ippadmin/itpp-docs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
main
itpp-docs/site/itpp-infrastructure/index.html
T
Germaine Brown 98073dc636
Publish Docs Site / build (push) Failing after 5s
Details
feat: initial itpp-docs setup with MkDocs Material 
- mkdocs.yml with dark slate theme, nav for 12 ITPP projects
- build-docs.sh aggregates docs from all project repos
- .gitea/workflows/docs-publish.yml for nightly rebuild+deploy
- README and CHANGELOG for the itpp-docs repo itself
- docs-source/ populated from all 12 repos
- site/ ready for deployment to docs.itpropartner.com
2026-08-09 23:49:45 -04:00

2026 lines
46 KiB
HTML
Raw Permalink Blame History

<!doctype html>
<html lang="en" class="no-js">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<link rel="canonical" href="https://docs.itpropartner.com/itpp-infrastructure/">
<link rel="prev" href="..">
<link rel="next" href="../itpp-standards/">
<link rel="icon" href="../assets/images/favicon.png">
<meta name="generator" content="mkdocs-1.6.1, mkdocs-material-9.7.7">
<title>ITPP Infrastructure - IT Pro Partner Docs</title>
<link rel="stylesheet" href="../assets/stylesheets/main.ec1eaa64.min.css">
<link rel="stylesheet" href="../assets/stylesheets/palette.ab4e12ef.min.css">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto:300,300i,400,400i,700,700i%7CRoboto+Mono:400,400i,700,700i&display=fallback">
<style>:root{--md-text-font:"Roboto";--md-code-font:"Roboto Mono"}</style>
<script>__md_scope=new URL("..",location),__md_hash=e=>[...e].reduce(((e,_)=>(e<<5)-e+_.charCodeAt(0)),0),__md_get=(e,_=localStorage,t=__md_scope)=>JSON.parse(_.getItem(t.pathname+"."+e)),__md_set=(e,_,t=localStorage,a=__md_scope)=>{try{t.setItem(a.pathname+"."+e,JSON.stringify(_))}catch(e){}}</script>
</head>
<body dir="ltr" data-md-color-scheme="slate" data-md-color-primary="indigo" data-md-color-accent="indigo">
<input class="md-toggle" data-md-toggle="drawer" type="checkbox" id="__drawer" autocomplete="off">
<input class="md-toggle" data-md-toggle="search" type="checkbox" id="__search" autocomplete="off">
<label class="md-overlay" for="__drawer"></label>
<div data-md-component="skip">
<a href="#itpp-infrastructure" class="md-skip">
Skip to content
</a>
</div>
<div data-md-component="announce">
</div>
<header class="md-header" data-md-component="header">
<nav class="md-header__inner md-grid" aria-label="Header">
<a href=".." title="IT Pro Partner Docs" class="md-header__button md-logo" aria-label="IT Pro Partner Docs" data-md-component="logo">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8a3 3 0 0 0 3-3 3 3 0 0 0-3-3 3 3 0 0 0-3 3 3 3 0 0 0 3 3m0 3.54C9.64 9.35 6.5 8 3 8v11c3.5 0 6.64 1.35 9 3.54 2.36-2.19 5.5-3.54 9-3.54V8c-3.5 0-6.64 1.35-9 3.54"/></svg>
</a>
<label class="md-header__button md-icon" for="__drawer">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M3 6h18v2H3zm0 5h18v2H3zm0 5h18v2H3z"/></svg>
</label>
<div class="md-header__title" data-md-component="header-title">
<div class="md-header__ellipsis">
<div class="md-header__topic">
<span class="md-ellipsis">
IT Pro Partner Docs
</span>
</div>
<div class="md-header__topic" data-md-component="header-topic">
<span class="md-ellipsis">
ITPP Infrastructure
</span>
</div>
</div>
</div>
<label class="md-header__button md-icon" for="__search">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"/></svg>
</label>
<div class="md-search" data-md-component="search" role="dialog">
<label class="md-search__overlay" for="__search"></label>
<div class="md-search__inner" role="search">
<form class="md-search__form" name="search">
<input type="text" class="md-search__input" name="query" aria-label="Search" placeholder="Search" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" data-md-component="search-query" required>
<label class="md-search__icon md-icon" for="__search">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"/></svg>
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11z"/></svg>
</label>
<nav class="md-search__options" aria-label="Search">
<a href="javascript:void(0)" class="md-search__icon md-icon" title="Share" aria-label="Share" data-clipboard data-clipboard-text="" data-md-component="search-share" tabindex="-1">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M18 16.08c-.76 0-1.44.3-1.96.77L8.91 12.7c.05-.23.09-.46.09-.7s-.04-.47-.09-.7l7.05-4.11c.54.5 1.25.81 2.04.81a3 3 0 0 0 3-3 3 3 0 0 0-3-3 3 3 0 0 0-3 3c0 .24.04.47.09.7L8.04 9.81C7.5 9.31 6.79 9 6 9a3 3 0 0 0-3 3 3 3 0 0 0 3 3c.79 0 1.5-.31 2.04-.81l7.12 4.15c-.05.21-.08.43-.08.66 0 1.61 1.31 2.91 2.92 2.91s2.92-1.3 2.92-2.91A2.92 2.92 0 0 0 18 16.08"/></svg>
</a>
<button type="reset" class="md-search__icon md-icon" title="Clear" aria-label="Clear" tabindex="-1">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"/></svg>
</button>
</nav>
</form>
<div class="md-search__output">
