From 5eceebf5a1523c5548078c9ded156f6a746b1287 Mon Sep 17 00:00:00 2001 From: root Date: Thu, 16 Jul 2026 20:59:00 -0400 Subject: [PATCH] Accuracy audit: fix Core-BU IP, Caddy domains, old-ai status, MCP locations, DNS record corrections --- README.md | 116 ++++++++++++++++++++++++++++++------------------------ 1 file changed, 65 insertions(+), 51 deletions(-) diff --git a/README.md b/README.md index 93029db..560969a 100644 --- a/README.md +++ b/README.md @@ -13,22 +13,22 @@ - **Provider:** netcup RS 2000 G12 - **Specs:** 8 vCPU EPYC 9645, 15 GB DDR5 ECC, 512 GB NVMe - **OS:** Debian 13 -- Role: Hermes + Ollama fallback + Portals +- **Role:** Hermes + Ollama fallback + Portals - **Key Services:** - Hermes Agent (Telegram + cron, 22 cron jobs) - - Caddy reverse proxy (11 domains, auto-TLS) + - Caddy reverse proxy (10 domains, auto-TLS) - Ops Portal (FastAPI, port 8090) - Prometheus (native, port 9090) + Grafana (native, port 3002) - Uptime Kuma (Docker, port 3001) — 9+ monitors - Vaultwarden (Docker, port 8080) — vault.iamgmb.com - - Super Search MCP v2.0.0 (FastMCP, port 8899) + - Super Search MCP v2.0.0 (FastMCP, port 8899) — 10 tools - Twenty CRM (Docker) — crm.debtrecoveryexperts.com - - DocuSeal (Docker, port 3000) — sign.itpropartner.com + - DocuSeal (Docker, port 3000) — sign.core.itpropartner.com - SearXNG (Docker, port 8888) - Komodo (Docker, port 9120) - - Tailscale, StrongSwan, WireGuard (home CCR tunnel) + - Tailscale, StrongSwan, WireGuard (home CCR tunnel 10.77.0.0/24) - Redis cache - - Ollama (systemd, port 11434) — lightweight fallback LLM + - Ollama (systemd, port 11434) ### App1 Server - **Hostname:** app1 @@ -41,9 +41,9 @@ - Ollama (Docker, port 11434) - Open WebUI (Docker, port 3000) — ai.itpropartner.com - n8n + Postgres (Docker, port 5678) — n8n.itpropartner.com - - Caddy (systemd, 80/443) - LiteLLM (Docker) + Postgres — admin-ai.itpropartner.com - - 5 MCP servers: Super Search (:8899), Browser (:8901), Filesystem (:8900), Email (:8902), Git (:8903) + - Caddy (systemd, 80/443) + - 4 MCP servers: Browser (:8901), Filesystem (:8900), Email (:8902), Git (:8903) ### App2 Server - **Hostname:** app2 @@ -70,19 +70,20 @@ - CloudPanel CE — panel.itpropartner.com - Nginx (80/443) + Percona MySQL 8.4 + PHP 8.3 - voipsimplicity.com (WordPress, migrated Jul 16) - - my.voipsimplicity.com (PHP customer portal) + - my.voipsimplicity.com (static HTML SPA, VoIP customer portal) ### Core-BU (Warm Standby) - **Hostname:** core-bu -- **IP:** 5.161.114.8 -- **Provider:** Hetzner CPX11 (planned upgrade: CPX31) -- **Specs:** 2 vCPU, 2 GB RAM, 40 GB SSD +- **IP:** 5.161.225.131 +- **Provider:** Hetzner CPX21 +- **Specs:** 3 vCPU, 4 GB RAM, 80 GB SSD - **Role:** Warm standby — auto-failover if Core down - **Watchdog:** 5-min check, 4-cycle confirmation, S3 sync every 10 min -### Other Active Servers -- **old-ai:** 178.156.167.181 (Hetzner CPX41) — LiteLLM + Open WebUI + Ollama — **deprecated, migrating to app1** -- **wphost02:** 5.161.62.38 (Hetzner CPX21) — WordPress host — **migrating to app3** +### Legacy / Decommissioned +- **old-ai:** 178.156.167.181 (Hetzner CPX41) — **decommissioned** (LiteLLM migrated to app1) +- **old app1:** 87.99.144.163 (Hetzner CPX11) — **deleted** +- **wphost02:** 5.161.62.38 (Hetzner CPX21) — **migrating