Files
homelab-docs/infrastructure/infrastructure-audit.md

8.9 KiB

Infrastructure Audit

Last Updated: 2026-01-18 Status: Active - Source of Truth

This document provides a comprehensive inventory of all infrastructure components. For IP allocations, see IP-ALLOCATION.md.


1. VPS Configuration

Property Value
Provider Hudson Valley Host
Public IP 66.63.182.168
Hostname vps.nianticbooks.com
OS Ubuntu 24.04 x86_64
Specs 2 vCPUs, 4GB RAM, 100GB storage

VPS Services

Service Port Status
Caddy Reverse Proxy 80, 443 Active
WireGuard VPN Server 51820/UDP Active
RustDesk Relay (hbbr) 21117 Active

Caddy Routes (via WireGuard to home lab)

Domain Backend Status
freddesk.nianticbooks.com 10.0.10.3:8006 Active
ad5m.nianticbooks.com 10.0.10.30:80 Active
bob.nianticbooks.com 10.0.10.24:8123 Active
auth.nianticbooks.com 10.0.10.21:9000 Active
cocktails.nianticbooks.com 10.0.10.40 Active

2. WireGuard Tunnel

Property Value
Status Active
Gaming VPS Endpoint 51.222.12.162:51820
Gaming VPS Tunnel IP 10.0.9.1
UCG Ultra Tunnel IP 10.0.9.2
VPS Proxy Tunnel IP 10.0.9.3
Home Lab Subnet 10.0.10.0/24
Keepalive 25 seconds

3. Proxmox Cluster

main-pve (DL380p) - Production Workloads

Property Value
IP Address 10.0.10.3 (static)
iLO Management 10.0.10.13
Location Remote
CPU 32 cores
RAM 96 GB
Role Primary production host

Running Containers (14 total):

CT ID Name IP Service
102 postgresql 10.0.10.20 Shared PostgreSQL database
103 bar-assistant 10.0.10.40 Cocktail recipe manager
105 pterodactyl-panel 10.0.10.45 Game server management panel
106 n8n 10.0.10.22 Workflow automation
107 pterodactyl-wings 10.0.10.46 Game server node
115 ca-server 10.0.10.15 Step-CA certificate authority
121 authentik 10.0.10.21 SSO/Identity provider
123 rustdesk 10.0.10.23 RustDesk ID server (hbbs)
125 prometheus 10.0.10.25 Monitoring (Prometheus + Grafana)
127 dockge 10.0.10.27 Docker Compose mgmt + Media Stack (6 services)
128 uptime-kuma 10.0.10.26 Uptime monitoring
130 minecraft-forge 10.0.10.41 Minecraft Forge server
131 minecraft-stoneblock4 10.0.10.42 Minecraft Stoneblock 4
135 vehicle-tracker 10.0.10.35 Vehicle Maintenance Tracker (Planned)

pve-router (i5) - Local/Light Workloads

Property Value
IP Address 10.0.10.2 (static)
DNS proxmox.nianticbooks.home
Location Office
CPU 8 cores
RAM 8 GB
Role Local development, Home Assistant

Running VMs (1 total):

VM ID Name IP Service
104 haos16.2 10.0.10.24 Home Assistant OS

Running Containers (1 total):

CT ID Name IP Service
101 twingate-connector 10.0.10.179 Zero-trust remote access

pve-storage - Storage Host

Property Value
IP Address 10.0.10.4 (static)
Role Storage host (3.5" drive support)

Running VMs (1 total):

VM ID Name IP Service
400 OMV 10.0.10.5 OpenMediaVault (12TB)

4. Network Configuration

Property Value
Subnet 10.0.10.0/24
Gateway 10.0.10.1 (UCG Ultra)
DHCP Range 10.0.10.50-254
Static Range 10.0.10.1-49

Note: All infrastructure IPs (.1-.49) use static configuration on devices, not DHCP reservations.

See IP-ALLOCATION.md for complete IP assignments.