<div class="md-search__scrollwrap" tabindex="0" data-md-scrollfix>
<div class="md-search-result" data-md-component="search-result">
<div class="md-search-result__meta">
Initializing search
</div>
<ol class="md-search-result__list" role="presentation"></ol>
</div>
</div>
</div>
</div>
</div>
<div class="md-header__source">
<a href="https://git.itpropartner.com/ippadmin/itpp-docs" title="Go to repository" class="md-source" data-md-component="source">
<div class="md-source__icon md-icon">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 7.1.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2025 Fonticons, Inc.--><path d="M439.6 236.1 244 40.5c-5.4-5.5-12.8-8.5-20.4-8.5s-15 3-20.4 8.4L162.5 81l51.5 51.5c27.1-9.1 52.7 16.8 43.4 43.7l49.7 49.7c34.2-11.8 61.2 31 35.5 56.7-26.5 26.5-70.2-2.9-56-37.3L240.3 199v121.9c25.3 12.5 22.3 41.8 9.1 55-6.4 6.4-15.2 10.1-24.3 10.1s-17.8-3.6-24.3-10.1c-17.6-17.6-11.1-46.9 11.2-56v-123c-20.8-8.5-24.6-30.7-18.6-45L142.6 101 8.5 235.1C3 240.6 0 247.9 0 255.5s3 15 8.5 20.4l195.6 195.7c5.4 5.4 12.7 8.4 20.4 8.4s15-3 20.4-8.4l194.7-194.7c5.4-5.4 8.4-12.8 8.4-20.4s-3-15-8.4-20.4"/></svg>
</div>
<div class="md-source__repository">
Git
</div>
</a>
</div>
</nav>
</header>
<div class="md-container" data-md-component="container">
<nav class="md-tabs" aria-label="Tabs" data-md-component="tabs">
<div class="md-grid">
<ul class="md-tabs__list">
<li class="md-tabs__item">
<a href=".." class="md-tabs__link">
Home
</a>
</li>
<li class="md-tabs__item md-tabs__item--active">
<a href="./" class="md-tabs__link">
Projects
</a>
</li>
</ul>
</div>
</nav>
<main class="md-main" data-md-component="main">
<div class="md-main__inner md-grid">
<div class="md-sidebar md-sidebar--primary" data-md-component="sidebar" data-md-type="navigation" >
<div class="md-sidebar__scrollwrap">
<div class="md-sidebar__inner">
<nav class="md-nav md-nav--primary md-nav--lifted" aria-label="Navigation" data-md-level="0">
<label class="md-nav__title" for="__drawer">
<a href=".." title="IT Pro Partner Docs" class="md-nav__button md-logo" aria-label="IT Pro Partner Docs" data-md-component="logo">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8a3 3 0 0 0 3-3 3 3 0 0 0-3-3 3 3 0 0 0-3 3 3 3 0 0 0 3 3m0 3.54C9.64 9.35 6.5 8 3 8v11c3.5 0 6.64 1.35 9 3.54 2.36-2.19 5.5-3.54 9-3.54V8c-3.5 0-6.64 1.35-9 3.54"/></svg>
</a>
IT Pro Partner Docs
</label>
<div class="md-nav__source">
<a href="https://git.itpropartner.com/ippadmin/itpp-docs" title="Go to repository" class="md-source" data-md-component="source">
<div class="md-source__icon md-icon">
<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><!--! Font Awesome Free 7.1.0 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2025 Fonticons, Inc.--><path d="M439.6 236.1 244 40.5c-5.4-5.5-12.8-8.5-20.4-8.5s-15 3-20.4 8.4L162.5 81l51.5 51.5c27.1-9.1 52.7 16.8 43.4 43.7l49.7 49.7c34.2-11.8 61.2 31 35.5 56.7-26.5 26.5-70.2-2.9-56-37.3L240.3 199v121.9c25.3 12.5 22.3 41.8 9.1 55-6.4 6.4-15.2 10.1-24.3 10.1s-17.8-3.6-24.3-10.1c-17.6-17.6-11.1-46.9 11.2-56v-123c-20.8-8.5-24.6-30.7-18.6-45L142.6 101 8.5 235.1C3 240.6 0 247.9 0 255.5s3 15 8.5 20.4l195.6 195.7c5.4 5.4 12.7 8.4 20.4 8.4s15-3 20.4-8.4l194.7-194.7c5.4-5.4 8.4-12.8 8.4-20.4s-3-15-8.4-20.4"/></svg>
</div>
<div class="md-source__repository">
Git
</div>
</a>
</div>
<ul class="md-nav__list" data-md-scrollfix>
<li class="md-nav__item">
<a href=".." class="md-nav__link">
<span class="md-ellipsis">
Home
</span>
</a>
</li>
<li class="md-nav__item md-nav__item--active md-nav__item--section md-nav__item--nested">
<input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_2" checked>
<label class="md-nav__link" for="__nav_2" id="__nav_2_label" tabindex="">
<span class="md-ellipsis">
Projects
</span>
<span class="md-nav__icon md-icon"></span>
</label>
<nav class="md-nav" data-md-level="1" aria-labelledby="__nav_2_label" aria-expanded="true">
<label class="md-nav__title" for="__nav_2">
<span class="md-nav__icon md-icon"></span>
Projects
</label>
<ul class="md-nav__list" data-md-scrollfix>
<li class="md-nav__item md-nav__item--active">
<input class="md-nav__toggle md-toggle" type="checkbox" id="__toc">
<label class="md-nav__link md-nav__link--active" for="__toc">
<span class="md-ellipsis">
ITPP Infrastructure
</span>
<span class="md-nav__icon md-icon"></span>
</label>
<a href="./" class="md-nav__link md-nav__link--active">
<span class="md-ellipsis">
ITPP Infrastructure
</span>
</a>
<nav class="md-nav md-nav--secondary" aria-label="Table of contents">
<label class="md-nav__title" for="__toc">
<span class="md-nav__icon md-icon"></span>
Table of contents
</label>
<ul class="md-nav__list" data-md-component="toc" data-md-scrollfix>
<li class="md-nav__item">
<a href="#server-inventory" class="md-nav__link">
<span class="md-ellipsis">
Server Inventory
</span>
</a>
