Initial infrastructure documentation - comprehensive homelab reference

2026-02-23 03:42:22 +00:00
commit 0682c79580
169 changed files with 63913 additions and 0 deletions
--- a/infrastructure/.env.example
+++ b/infrastructure/.env.example
@@ -0,0 +1,141 @@
+# Homelab Infrastructure Environment Variables
+# Copy to .env and fill in any secrets
+# Generated from AGENT-REFERENCE.md
+
+# =============================================================================
+# VPS HOSTS
+# =============================================================================
+VPS_PRIMARY_IP=66.63.182.168
+VPS_PRIMARY_DOMAIN=vps.nianticbooks.com
+VPS_PRIMARY_USER=fred
+
+VPS_GAMING_IP=51.222.12.162
+VPS_GAMING_DOMAIN=deadeyeg4ming.vip
+VPS_GAMING_USER=ubuntu
+
+# =============================================================================
+# PROXMOX HOSTS
+# =============================================================================
+PROXMOX_MAIN_IP=10.0.10.3
+PROXMOX_MAIN_HOST=main-pve
+PROXMOX_MAIN_USER=root
+
+PROXMOX_ROUTER_IP=10.0.10.2
+PROXMOX_ROUTER_HOST=pve-router
+PROXMOX_ROUTER_USER=root
+
+PROXMOX_STORAGE_IP=10.0.10.4
+PROXMOX_STORAGE_HOST=pve-storage
+PROXMOX_STORAGE_USER=root
+
+# =============================================================================
+# NETWORK
+# =============================================================================
+GATEWAY_IP=10.0.10.1
+NETWORK_CIDR=10.0.10.0/24
+DHCP_RANGE_START=10.0.10.50
+DHCP_RANGE_END=10.0.10.254
+
+# WireGuard
+WIREGUARD_ACTIVE_NETWORK=10.0.9.0/24
+WIREGUARD_LEGACY_NETWORK=10.0.8.0/24
+WIREGUARD_ENDPOINT=51.222.12.162:51820
+WIREGUARD_VPS_PROXY_IP=10.0.9.3
+
+# =============================================================================
+# INFRASTRUCTURE SERVICES
+# =============================================================================
+# Step-CA (CT 115)
+STEPCA_IP=10.0.10.15
+STEPCA_PORT=8443
+STEPCA_ACME_URL=https://10.0.10.15:8443/acme/acme/directory
+
+# PostgreSQL (CT 102) - Shared database
+POSTGRES_IP=10.0.10.20
+POSTGRES_PORT=5432
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=
+
+# Authentik (CT 121)
+AUTHENTIK_IP=10.0.10.21
+AUTHENTIK_PORT=9000
+AUTHENTIK_ADMIN_USER=akadmin
+AUTHENTIK_ADMIN_PASSWORD=
+
+# n8n (CT 106)
+N8N_IP=10.0.10.22
+N8N_PORT=5678
+
+# RustDesk (CT 123)
+RUSTDESK_IP=10.0.10.23
+RUSTDESK_ID_PORT=21115
+RUSTDESK_RELAY_PORT=21117
+RUSTDESK_PUBKEY=sfYuCTMHxrA22kukomb/RAKYyUgr8iaMfm/U4CFLfL0=
+
+# Prometheus/Grafana (CT 125)
+PROMETHEUS_IP=10.0.10.25
+PROMETHEUS_PORT=9090
+GRAFANA_IP=10.0.10.25
+GRAFANA_PORT=3000
+
+# Uptime Kuma (CT 128)
+UPTIME_KUMA_IP=10.0.10.26
+UPTIME_KUMA_PORT=3001
+
+# =============================================================================
+# APPLICATION SERVICES
+# =============================================================================
+# Home Assistant (VM 104 on pve-router)
+HOME_ASSISTANT_IP=10.0.10.24
+HOME_ASSISTANT_PORT=8123
+
+# Dockge/Vikunja (CT 127)
+DOCKGE_IP=10.0.10.27
+DOCKGE_PORT=5001
+VIKUNJA_IP=10.0.10.27
+VIKUNJA_PORT=3456
+
+# Bar Assistant (CT 103)
+BAR_ASSISTANT_IP=10.0.10.40
+BAR_ASSISTANT_PORT=8080
+
+# Minecraft Servers
+MINECRAFT_FORGE_IP=10.0.10.41
+MINECRAFT_FORGE_PORT=25565
+MINECRAFT_STONEBLOCK_IP=10.0.10.42
+MINECRAFT_STONEBLOCK_PORT=25565
+
+# Pterodactyl (CT 105/107)
+PTERODACTYL_PANEL_IP=10.0.10.45
+PTERODACTYL_PANEL_PORT=80
+PTERODACTYL_WINGS_IP=10.0.10.46
+PTERODACTYL_WINGS_PORT=8080
+
+# =============================================================================
+# OTHER HOSTS
+# =============================================================================
+# OpenMediaVault (VM 400)
+OMV_IP=10.0.10.5
+OMV_NFS_PATH=/export/backups
+
+# HOMELAB-COMMAND (Windows PC)
+HOMELAB_COMMAND_IP=10.0.10.10
+
+# Twingate (CT 101)
+TWINGATE_IP=10.0.10.179
+
+# =============================================================================
+# PUBLIC DOMAINS (Caddy reverse proxy)
+# =============================================================================
+DOMAIN_BASE=nianticbooks.com
+DOMAIN_PROXMOX=freddesk.nianticbooks.com
+DOMAIN_HOME_ASSISTANT=bob.nianticbooks.com
+DOMAIN_AUTHENTIK=auth.nianticbooks.com
+DOMAIN_3D_PRINTER=ad5m.nianticbooks.com
+DOMAIN_COCKTAILS=cocktails.nianticbooks.com
+DOMAIN_VIKUNJA=tasks.nianticbooks.com
+
+# =============================================================================
+# TRUSTED PROXIES (for services behind WireGuard)
+# =============================================================================
+TRUSTED_PROXIES=10.0.9.0/24,10.0.8.0/24,10.0.9.3