# VM Network Reference
Updated: 2026-06-30

## Subnet: 10.48.200.0/24 (Internal LAN via FortiGate)

| VM/CT           | VMID | IP              | Role                          | Host  |
|-----------------|------|-----------------|-------------------------------|-------|
| PVE1 (baremetal)| —    | 10.48.200.90    | Proxmox hypervisor            | —     |
| PVE2 (baremetal)| —    | 10.48.200.91    | Proxmox hypervisor (offline)  | —     |
| NPM             | 101  | 10.48.200.200   | Nginx Proxy Manager           | PVE1  |
| NovaCPX         | 120  | 10.48.200.110   | web.orbishosting.com (Apache) | PVE1  |
| JARVIS          | 200  | 10.48.200.211   | Home automation / agent host  | PVE1  |
| Homebridge      | 103  | 10.48.200.18    | Homebridge (SSH: myron only)  | PVE1  |
| Jellyfin        | 104  | 10.48.200.33    | Jellyfin media server         | PVE1  |
| MediaStack      | 105  | 10.48.200.35    | Sonarr/Radarr/Prowlarr/qBit   | PVE1  |
| WireGuard CT    | 110  | 10.48.200.67    | VPN kill-switch for MediaStack| PVE1  |
| Ollama          | 106  | 10.48.200.210   | Ollama LLM server (offline)   | PVE1  |
| NetworkBackup   | 302  | 10.48.200.99    | Network backup (offline)      | PVE1  |
| NAS (Synology)  | —    | 10.48.200.249   | File storage                  | —     |

## External Servers

| Server       | IP              | Role                     |
|--------------|-----------------|--------------------------|
| FortiGate WAN| 97.154.207.5    | Internet gateway (Verizon)|
| DO server    | 165.22.1.228    | DigitalOcean VPS         |
| FusionPBX    | 134.209.72.226  | VoIP server              |

## NAS Storage (10.48.200.249 — Synology)

| Share        | Protocol | Mount point (on client)     | Used by         |
|--------------|----------|-----------------------------|-----------------|
| /volume1/video| NFS     | /mnt/nas/video              | MediaStack      |
| /volume1/video/movies | NFS | /media/movies            | MediaStack      |
| /volume1/video/tv | NFS | /media/tv                  | MediaStack      |
| /media/movies | NFS (re-export) | /mnt/mediastack/movies | Jellyfin     |
| /media/tv    | NFS (re-export) | /mnt/mediastack/tv      | Jellyfin        |
| Storage/MSPBackups | CIFS | /mnt/nas-backups         | All VMs (MSP360)|
| homes        | CIFS    | (unused)                    | —               |

NAS CIFS credentials: /etc/nas-creds/msp360 (username=nas) on each VM

## WireGuard VPN Subnet: 10.200.0.0/24

| Host           | WG IP       | Role                    |
|----------------|-------------|-------------------------|
| WireGuard CT   | 10.200.0.1  | Gateway (NordVPN relay) |
| Jellyfin       | 10.200.0.3  | NFS client              |
| MediaStack     | 10.200.0.4  | Kill-switch client      |

NordVPN exit node: 2.56.190.69 (Clouvider UK, AS62240)
NordVPN WireGuard endpoint: 2.56.190.66:51820

## NPM Proxy (10.48.200.200)
Reverse proxies HTTPS from FortiGate WAN → internal services.
All certs via Let's Encrypt. Admin panel: http://10.48.200.200:81

## MediaStack Services

| Service     | Port  | URL                               |
|-------------|-------|-----------------------------------|
| qBittorrent | 8080  | http://10.48.200.35:8080          |
| Sonarr      | 8989  | http://10.48.200.35:8989          |
| Radarr      | 7878  | http://10.48.200.35:7878          |
| Prowlarr    | 9696  | http://10.48.200.35:9696          |
| Jellyfin    | 8096  | http://10.48.200.33:8096          |