to app3** - **Tony Hermes:** 87.99.159.142 (Hetzner CPX21) — Anthony's personal Hermes --- @@ -95,27 +96,39 @@ | Domain | IP | Server | Service | |---|---|---|---| -| core.itpropartner.com | 152.53.192.33 | Core | Static API docs | +| core.itpropartner.com | 152.53.192.33 | Core | Landing page + Grafana link | | ops.itpropartner.com | 152.53.192.33 | Core | Ops dashboard | -| sign.itpropartner.com | 152.53.192.33 | Core | DocuSeal | -| uptimekuma.itpropartner.com | 152.53.192.33 | Core | Monitoring | +| sign.core.itpropartner.com | 152.53.192.33 | Core | DocuSeal | +| uptimekuma.itpropartner.com | 152.53.192.33 | Core | Uptime monitoring | +| gps.fleettracker360.com | 152.53.192.33 | Core | Traccar HTTPS proxy → app2 | +| my.itpropartner.com | 152.53.192.33 | Core | Customer portal hub | | hudu.itpropartner.com | 152.53.39.202 | app2 | IT documentation | | unifi.itpropartner.com | 152.53.39.202 | app2 | UniFi controller | | panel.itpropartner.com | 152.53.241.111 | app3 | CloudPanel CE | | ai.itpropartner.com | 152.53.36.131 | app1 | Open WebUI | | n8n.itpropartner.com | 152.53.36.131 | app1 | n8n automation | -| admin-ai.itpropartner.com | 152.53.36.131 | app1 | LiteLLM (currently → old-ai) | +| admin-ai.itpropartner.com | 152.53.36.131 | app1 | LiteLLM | ### Cloudflare-Managed Domains | Domain | IP | Server | Service | |---|---|---|---| -| fleettracker360.com | 152.53.39.202 | app2 | Fleet tracking | -| gps.fleettracker360.com | 152.53.39.202 | app2 | GPS devices | -| voipsimplicity.com | 152.53.241.111 | app3 | VoIP site | -| support.voipsimplicity.com | 152.53.241.111 | app3 | Support portal | +| fleettracker360.com | Cloudflare | app2 | Fleet tracking website | +| gps.fleettracker360.com | Cloudflare → Core | Core → app2 | Traccar devices | +| voipsimplicity.com | Cloudflare | app3 | VoIP marketing site | +| my.voipsimplicity.com | Cloudflare | app3 | VoIP customer portal | | portal.debtrecoveryexperts.com | 152.53.192.33 | Core | DRE portal | | crm.debtrecoveryexperts.com | Cloudflare Access | — | DRE CRM | +| vault.iamgmb.com | 152.53.192.33 | Core | Vaultwarden | +| sign.iamgmb.com | 152.53.192.33 | Core | Document signing | +| shark.iamgmb.com | 152.53.192.33 | Core | Shark game | + +### DNS PENDING (create at SiteGround) + +| Subdomain | → IP | Service | +|---|---|---| +| vault.itpropartner.com | 152.53.36.131 | Vaultwarden (after migration) | +| status.itpropartner.com | 152.53.192.33 | Public status page | --- @@ -140,32 +153,34 @@ ## Caddy Configuration ### Core (152.53.192.33) + ``` -sign.itpropartner.com → :3000 (DocuSeal) -core.itpropartner.com → static files -crm.debtrecoveryexperts.com → :3001 (Twenty) -portal.debtrecoveryexperts.com → static -internal.debtrecoveryexperts.com → static -app.itpropartner.com → static + :8082 -shark.itpropartner.com → static + :8083 -shark.iamgmb.com → static + :8083 -ops.itpropartner.com → :8090 + static -uptimekuma.itpropartner.com → :3001 -vault.iamgmb.com → :8080 +core.itpropartner.com → static files +sign.core.itpropartner.com → localhost:3000 (DocuSeal) +ops.itpropartner.com → 127.0.0.1:8090 + static +uptimekuma.itpropartner.com → 127.0.0.1:3001 (Uptime Kuma) +gps.fleettracker360.com → app2:8082 (Traccar) +my.itpropartner.com → static files +portal.debtrecoveryexperts.com → static files +vault.iamgmb.com → localhost:8080 (Vaultwarden) +sign.iamgmb.com → 127.0.0.1:8090 +shark.iamgmb.com → static + :8083 ``` ### App1 (152.53.36.131) + ``` -ai.itpropartner.com → :3000 (Open WebUI) -n8n.itpropartner.com → :5678 (n8n) +ai.itpropartner.com → :3000 (Open WebUI) +n8n.itpropartner.com → :5678 (n8n) ``` ### App2 (152.53.39.202) + ``` -hudu.itpropartner.com → Hudu internal -gps.fleettracker360.com → :8082 (Traccar) -unms.forefrontwireless.com → UNMS Nginx -unifi.itpropartner.com → :8443 (UniFi) +hudu.itpropartner.com → Hudu internal +gps.fleettracker360.com → :8082 (Traccar) +unms.forefrontwireless.com → UNMS Nginx +unifi.itpropartner.com → :8443 (UniFi) ``` --- @@ -177,9 +192,10 @@ unifi.itpropartner.com → :8443 (UniFi) | Open WebUI | https://ai.itpropartner.com | app1 | Chat UI | | Open WebUI Admin | https://admin-ai.itpropartner.com/ui | app1 | user: admin, pw: LITELLM_MASTER_KEY | | Ops Portal | https://ops.itpropartner.com | Core | Internal dashboard | +| Grafana | http://core.itpropartner.com:3002 | Core | admin/admin | | Uptime Kuma | https://uptimekuma.itpropartner.com | Core | Service monitoring | | Vaultwarden | https://vault.iamgmb.com | Core | Password vault | -| CloudPanel | https://panel.itpropartner.com | app3 | SQLite DB at /home/clp/htdocs/app/data/db.sq3 | +| CloudPanel | https://panel.itpropartner.com | app3 | user: gmb / SQLite auth | | Traccar | https://gps.fleettracker360.com | app2 | GPS fleet tracking | | UniFi | https://unifi.itpropartner.com | app2 | Network controller | | UNMS | https://unms.forefrontwireless.com | app2 | WISP management | @@ -189,15 +205,13 @@ unifi.itpropartner.com → :8443 (UniFi) ### MCP Access (from Open WebUI) -All 5 MCP servers run on **app1** and are wired into Open WebUI at https://ai.itpropartner.com: - -| MCP | Port | Tools | -|---|---|---| -| Super Search | :8899 | web_search, web_extract, web_search_premium | -| Browser | :8901 | browser_navigate, browser_snapshot, browser_click, browser_type, browser_console | -| Filesystem | :8900 | read_file, write_file, search_files, list_dir, file_info | -| Email | :8902 | search_emails, send_email, get_email | -| Git/Gitea | :8903 | clone, commit, push, pull | +| MCP Server | Location | Port | Tools | +|---|---|---|---| +| Super Search | Core | :8899 | 10 tools — web_search, web_extract, web_search_exa, web_fetch_exa, email_search, phone_search, person_search, business_affiliation_search, score_source, dossier_report | +| Browser | app1 | :8901 | browser_navigate, browser_snapshot, browser_click, browser_type, browser_console | +| Filesystem | app1 | :8900 | read_file, write_file, search_files, list_dir, file_info | +| Email | app1 | :8902 | search_emails, send_email, get_email | +| Git/Gitea | app1 | :8903 | clone, commit, push, pull | --- @@ -213,7 +227,7 @@ All 5 MCP servers run on **app1** and are wired into Open WebUI at https://ai.it ## Firewall UFW is enabled on all servers. Standard rules: -- **Core:** 22, 80, 443, 3000, 3001, 8080, 8082, 8443, 9090, 3002 +- **Core:** 22, 80, 443, 3000, 3001, 3002, 8080, 8082, 8090, 8443, 9090 - **app1:** 22, 80, 443, 3000, 5678, 8899, 8900, 8901, 8902, 8903 - **app2:** 22, 80, 443, 3000, 8080, 8082, 8089, 8443, 8843, 3478, 10001, 5000:5150 - **app3:** 22, 80, 443, 8443