Auto-sync: 2026-07-24

2026-07-24 22:00:15 +00:00
parent de97cd6d20
commit 1643a0a6b5
36 changed files with 920 additions and 499 deletions
@@ -0,0 +1,75 @@
+---
+title: IP-Map (Quick Reference)
+category: reference
+tags: [ip, network, reference, quick-lookup]
+created: "2026-07-24"
+modified: "2026-07-24"
+---
+
+# IP-Map
+
+## Proxmox Hosts (10.0.20.x) — 9 Nodes
+| IP | Hostname | Node ID | Notes |
+|----|----------|---------|-------|
+| 10.0.20.20 | proxmox2 | 3 | |
+| 10.0.20.30 | proxmox3 | 4 | |
+| 10.0.20.40 | proxmox4 | 2 | |
+| 10.0.20.50 | proxmox5 | 5 | MON, MGR |
+| 10.0.20.60 | proxmox6 | 6 | |
+| 10.0.20.70 | proxmox7 | 7 | MON, Traefik CT99999 |
+| 10.0.20.91 | n5pro | 8 | Templates 9000/9001/9002 |
+| 10.0.20.92 | ms-a2-1 | 9 | OSD 13 (SSD 1.8TB), GPU 1002:13c0 |
+| 10.0.20.93 | ms-a2-2 | 1 | OSD 14 (SSD 1.8TB), GPU 1002:13c0 |
+
+> ⚠️ n5pro (10.0.20.91, nodeid 8) ≠ proxmox7 (10.0.20.70, nodeid 7) — separate Nodes!
+> proxmox1 (10.0.20.10, nodeid 1) wurde dauerhaft entfernt (2026-07-24).
+> Immer `pvecm nodes` für kanonische Liste prüfen.
+
+## Kubernetes Nodes (10.0.30.5x-6x)
+| IP | Node | Role |
+|----|------|------|
+| 10.0.30.51 | cp-01 | Control Plane |
+| 10.0.30.52 | cp-02 | Control Plane |
+| 10.0.30.53 | cp-03 | Control Plane |
+| 10.0.30.63 | worker-01 | Worker |
+| 10.0.30.64 | worker-04 | Worker (GPU ✅) |
+| 10.0.30.65 | worker-05 | Worker (GPU defekt) |
+
+## Database Layer (10.0.30.7x-8x)
+| IP | Host | Service |
+|----|------|---------|
+| 10.0.30.70 | — | MaxScale VIP (keepalived) :3306 |
+| 10.0.30.71 | VM300 | Galera db1 (ms-a2-1) |
+| 10.0.30.72 | VM301 | Galera db2 (proxmox3) |
+| 10.0.30.73 | VM302 | Galera db3 (proxmox6) |
+| 10.0.30.81 | VM310 | MaxScale-01 Admin :8989 |
+| 10.0.30.82 | VM311 | MaxScale-02 Standby |
+
+## Infrastructure VMs (10.0.30.x)
+| IP | Host | Service |
+|----|------|---------|
+| 10.0.30.99 | CT111 | Immich (n5pro), Migration zu K8s geplant |
+| 10.0.30.100 | CT134 | InfluxDB (Migration zu K8s) |
+| 10.0.30.105 | — | ~~Gitea~~ DECOMMISSIONED (CT108, stopped) |
+| 10.0.30.124 | VM200 | IaC Runner (DHCP), SSH `debian` |
+| 10.0.30.141 | CT141 | Monitoring (Prometheus/Grafana) |
+| 10.0.30.145 | CT145 | Voice Pipeline (PJSIP :5060) |
+
+## K8s LoadBalancers (10.0.30.2xx)
+| IP | Service | Namespace |
+|----|---------|-----------|
+| 10.0.30.201 | Hindsight API :9177 | hindsight |
+| 10.0.30.204 | InfluxDB :8086 | influxdb |
+| 10.0.30.205 | Grafana | monitoring |
+| 10.0.30.206 | Prometheus :9090 | monitoring |
+| 10.0.30.207 | Loki :3100 | logging |
+
+## DMZ / Reverse Proxies (10.0.60.x)
+| IP | Host | Service |
+|----|------|---------|
+| 10.0.60.10 | CT9999 | Traefik Reverse Proxy (root/[REDACTED]) |