5. Key Services Summary

Authentication & Security

Service IP Port Purpose
Authentik SSO 10.0.10.21 9000 OAuth2/OIDC, WebAuthn
Step-CA 10.0.10.15 8443 Internal certificate authority
Twingate 10.0.10.179 - Zero-trust remote access

Databases

Service IP Port Purpose
PostgreSQL 10.0.10.20 5432 Shared DB (Authentik, n8n, RustDesk, Grafana)

Monitoring

Service IP Port Purpose
Prometheus 10.0.10.25 9090 Metrics collection
Grafana 10.0.10.25 3000 Dashboards
Uptime Kuma 10.0.10.26 3001 Uptime monitoring

Automation

Service IP Port Purpose
n8n 10.0.10.22 5678 Workflow automation
Home Assistant 10.0.10.24 8123 Smart home

Gaming

Service IP Port Purpose
Pterodactyl Panel 10.0.10.45 80 Game server management
Pterodactyl Wings 10.0.10.46 8080 Game server node
Minecraft Forge 10.0.10.41 25565 CFMRPGU modpack
Minecraft SB4 10.0.10.42 25566 Stoneblock 4 modpack

Remote Access

Service IP Port Purpose
RustDesk ID (hbbs) 10.0.10.23 21116 Remote desktop ID server
RustDesk Relay (hbbr) VPS 21117 Remote desktop relay

Storage

Service IP Purpose
OpenMediaVault 10.0.10.5 12TB NFS/SMB storage (media library for Arr stack)
Dockge 10.0.10.27 Docker stack management

Media Automation (Arr Stack)

Service IP Port Purpose
Sonarr 10.0.10.27 8989 TV show monitoring & automation
Radarr 10.0.10.27 7878 Movie monitoring & automation
Prowlarr 10.0.10.27 9696 Indexer management for *arr apps
Bazarr 10.0.10.27 6767 Subtitle download automation
Deluge 10.0.10.27 8112 BitTorrent download client
Calibre-Web 10.0.10.27 8083 eBook library management
Caddy Internal Proxy 10.0.10.27 443 HTTPS reverse proxy (Caddy Internal PKI)

Storage Paths:

  • /media/tv - Sonarr TV library
  • /media/movies - Radarr movie library
  • /media/downloads - Deluge download directory
  • /media/books - Calibre library

Note: All services run as Docker containers on CT 127 (Dockge), accessible via HTTPS at https://<service>.nianticbooks.home

Utility

Service IP Port Purpose
Bar Assistant 10.0.10.40 80 Cocktail recipe manager
Vikunja 10.0.10.27 3456 Task management (no longer actively used)

6. Backup System

Tier 1 - Local (OMV NFS)

Property Value
Storage 10.0.10.5:/export/backups
Available 7.3 TB
Mount Point /mnt/omv-backups (all Proxmox hosts)

Automated Backups:

Time What Retention
2:00 AM PostgreSQL (all databases) 7 daily, 4 weekly, 3 monthly
2:30 AM Proxmox VMs/containers 7 daily, 4 weekly, 3 monthly

7. Physical Devices

HOMELAB-COMMAND (10.0.10.10)

Property Value
Type Gaming PC
GPU RTX 5060
Services Wyoming (Whisper STT, Piper TTS), Ollama LLM
OS Windows 11
Role Claude Code host, voice assistant hub

HP iLO (10.0.10.13)

Property Value
Type Server management
Purpose DL380p (main-pve) remote management

3D Printers

Device IP Status
Flashforge AD5M 10.0.10.30 Active
Bambu Lab A1 10.0.10.31 Active

8. Audit History

Date Action Notes
2026-01-25 Deployed Media Stack Sonarr, Radarr, Prowlarr, Bazarr, Deluge, Calibre-Web on CT 127 via Docker
2026-01-25 Deployed Caddy Internal Proxy HTTPS reverse proxy for internal services on CT 127
2026-01-25 Deployed CA certificates Homelab root CA distributed to all LXC containers and Proxmox hosts
2026-01-25 Deprecated Vikunja No longer actively used (Claude Code replaced n8n workflow use case)
2026-01-18 Deployed Vikunja Task management on Dockge (10.0.10.27:3456), tasks.nianticbooks.com
2026-01-13 Full network audit Compared UCG DHCP export vs docs, verified all services
2026-01-13 Removed CT 100 pve-scripts-local - unused, IP conflict with bar-assistant
2025-12-29 Initial audit Infrastructure audit template completed

9. Outstanding Items

  • Fix Home Assistant public domain (Caddy HTTPS backend config)
  • Move Bambu A1 to static IP 10.0.10.31 (done 2026-01-13)
  • Identify unknown Raspberry Pi devices (.81, .171, .246)
  • Document ESP devices purpose (.90, .207)
  • Cleanup deprecated VMs (Spoolman .71, Authelia .112)