<nav class="md-nav" aria-label="Server Inventory">
<ul class="md-nav__list">
<li class="md-nav__item">
<a href="#core-server" class="md-nav__link">
<span class="md-ellipsis">
Core Server
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#app1-server" class="md-nav__link">
<span class="md-ellipsis">
App1 Server
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#app2-server" class="md-nav__link">
<span class="md-ellipsis">
App2 Server
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#app3-server" class="md-nav__link">
<span class="md-ellipsis">
App3 Server
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#core-bu-warm-standby" class="md-nav__link">
<span class="md-ellipsis">
Core-BU (Warm Standby)
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#legacy-decommissioned" class="md-nav__link">
<span class="md-ellipsis">
Legacy / Decommissioned
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="#model-fallback-chain" class="md-nav__link">
<span class="md-ellipsis">
Model Fallback Chain
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#domain-dns-map" class="md-nav__link">
<span class="md-ellipsis">
Domain / DNS Map
</span>
</a>
<nav class="md-nav" aria-label="Domain / DNS Map">
<ul class="md-nav__list">
<li class="md-nav__item">
<a href="#itpropartnercom-siteground-nameservers-only" class="md-nav__link">
<span class="md-ellipsis">
⚠️ itpropartner.com — SiteGround Nameservers Only
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#cloudflare-managed-domains" class="md-nav__link">
<span class="md-ellipsis">
Cloudflare-Managed Domains
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#dns-pending-create-at-siteground" class="md-nav__link">
<span class="md-ellipsis">
DNS PENDING (create at SiteGround)
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="#backup-pipeline" class="md-nav__link">
<span class="md-ellipsis">
Backup Pipeline
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#caddy-configuration" class="md-nav__link">
<span class="md-ellipsis">
Caddy Configuration
</span>
</a>
<nav class="md-nav" aria-label="Caddy Configuration">
<ul class="md-nav__list">
<li class="md-nav__item">
<a href="#core-1525319233" class="md-nav__link">
<span class="md-ellipsis">
Core (152.53.192.33)
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#app1-1525336131" class="md-nav__link">
<span class="md-ellipsis">
App1 (152.53.36.131)
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#app2-1525339202" class="md-nav__link">
<span class="md-ellipsis">
App2 (152.53.39.202)
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="#service-access" class="md-nav__link">
<span class="md-ellipsis">
Service Access
</span>
</a>
<nav class="md-nav" aria-label="Service Access">
<ul class="md-nav__list">
<li class="md-nav__item">
<a href="#mcp-access-from-open-webui" class="md-nav__link">
<span class="md-ellipsis">
MCP Access (from Open WebUI)
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="#ssh-access" class="md-nav__link">
<span class="md-ellipsis">
SSH Access
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#firewall" class="md-nav__link">
<span class="md-ellipsis">
Firewall
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#ssl" class="md-nav__link">
<span class="md-ellipsis">
SSL
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#notes" class="md-nav__link">
<span class="md-ellipsis">
Notes
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="../itpp-standards/" class="md-nav__link">
<span class="md-ellipsis">
ITPP Standards
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../transitpin/" class="md-nav__link">
<span class="md-ellipsis">
TransitPin
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../homelab/" class="md-nav__link">
<span class="md-ellipsis">
HomeLab
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../scripts/" class="md-nav__link">
<span class="md-ellipsis">
Scripts
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../fleettracker360/" class="md-nav__link">
<span class="md-ellipsis">
FleetTracker360
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../shark-game/" class="md-nav__link">
<span class="md-ellipsis">
Shark Game
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../verdicttank/" class="md-nav__link">
<span class="md-ellipsis">
VerdictTank
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../apex-track/" class="md-nav__link">
<span class="md-ellipsis">
Apex Track
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../boxpilot/" class="md-nav__link">
<span class="md-ellipsis">
BoxPilot
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../osint-tool/" class="md-nav__link">
<span class="md-ellipsis">
OSINT Tool
</span>
</a>
</li>
<li class="md-nav__item">
<a href="../launchcheck/" class="md-nav__link">
<span class="md-ellipsis">
LaunchCheck
</span>
</a>
</li>
</ul>
</nav>
</li>
</ul>
