hardware/ip-allocation.md
Matt Johnson 44f0257376 docs: migrate Authentik (SSO keystone) to edge2 CT 105
- Authentik -> edge2 CT 105 (Postgres pg_dump/restore; SECRET_KEY carried verbatim; zero-downtime until ~2s cutover)
- Multi-block Caddy cutover: auth.echo6.co + notes.echo6.co outpost/forward_auth -> 100.64.0.36:9000
- runbook: add reboot tailscale-before-docker gotcha; clarify dnsmasq must NOT be repointed (points at Caddy host)
- source left stopped + intact on Contabo as cold rollback

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-18 05:49:07 +00:00

5.1 KiB
Executable file

Echo6 Network IP Allocation

IP Ranges

Range Purpose
.1-.10 Network Infrastructure (router, switches, APs)
.11-.99 DHCP (phones, laptops, guests)
.100-.149 LXC Containers
.150-.199 VMs
.200-.224 Security Cameras
.225-.239 IoT/Embedded Devices
.240-.250 Proxmox Hosts + Bare Metal Servers
.251-.254 Meshtastic Nodes

Current Allocations

Network Infrastructure (.1-.10)

IP Device Notes
.1 Router/Gateway
.2-.10 (available) Switches, APs

LXC Containers (.100-.149)

IP Container Host Purpose
.100 meshmonitor (CT 100) utility MeshMonitor web UI
.101 caddy (CT 101) utility Home reverse proxy
.102 searxng (CT 102) utility Echo6 Search (SearXNG)
.103 argus (CT 103) utility ARGUS OSINT platform
.104 meshing-around (CT 104) utility Mesh bot + WebGUI
.106 meshtastic-hs (CT 106) utility IdahoMesh Headscale
.107 mesh-bridge (CT 107) utility Dual-tailscaled bridge
.109 mmud (CT 109) utility MMUD game daemon + web dashboard
.111 mmud-embr (CT 111) utility MMUD SIM: EMBR (game server)
.112 mmud-dcrg (CT 112) utility MMUD SIM: DCRG (broadcast)
.113 mmud-grst (CT 113) utility MMUD SIM: GRST (Grist barkeep)
.114 mmud-mrn (CT 114) utility MMUD SIM: MRN (Maren healer)
.115 mmud-trvl (CT 115) utility MMUD SIM: TRVL (Torval merchant)
.116 mmud-wspr (CT 116) utility MMUD SIM: WSPR (Whisper sage)
.118 archivist (CT 118) utility Signal/Matrix archive bot
.130 recon (VM 1130) data RECON pipeline (migrated from CT 130)
.144 meshai (CT 108) utility MeshAI assistant
.170 peertube (CT 110) media PeerTube streaming
.182 immich (CT 120) cloud Immich photos
.183 nextcloud (CT 121) cloud Nextcloud AIO

edge2 LXC Containers (10.10.10.x, vmbr0)

edge2 (Contabo Cloud VPS 184.174.35.153 / Tailscale 100.64.0.26) uses a separate 10.10.10.0/24 subnet on vmbr0 (gw 10.10.10.1). No DHCP — all IPs are static. Storage: local (dir, no local-lvm).

IP Container CTID Tailscale Purpose
10.10.10.10 pdm CT 100 100.64.0.28 Proxmox Datacenter Manager
10.10.10.11 wordpress CT 101 100.64.0.31 WordPress for intermountainmesh.com
10.10.10.20 vaultwarden CT 102 100.64.0.33 Vaultwarden password manager (migrated from Contabo 2026-06-16)
10.10.10.21 forgejo CT 103 100.64.0.34 Forgejo git server (migrated from Contabo 2026-06-16)
10.10.10.22 livesync CT 104 100.64.0.35 LiveSync Obsidian sync (CouchDB + provisioner; migrated from Contabo 2026-06-16)
10.10.10.23 authentik CT 105 100.64.0.36 Authentik SSO platform (migrated from Contabo 2026-06-18)

VMs (.150-.199)

IP VM Host Purpose
.150-.199 (available)

Security Cameras (.200-.224)

IP Camera Location
.200-.224 (available)

IoT/Embedded (.225-.239)

IP Device Notes
.225-.238 (available)
.239 (reserved) Former TOC IP

Proxmox Hosts + Bare Metal (.240-.250)

IP Hostname Role Tailscale
.240 data Proxmox - DB node 100.64.0.20
.241 utility Proxmox - Utility services 100.64.0.19
.242 cloud Proxmox - Cloud storage 100.64.0.22
.243 media Proxmox - Media server 100.64.0.21
.244 echo6-toc LLM/AI server 100.64.0.5
.245-.250 (available)

Meshtastic Nodes (.251-.254)

IP Node Notes
.251-.252 (available)
.253 AIDA-NEBRA Raspberry Pi running meshtasticd
.254 (available)

Tailscale IPs (100.64.0.x)

Tailscale IP Device Local IP
100.64.0.5 echo6-toc 192.168.1.244
100.64.0.6 contabo-mailcow 5.189.158.149 (external)
100.64.0.18 aida-nebra 192.168.1.253
100.64.0.19 utility 192.168.1.241
100.64.0.20 data 192.168.1.240
100.64.0.21 media 192.168.1.243
100.64.0.22 cloud 192.168.1.242
100.64.0.26 edge2 184.174.35.153 (external)
100.64.0.28 pdm (CT 100 on edge2) 10.10.10.10 (vmbr0)
100.64.0.33 vaultwarden (CT 102 on edge2) — node id 45 10.10.10.20 (vmbr0)
100.64.0.34 forgejo (CT 103 on edge2) — node id 46 10.10.10.21 (vmbr0)
100.64.0.35 livesync (CT 104 on edge2) — hostname livesync 10.10.10.22 (vmbr0)
100.64.0.36 authentik (CT 105 on edge2) — node id 48 10.10.10.23 (vmbr0)

Notes

  • DHCP range starts at .11 to leave room for network infra
  • LXC containers get .100-.149 for easy identification
  • Meshtastic nodes at .251-.254 (max 4 hardware nodes)
  • AIDA-NEBRA at .253 is technically a Meshtastic node (runs meshtasticd)

Last updated: 2026-06-18 — Added edge2 CT 105 (authentik) at 10.10.10.23 / 100.64.0.36 (node id 48); previously added CT 104 (livesync), CT 103 (forgejo), CT 102 (vaultwarden)