+
+## Related
+- [[concepts/network-architecture]]
+- [[reference/ssh-keys]]
+- [[reference/ports]]
@@ -0,0 +1,38 @@
+---
+title: Ports (Quick Reference)
+category: reference
+tags: [ports, network, reference, quick-lookup]
+created: "2026-07-24"
+modified: "2026-07-24"
+---
+
+# Ports
+
+## Infrastructure Services
+| Port | Service | Host | Notes |
+|------|---------|------|-------|
+| 22 | SSH (Gitea) | git.schoen.codes (LB 10.0.30.202) | Gitea SSH für ArgoCD |
+| 2222 | SSH (Server) | diverse | Standard SSH Port im Homelab |
+| 3000 | Gitea HTTP | git.schoen.codes (K8s Ingress) | CT108 decommissioned |
+| 3100 | Loki | 10.0.30.207 | LB |
+| 3306 | MariaDB (MaxScale VIP) | 10.0.30.70 | Galera HA |
+| 5432 | PostgreSQL (CNPG) | postgres-main-rw.postgres.svc | K8s internal |
+| 8000 | Paperless-ngx | paperless.svc | K8s internal |
+| 8086 | InfluxDB | 10.0.30.204 | LB |
+| 8989 | MaxScale Admin | 10.0.30.81 | admin:mariadb |
+| 9090 | Prometheus | 10.0.30.206 | LB |
+| 9093 | Alertmanager | K8s internal | |
+| 9095 | HolmesGPT Adapter | K8s internal | Alertmgr → HolmesGPT |
+| 9177 | Hindsight API | 10.0.30.201 | LB, NOT localhost |
+| 9221 | PVE Exporter | 10.0.30.141 | |
+| 9283 | Ceph Prometheus | 10.0.20.91 | active mgr |
+| 9345 | RKE2 Server URL | 10.0.30.50 | cp-01 |
+
+## Voice Pipeline
+| Port | Service | Host |
+|------|---------|------|
+| 5060 | PJSIP / Asterisk | CT145 |
+
+## Related
+- [[reference/ip-map]]
+- [[concepts/network-architecture]]
@@ -0,0 +1,41 @@
+---
+title: SSH-Keys (Quick Reference)
+category: reference
+tags: [ssh, keys, reference, quick-lookup]
+created: "2026-07-24"
+modified: "2026-07-24"
+---
+
+# SSH-Keys
+
+## Key-Übersicht
+| Key | Zweck | Fingerprint | Ziel-Hosts |
+|-----|-------|--------------|------------|
+| `id_ed25519_proxmox` | Proxmox Hosts (10.0.20.x) | — | 9 PVE Nodes |
+| `id_ed25519_workers` | RKE2 Worker Nodes | `...kzBo` | 10.0.30.6x |
+| `id_ed25519_cloudinit` | Cloud-init initial | `...JUYm` | VM200, Workers |
+| `id_ed25519` | VM200 (debian user) | `...MmkM` | 10.0.30.124 |
+
+## SSH-Befehle
+```bash
+# Proxmox Hosts
+ssh -i ~/.ssh/id_ed25519_proxmox root@10.0.20.x
+
+# VM200 (IaC Runner)
+ssh -i ~/.ssh/id_ed25519_proxmox debian@10.0.30.124
+
+# K8s Worker (via VM200)
+ssh -i /root/.ssh/id_ed25519_workers root@10.0.30.6x
+```
+
+## ArgoCD SSH Deploy Key
+- Ed25519 Key als Gitea Deploy Key (read-only)
+- ArgoCD Secret `argocd-repo-k8s-gitea` im argocd Namespace
+- `known_hosts` ConfigMap mit Gitea SSH Hostkey für git.schoen.codes
+
+## CT9999 (Traefik DMZ)
+- root / [REDACTED] (siehe 1Password)
+
+## Related
+- [[reference/ip-map]]
+- [[concepts/credential-policy]]