</nav>
</div>
</div>
</div>
<div class="md-sidebar md-sidebar--secondary" data-md-component="sidebar" data-md-type="toc" >
<div class="md-sidebar__scrollwrap">
<div class="md-sidebar__inner">
<nav class="md-nav md-nav--secondary" aria-label="Table of contents">
<label class="md-nav__title" for="__toc">
<span class="md-nav__icon md-icon"></span>
Table of contents
</label>
<ul class="md-nav__list" data-md-component="toc" data-md-scrollfix>
<li class="md-nav__item">
<a href="#server-inventory" class="md-nav__link">
<span class="md-ellipsis">
Server Inventory
</span>
</a>
<nav class="md-nav" aria-label="Server Inventory">
<ul class="md-nav__list">
<li class="md-nav__item">
<a href="#core-server" class="md-nav__link">
<span class="md-ellipsis">
Core Server
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#app1-server" class="md-nav__link">
<span class="md-ellipsis">
App1 Server
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#app2-server" class="md-nav__link">
<span class="md-ellipsis">
App2 Server
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#app3-server" class="md-nav__link">
<span class="md-ellipsis">
App3 Server
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#core-bu-warm-standby" class="md-nav__link">
<span class="md-ellipsis">
Core-BU (Warm Standby)
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#legacy-decommissioned" class="md-nav__link">
<span class="md-ellipsis">
Legacy / Decommissioned
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="#model-fallback-chain" class="md-nav__link">
<span class="md-ellipsis">
Model Fallback Chain
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#domain-dns-map" class="md-nav__link">
<span class="md-ellipsis">
Domain / DNS Map
</span>
</a>
<nav class="md-nav" aria-label="Domain / DNS Map">
<ul class="md-nav__list">
<li class="md-nav__item">
<a href="#itpropartnercom-siteground-nameservers-only" class="md-nav__link">
<span class="md-ellipsis">
⚠️ itpropartner.com — SiteGround Nameservers Only
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#cloudflare-managed-domains" class="md-nav__link">
<span class="md-ellipsis">
Cloudflare-Managed Domains
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#dns-pending-create-at-siteground" class="md-nav__link">
<span class="md-ellipsis">
DNS PENDING (create at SiteGround)
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="#backup-pipeline" class="md-nav__link">
<span class="md-ellipsis">
Backup Pipeline
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#caddy-configuration" class="md-nav__link">
<span class="md-ellipsis">
Caddy Configuration
</span>
</a>
<nav class="md-nav" aria-label="Caddy Configuration">
<ul class="md-nav__list">
<li class="md-nav__item">
<a href="#core-1525319233" class="md-nav__link">
<span class="md-ellipsis">
Core (152.53.192.33)
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#app1-1525336131" class="md-nav__link">
<span class="md-ellipsis">
App1 (152.53.36.131)
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#app2-1525339202" class="md-nav__link">
<span class="md-ellipsis">
App2 (152.53.39.202)
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="#service-access" class="md-nav__link">
<span class="md-ellipsis">
Service Access
</span>
</a>
<nav class="md-nav" aria-label="Service Access">
<ul class="md-nav__list">
<li class="md-nav__item">
<a href="#mcp-access-from-open-webui" class="md-nav__link">
<span class="md-ellipsis">
MCP Access (from Open WebUI)
</span>
</a>
</li>
</ul>
</nav>
</li>
<li class="md-nav__item">
<a href="#ssh-access" class="md-nav__link">
<span class="md-ellipsis">
SSH Access
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#firewall" class="md-nav__link">
<span class="md-ellipsis">
Firewall
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#ssl" class="md-nav__link">
<span class="md-ellipsis">
SSL
</span>
</a>
</li>
<li class="md-nav__item">
<a href="#notes" class="md-nav__link">
<span class="md-ellipsis">
Notes
</span>
</a>
</li>
</ul>
</nav>
</div>
</div>
</div>
<div class="md-content" data-md-component="content">
<article class="md-content__inner md-typeset">
<h1 id="itpp-infrastructure">itpp-infrastructure<a class="headerlink" href="#itpp-infrastructure" title="Permanent link">&para;</a></h1>
<blockquote>
<p><strong>Last Updated:</strong> July 17, 2026
<strong>Maintainer:</strong> Sho'Nuff</p>
</blockquote>
<hr />
<h2 id="server-inventory">Server Inventory<a class="headerlink" href="#server-inventory" title="Permanent link">&para;</a></h2>
<h3 id="core-server">Core Server<a class="headerlink" href="#core-server" title="Permanent link">&para;</a></h3>
<ul>
<li><strong>Hostname:</strong> Core</li>
<li><strong>IP:</strong> 152.53.192.33</li>
<li><strong>Provider:</strong> netcup RS 2000 G12</li>
<li><strong>Specs:</strong> 8 vCPU EPYC 9645, 15 GB DDR5 ECC, 512 GB NVMe</li>
