mirror of
https://github.com/myronblair/proxmox-config
synced 2026-06-30 15:59:57 -05:00
myron
d45f88b604
- vm-configs/fstab/: fstab snapshots for JARVIS, NPM, NovaCPX, Jellyfin, MediaStack - vm-configs/network-reference.md: full IP/service/NAS/WireGuard reference - wireguard/: MediaStack wg0/wg1 and WireGuard CT nord0/wg-clients configs - msp360/: install and setup scripts + staggered backup schedule Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01X8tDRrQqgLjqXebMCBNcP3
3.4 KiB
3.4 KiB
VM Network Reference
Updated: 2026-06-30
Subnet: 10.48.200.0/24 (Internal LAN via FortiGate)
| VM/CT | VMID | IP | Role | Host |
|---|---|---|---|---|
| PVE1 (baremetal) | — | 10.48.200.90 | Proxmox hypervisor | — |
| PVE2 (baremetal) | — | 10.48.200.91 | Proxmox hypervisor (offline) | — |
| NPM | 101 | 10.48.200.200 | Nginx Proxy Manager | PVE1 |
| NovaCPX | 120 | 10.48.200.110 | web.orbishosting.com (Apache) | PVE1 |
| JARVIS | 200 | 10.48.200.211 | Home automation / agent host | PVE1 |
| Homebridge | 103 | 10.48.200.18 | Homebridge (SSH: myron only) | PVE1 |
| Jellyfin | 104 | 10.48.200.33 | Jellyfin media server | PVE1 |
| MediaStack | 105 | 10.48.200.35 | Sonarr/Radarr/Prowlarr/qBit | PVE1 |
| WireGuard CT | 110 | 10.48.200.67 | VPN kill-switch for MediaStack | PVE1 |
| Ollama | 106 | 10.48.200.210 | Ollama LLM server (offline) | PVE1 |
| NetworkBackup | 302 | 10.48.200.99 | Network backup (offline) | PVE1 |
| NAS (Synology) | — | 10.48.200.249 | File storage | — |
External Servers
| Server | IP | Role |
|---|---|---|
| FortiGate WAN | 97.154.207.5 | Internet gateway (Verizon) |
| DO server | 165.22.1.228 | DigitalOcean VPS |
| FusionPBX | 134.209.72.226 | VoIP server |
NAS Storage (10.48.200.249 — Synology)
| Share | Protocol | Mount point (on client) | Used by |
|---|---|---|---|
| /volume1/video | NFS | /mnt/nas/video | MediaStack |
| /volume1/video/movies | NFS | /media/movies | MediaStack |
| /volume1/video/tv | NFS | /media/tv | MediaStack |
| /media/movies | NFS (re-export) | /mnt/mediastack/movies | Jellyfin |
| /media/tv | NFS (re-export) | /mnt/mediastack/tv | Jellyfin |
| Storage/MSPBackups | CIFS | /mnt/nas-backups | All VMs (MSP360) |
| homes | CIFS | (unused) | — |
NAS CIFS credentials: /etc/nas-creds/msp360 (username=nas) on each VM
WireGuard VPN Subnet: 10.200.0.0/24
| Host | WG IP | Role |
|---|---|---|
| WireGuard CT | 10.200.0.1 | Gateway (NordVPN relay) |
| Jellyfin | 10.200.0.3 | NFS client |
| MediaStack | 10.200.0.4 | Kill-switch client |
NordVPN exit node: 2.56.190.69 (Clouvider UK, AS62240) NordVPN WireGuard endpoint: 2.56.190.66:51820
NPM Proxy (10.48.200.200)
Reverse proxies HTTPS from FortiGate WAN → internal services. All certs via Let's Encrypt. Admin panel: http://10.48.200.200:81
MediaStack Services
| Service | Port | URL |
|---|---|---|
| qBittorrent | 8080 | http://10.48.200.35:8080 |
| Sonarr | 8989 | http://10.48.200.35:8989 |
| Radarr | 7878 | http://10.48.200.35:7878 |
| Prowlarr | 9696 | http://10.48.200.35:9696 |
| Jellyfin | 8096 | http://10.48.200.33:8096 |