<li><strong>OS:</strong> Debian 13</li>
<li><strong>Role:</strong> Hermes + Portals</li>
<li><strong>Key Services:</strong></li>
<li>Hermes Agent (Telegram + cron, 22 cron jobs)</li>
<li>Caddy reverse proxy (12 domains, auto-TLS)</li>
<li>Ops Portal (FastAPI, port 8090)</li>
<li>Prometheus (native, port 9090) + Grafana (native, port 3002)</li>
<li>Uptime Kuma (Docker, port 3001) — 9+ monitors</li>
<li>Vaultwarden (Docker, port 8080) — vault.iamgmb.com</li>
<li>Twenty CRM (Docker) — crm.debtrecoveryexperts.com</li>
<li>DocuSeal (Docker, port 3000) — sign.core.itpropartner.com</li>
<li>SearXNG (Docker, port 8888)</li>
<li>Komodo (Docker, port 9120)</li>
<li>Tailscale, StrongSwan, WireGuard (home CCR tunnel 10.77.0.0/24)</li>
<li>Redis cache</li>
</ul>
<h3 id="app1-server">App1 Server<a class="headerlink" href="#app1-server" title="Permanent link">&para;</a></h3>
<ul>
<li><strong>Hostname:</strong> app1</li>
<li><strong>IP:</strong> 152.53.36.131</li>
<li><strong>Provider:</strong> netcup RS 4000 G12</li>
<li><strong>Specs:</strong> 12 vCPU EPYC 9645, 32 GB DDR5 ECC, 1 TB NVMe</li>
<li><strong>OS:</strong> Debian 13</li>
<li><strong>Role:</strong> AI/Service Hub</li>
<li><strong>Key Services:</strong></li>
<li>Open WebUI (Docker, port 3000) — ai.itpropartner.com</li>
<li>n8n + Postgres (Docker, port 5678) — n8n.itpropartner.com</li>
<li>LiteLLM (Docker) + Postgres — admin-ai.itpropartner.com</li>
<li>Mattermost Team Edition (Docker, port 8065) — noc.itpropartner.com</li>
<li>Caddy (systemd, 80/443)</li>
<li>4 MCP servers: Browser (:8901), Filesystem (:8900), Email (:8902), Git (:8903)</li>
<li>Super Search MCP (systemd, port 8899)</li>
</ul>
<h3 id="app2-server">App2 Server<a class="headerlink" href="#app2-server" title="Permanent link">&para;</a></h3>
<ul>
<li><strong>Hostname:</strong> app2</li>
<li><strong>IP:</strong> 152.53.39.202</li>
<li><strong>Provider:</strong> netcup RS 4000 G12</li>
<li><strong>Specs:</strong> 12 vCPU EPYC 9645, 32 GB DDR5 ECC, 1 TB NVMe</li>
<li><strong>OS:</strong> Debian 13</li>
<li><strong>Role:</strong> Infrastructure Server</li>
<li><strong>Key Services:</strong></li>
<li>Traccar GPS (Docker, port 8082 + 5000-5150) — fleettracker360.com</li>
<li>UniFi Controller (Docker, port 8443) — unifi.itpropartner.com</li>
<li>UNMS/UISP (10 Docker containers) — unms.forefrontwireless.com</li>
<li>Hudu (Docker) — hudu.itpropartner.com</li>
<li>Caddy (4 domains)</li>
</ul>
<h3 id="app3-server">App3 Server<a class="headerlink" href="#app3-server" title="Permanent link">&para;</a></h3>
<ul>
<li><strong>Hostname:</strong> app3</li>
<li><strong>IP:</strong> 152.53.241.111</li>
<li><strong>Provider:</strong> netcup RS 4000 G12</li>
<li><strong>Specs:</strong> 12 vCPU EPYC 9645, 32 GB DDR5 ECC, 1 TB NVMe</li>
<li><strong>OS:</strong> Debian 13</li>
<li><strong>Role:</strong> Web Hosting + Backup Restore</li>
<li><strong>Key Services:</strong></li>
<li>CloudPanel CE — panel.itpropartner.com</li>
<li>Nginx (80/443) + Percona MySQL 8.4 + PHP 8.3</li>
<li>Backup Restore System (Flask, port 8090) — my.itpropartner.com/backups</li>
<li>WordPress sites (7 migrated from wphost02, all live):<ul>
<li>debtreecoveryexperts.com, boxpilotlogistics.com, iamgmb.com</li>
<li>katiewattsdesign.com, vigilanttac.com, apextrackexperience.com</li>
<li>mainwp.itpropartner.com, voipsimplicity.com, my.voipsimplicity.com</li>
</ul>
</li>
<li>Daily snapshots: 1 AM + 1 PM, 60-day retention, /opt/backup-restore/snapshots</li>
</ul>
<h3 id="core-bu-warm-standby">Core-BU (Warm Standby)<a class="headerlink" href="#core-bu-warm-standby" title="Permanent link">&para;</a></h3>
<ul>
<li><strong>Hostname:</strong> core-bu</li>
<li><strong>IP:</strong> 5.161.225.131</li>
<li><strong>Provider:</strong> Hetzner CPX21</li>
<li><strong>Specs:</strong> 3 vCPU, 4 GB RAM, 80 GB SSD</li>
<li><strong>Role:</strong> Warm standby — auto-failover if Core down</li>
<li><strong>Watchdog:</strong> 5-min check, 4-cycle confirmation, S3 sync every 10 min</li>
</ul>
<h3 id="legacy-decommissioned">Legacy / Decommissioned<a class="headerlink" href="#legacy-decommissioned" title="Permanent link">&para;</a></h3>
<ul>
<li><strong>old-ai:</strong> 178.156.167.181 (Hetzner CPX41) — <strong>decommissioned</strong> (LiteLLM migrated to app1)</li>
<li><strong>old app1:</strong> 87.99.144.163 (Hetzner CPX11) — <strong>deleted</strong></li>
<li><strong>wphost02:</strong> 5.161.62.38 (Hetzner CPX21) — <strong>migrated to app3</strong></li>
<li><strong>Ollama:</strong> Removed from Core (systemd) and app1 (Docker) Jul 17</li>
</ul>
<hr />
<h2 id="model-fallback-chain">Model Fallback Chain<a class="headerlink" href="#model-fallback-chain" title="Permanent link">&para;</a></h2>
<p>All providers use direct API keys. GPT-5.5 quality survives through admin-ai → OpenRouter, then degrades through DeepSeek → Gemini → Grok.</p>
<table>
<thead>
<tr>
<th>#</th>
<th>Model</th>
<th>Provider</th>
<th>Gateway</th>
</tr>
</thead>
<tbody>
<tr>
<td>Primary</td>
<td>GPT-5.5</td>
<td>admin-ai</td>
<td>Self-hosted LiteLLM (app1)</td>
</tr>
<tr>
<td>Fallback 1</td>
<td>GPT-5.5</td>
<td>OpenRouter</td>
<td>openrouter.ai</td>
</tr>
<tr>
<td>Fallback 2</td>
<td>DeepSeek v4 Pro</td>
<td>DeepSeek</td>
<td>api.deepseek.com</td>
</tr>
<tr>
<td>Fallback 3</td>
<td>Gemini 3.5 Flash</td>
<td>Google</td>
<td>generativelanguage.googleapis.com</td>
</tr>
<tr>
<td>Fallback 4</td>
<td>Grok 4.5</td>
<td>xAI</td>
<td>api.x.ai</td>
</tr>
</tbody>
</table>
<p><strong>Credits (Jul 17):</strong> DeepSeek $58, OpenRouter ~$30 remaining, OpenAI/xAI/Google on pay-as-you-go
<strong>Health check:</strong> Daily 8 AM cron (<code>model-usage-check</code>)</p>
<hr />
<h2 id="domain-dns-map">Domain / DNS Map<a class="headerlink" href="#domain-dns-map" title="Permanent link">&para;</a></h2>
<h3 id="itpropartnercom-siteground-nameservers-only">⚠️ itpropartner.com — SiteGround Nameservers Only<a class="headerlink" href="#itpropartnercom-siteground-nameservers-only" title="Permanent link">&para;</a></h3>
<p><code>itpropartner.com</code> uses <strong>SiteGround nameservers</strong> exclusively. A Cloudflare zone exists (<code>0dc20632…</code>) but is NOT authoritative — records created there silently fail. All <code>*.itpropartner.com</code> changes must be manual through SiteGround panel.</p>
<table>
<thead>
<tr>
<th>Domain</th>
<th>IP</th>
<th>Server</th>
<th>Service</th>
</tr>
</thead>
<tbody>
<tr>
<td>core.itpropartner.com</td>
<td>152.53.192.33</td>
<td>Core</td>
<td>Landing page + Grafana link</td>
</tr>
<tr>
<td>ops.itpropartner.com</td>
<td>152.53.192.33</td>
<td>Core</td>
<td>Ops dashboard</td>
</tr>
<tr>
<td>sign.core.itpropartner.com</td>
<td>152.53.192.33</td>
<td>Core</td>
<td>DocuSeal</td>
</tr>
<tr>
<td>uptimekuma.itpropartner.com</td>
<td>152.53.192.33</td>
<td>Core</td>
<td>Uptime monitoring</td>
</tr>
<tr>
<td>gps.fleettracker360.com</td>
<td>152.53.192.33</td>
<td>Core</td>
<td>Traccar HTTPS proxy → app2</td>
</tr>
<tr>
<td>my.itpropartner.com</td>
<td>152.53.192.33</td>
<td>Core</td>
<td>Customer portal hub</td>
</tr>
<tr>
<td>hudu.itpropartner.com</td>
<td>152.53.39.202</td>
<td>app2</td>
<td>IT documentation</td>
</tr>
<tr>
<td>unifi.itpropartner.com</td>
<td>152.53.39.202</td>
<td>app2</td>
<td>UniFi controller</td>
</tr>
<tr>
<td>panel.itpropartner.com</td>
<td>152.53.241.111</td>
<td>app3</td>
<td>CloudPanel CE</td>
</tr>
<tr>
<td>ai.itpropartner.com</td>
<td>152.53.36.131</td>
<td>app1</td>
<td>Open WebUI</td>
</tr>
<tr>
<td>n8n.itpropartner.com</td>
<td>152.53.36.131</td>
<td>app1</td>
<td>n8n automation</td>
</tr>
<tr>
<td>admin-ai.itpropartner.com</td>
<td>152.53.36.131</td>
<td>app1</td>
<td>LiteLLM</td>
</tr>
</tbody>
</table>
<h3 id="cloudflare-managed-domains">Cloudflare-Managed Domains<a class="headerlink" href="#cloudflare-managed-domains" title="Permanent link">&para;</a></h3>
<table>
<thead>
<tr>
<th>Domain</th>
<th>IP</th>
<th>Server</th>
<th>Service</th>
</tr>
</thead>
<tbody>
<tr>
<td>fleettracker360.com</td>
<td>Cloudflare</td>
<td>app2</td>
<td>Fleet tracking website</td>
</tr>
<tr>
<td>gps.fleettracker360.com</td>
<td>Cloudflare → Core</td>
<td>Core → app2</td>
<td>Traccar devices</td>
</tr>
<tr>
<td>voipsimplicity.com</td>
<td>Cloudflare</td>
<td>app3</td>
<td>VoIP marketing site</td>
</tr>
<tr>
<td>my.voipsimplicity.com</td>
<td>Cloudflare</td>
<td>app3</td>
<td>VoIP customer portal</td>
</tr>
<tr>
<td>portal.debtrecoveryexperts.com</td>
<td>152.53.192.33</td>
<td>Core</td>
<td>DRE portal</td>
</tr>
<tr>
<td>crm.debtrecoveryexperts.com</td>
<td>Cloudflare Access</td>
<td>—</td>
<td>DRE CRM</td>
</tr>
<tr>
<td>vault.iamgmb.com</td>
<td>152.53.192.33</td>
<td>Core</td>
<td>Vaultwarden</td>
</tr>
<tr>
<td>sign.iamgmb.com</td>
<td>152.53.192.33</td>
<td>Core</td>
<td>Document signing</td>
</tr>
<tr>
<td>shark.iamgmb.com</td>
<td>152.53.192.33</td>
<td>Core</td>
<td>Shark game</td>
</tr>
</tbody>
</table>
<h3 id="dns-pending-create-at-siteground">DNS PENDING (create at SiteGround)<a class="headerlink" href="#dns-pending-create-at-siteground" title="Permanent link">&para;</a></h3>
<table>
<thead>
<tr>
<th>Subdomain</th>
<th>→ IP</th>
<th>Service</th>
</tr>
</thead>
<tbody>
<tr>
<td>vault.itpropartner.com</td>
<td>152.53.36.131</td>
<td>Vaultwarden (after migration)</td>
</tr>
<tr>
<td>status.itpropartner.com</td>
<td>152.53.192.33</td>
<td>Public status page</td>
</tr>
</tbody>
</table>
<hr />
<h2 id="backup-pipeline">Backup Pipeline<a class="headerlink" href="#backup-pipeline" title="Permanent link">&para;</a></h2>
<table>
<thead>
<tr>
<th>Backup</th>
<th>Schedule</th>
<th>Target</th>
<th>Purpose</th>
</tr>
</thead>
<tbody>
<tr>
<td>hermes-live-sync</td>
<td>Every 15 min</td>
<td>s3://hermes-vps-backups/live/</td>
<td>Live state sync</td>
</tr>
<tr>
<td>hermes-full-backup</td>
<td>Daily 1 AM</td>
<td>s3://hermes-vps-backups/hermes-full-backup/</td>
<td>Full Hermes backup</td>
</tr>
<tr>
<td>home-router-backup</td>
<td>Daily 6 AM</td>
<td>s3://mikrotik-ccr-backups/</td>
<td>CCR config</td>
</tr>
<tr>
<td>root-essentials-backup</td>
<td>Daily 3 AM</td>
<td>S3</td>
<td>/root essentials</td>
</tr>
<tr>
<td>docker-volume-sync</td>
<td>Daily 3 AM</td>
<td>S3</td>
<td>Docker volumes</td>
</tr>
<tr>
<td>system-config-sync</td>
<td>Daily 4 AM</td>
<td>S3</td>
<td>System configs</td>
</tr>
<tr>
<td>unms-backup-sync</td>
<td>Daily 6 AM (Core)</td>
<td>s3://hermes-vps-backups/unms-backups/</td>
<td>UNMS data (pulled from app2)</td>
</tr>
<tr>
<td>unifi-backup-sync</td>
<td>Daily 2 AM (Core)</td>
<td>s3://hermes-vps-backups/unifi-backups/</td>
<td>UniFi configs (pulled from app2)</td>
</tr>
<tr>
<td>hudu-backup</td>
<td>Daily 7 AM</td>
<td>s3://hermes-vps-backups/hudu/backups/</td>
<td>Hudu volume dump</td>
</tr>
<tr>
<td>gitea-backup</td>
<td>Daily 8 AM</td>
<td>s3://hermes-vps-backups/gitea/daily/</td>
<td>Gitea repos</td>
</tr>
<tr>
<td>app1-backup</td>
<td>Daily 2 AM</td>
<td>s3://hermes-vps-backups/app1/</td>
<td>LiteLLM, n8n, OpenWebUI, MCP, Mattermost</td>
</tr>
<tr>
<td>app2-backup</td>
<td>Daily 2:30 AM</td>
<td>s3://hermes-vps-backups/app2/</td>
<td>Traccar, Gitea, Hudu, UNMS, UniFi</td>
</tr>
<tr>
<td>app3-backup</td>
<td>Daily 3 AM</td>
<td>s3://hermes-vps-backups/app3/</td>
<td>CloudPanel, MySQL, WordPress</td>
</tr>
<tr>
<td>wphost02-backup</td>
<td>Daily 5 AM</td>
<td>s3://hermes-vps-backups/wphost02-backup/</td>
<td>Webapps + MySQL</td>
</tr>
<tr>
<td>warm-standby-sync</td>
<td>Every 10 min</td>
<td>core-bu ← S3</td>
<td>DR readiness</td>
</tr>
</tbody>
</table>
<hr />
<h2 id="caddy-configuration">Caddy Configuration<a class="headerlink" href="#caddy-configuration" title="Permanent link">&para;</a></h2>
<h3 id="core-1525319233">Core (152.53.192.33)<a class="headerlink" href="#core-1525319233" title="Permanent link">&para;</a></h3>
<div class="highlight"><pre><span></span><code>core.itpropartner.com → static files
sign.core.itpropartner.com → localhost:3000 (DocuSeal)
ops.itpropartner.com → 127.0.0.1:8090 + static
uptimekuma.itpropartner.com → 127.0.0.1:3001 (Uptime Kuma)
gps.fleettracker360.com → app2:8082 (Traccar)
my.itpropartner.com → static files
portal.debtrecoveryexperts.com → static files
vault.iamgmb.com → localhost:8080 (Vaultwarden)
sign.iamgmb.com → 127.0.0.1:8090
shark.iamgmb.com → static + :8083
</code></pre></div>
<h3 id="app1-1525336131">App1 (152.53.36.131)<a class="headerlink" href="#app1-1525336131" title="Permanent link">&para;</a></h3>
<div class="highlight"><pre><span></span><code>ai.itpropartner.com → :3000 (Open WebUI)
n8n.itpropartner.com → :5678 (n8n)
admin-ai.itpropartner.com → :4000 (LiteLLM)
app1.itpropartner.com → static response
</code></pre></div>
<h3 id="app2-1525339202">App2 (152.53.39.202)<a class="headerlink" href="#app2-1525339202" title="Permanent link">&para;</a></h3>
<div class="highlight"><pre><span></span><code>hudu.itpropartner.com → Hudu internal
gps.fleettracker360.com → :8082 (Traccar)
unms.forefrontwireless.com → UNMS Nginx
unifi.itpropartner.com → :8443 (UniFi)
</code></pre></div>
<hr />
<h2 id="service-access">Service Access<a class="headerlink" href="#service-access" title="Permanent link">&para;</a></h2>
<table>
<thead>
<tr>
<th>Service</th>
<th>URL</th>
<th>Location</th>
<th>Auth</th>
</tr>
</thead>
<tbody>
<tr>
<td>Open WebUI</td>
<td>https://ai.itpropartner.com</td>
<td>app1</td>
<td>Chat UI</td>
</tr>
<tr>
<td>Open WebUI Admin</td>
<td>https://admin-ai.itpropartner.com/ui</td>
<td>app1</td>
<td>user: admin, pw: LITELLM_MASTER_KEY</td>
</tr>
<tr>
<td>Ops Portal</td>
<td>https://ops.itpropartner.com</td>
<td>Core</td>
<td>Internal dashboard</td>
</tr>
<tr>
<td>Grafana</td>
<td>http://core.itpropartner.com:3002</td>
<td>Core</td>
<td>admin/admin</td>
</tr>
<tr>
<td>Uptime Kuma</td>
<td>https://uptimekuma.itpropartner.com</td>
<td>Core</td>
<td>Service monitoring</td>
</tr>
<tr>
<td>Vaultwarden</td>
<td>https://vault.iamgmb.com</td>
<td>Core</td>
<td>Password vault</td>
</tr>
<tr>
<td>CloudPanel</td>
<td>https://panel.itpropartner.com</td>
<td>app3</td>
<td>user: gmb / SQLite auth</td>
</tr>
<tr>
<td>Traccar</td>
<td>https://gps.fleettracker360.com</td>
<td>app2</td>
<td>GPS fleet tracking</td>
</tr>
<tr>
<td>UniFi</td>
<td>https://unifi.itpropartner.com</td>
<td>app2</td>
<td>Network controller</td>
</tr>
<tr>
<td>UNMS</td>
<td>https://unms.forefrontwireless.com</td>
<td>app2</td>
<td>WISP management</td>
</tr>
<tr>
<td>Hudu</td>
<td>https://hudu.itpropartner.com</td>
<td>app2</td>
<td>IT documentation</td>
</tr>
<tr>
<td>n8n</td>
<td>https://n8n.itpropartner.com</td>
<td>app1</td>
<td>Automation</td>
</tr>
<tr>
<td>CRM (DRE)</td>
<td>https://crm.debtrecoveryexperts.com</td>
<td>Cloudflare Access</td>
<td>TwentyCRM</td>
</tr>
</tbody>
</table>
<h3 id="mcp-access-from-open-webui">MCP Access (from Open WebUI)<a class="headerlink" href="#mcp-access-from-open-webui" title="Permanent link">&para;</a></h3>
<table>
<thead>
<tr>
<th>MCP Server</th>
<th>Location</th>
<th>Port</th>
<th>Tools</th>
</tr>
</thead>
<tbody>
<tr>
<td>Super Search</td>
<td>app1</td>
<td>:8899</td>
<td>10 tools — web_search, web_extract, person_search, email_search, phone_search, etc.</td>
</tr>
<tr>
<td>Browser</td>
<td>app1</td>
<td>:8901</td>
<td>browser_navigate, browser_snapshot, browser_click, browser_type, browser_console</td>
</tr>
<tr>
<td>Filesystem</td>
<td>app1</td>
<td>:8900</td>
<td>read_file, write_file, search_files, list_dir, file_info</td>
</tr>
<tr>
<td>Email</td>
<td>app1</td>
<td>:8902</td>
<td>search_emails, send_email, get_email</td>
</tr>
<tr>
<td>Git/Gitea</td>
<td>app1</td>
<td>:8903</td>
<td>clone, commit, push, pull</td>
</tr>
</tbody>
</table>
<hr />
<h2 id="ssh-access">SSH Access<a class="headerlink" href="#ssh-access" title="Permanent link">&para;</a></h2>
<ul>
<li><strong>Key:</strong> <code>itpp-infra</code> (deployed to all servers)</li>
<li><strong>User:</strong> <code>ippadmin</code> (sudo privileges)</li>
<li><strong>Root SSH:</strong> Enabled on app1, app2, app3 (key-only exception per provisioning standard)</li>
<li><strong>Core SSH:</strong> <code>ssh -i /root/.ssh/itpp-infra root@152.53.192.33</code></li>
</ul>
<hr />
<h2 id="firewall">Firewall<a class="headerlink" href="#firewall" title="Permanent link">&para;</a></h2>
<p>UFW is enabled on all servers. Standard rules:
- <strong>Core:</strong> 22, 80, 443, 3000, 3001, 3002, 8080, 8082, 8090, 8443, 9090
- <strong>app1:</strong> 22, 80, 443, 3000, 5678, 8899, 8900, 8901, 8902, 8903
- <strong>app2:</strong> 22, 80, 443, 3000, 8080, 8082, 8089, 8443, 8843, 3478, 10001, 5000:5150
- <strong>app3:</strong> 22, 80, 443, 8443</p>
<hr />
<h2 id="ssl">SSL<a class="headerlink" href="#ssl" title="Permanent link">&para;</a></h2>
<p>All SSL certificates issued via Let's Encrypt through Caddy. All certs auto-renew. No manual management needed.</p>
<hr />
<h2 id="notes">Notes<a class="headerlink" href="#notes" title="Permanent link">&para;</a></h2>
<ul>
<li><strong>DNS trap:</strong> <code>itpropartner.com</code> uses SiteGround nameservers. Cloudflare zone is NOT authoritative. Always verify with <code>dig NS domain.com</code> before creating records.</li>
<li><strong>SiteGround:</strong> No API access. All DNS changes are manual through SiteGround panel.</li>
<li><strong>Provider diversity:</strong> core-bu stays at Hetzner specifically so a netcup outage can't kill both Core and standby simultaneously.</li>
<li><strong>app3 MySQL:</strong> Root password in Vaultwarden + <code>/root/.my.cnf</code> on app3, accessible via 127.0.0.1:3306.</li>
<li><strong>CloudPanel:</strong> SQLite DB at <code>/home/clp/htdocs/app/data/db.sq3</code> — users live here, not in MySQL.</li>
<li><strong>AWS CLI PATH:</strong> All backup scripts must use <code>/opt/awscli-venv/bin/aws</code> or <code>source /opt/awscli-venv/bin/activate</code> — <code>aws</code> bare fails in cron context (PATH doesn't include venv bin). Documented in server-provisioning-standard v1.3.0.</li>
<li><strong>Backup verification:</strong> Always run at least one manual backup after provisioning a server and verify it landed in S3 — never trust cron entries alone. Silent failures (<code>aws: command not found</code>, wrong file paths, S3 permission issues) won't surface otherwise.</li>
</ul>
</article>
</div>
<script>var target=document.getElementById(location.hash.slice(1));target&&target.name&&(target.checked=target.name.startsWith("__tabbed_"))</script>
</div>
</main>
<footer class="md-footer">
<div class="md-footer-meta md-typeset">
<div class="md-footer-meta__inner md-grid">
<div class="md-copyright">
Made with
<a href="https://squidfunk.github.io/mkdocs-material/" target="_blank" rel="noopener">
Material for MkDocs
</a>
</div>
</div>
</div>
</footer>
</div>
<div class="md-dialog" data-md-component="dialog">
<div class="md-dialog__inner md-typeset"></div>
</div>
<script id="__config" type="application/json">{"annotate": null, "base": "..", "features": ["navigation.instant", "navigation.tracking", "navigation.tabs", "navigation.sections", "search.highlight", "search.share"], "search": "../assets/javascripts/workers/search.2c215733.min.js", "tags": null, "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version": "Select version"}, "version": null}</script>
<script src="../assets/javascripts/bundle.d7400e89.min.js"></script>
</body>
</html>
Reference in New Issue View Git Blame Copy Permalink