ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accuracy audit: fix Core-BU IP, Caddy domains, old-ai status, MCP locations, DNS record corrections

Browse Source
This commit is contained in:
root
2026-07-16 20:59:00 -04:00
parent 331e8c4332
commit 5eceebf5a1
1 changed files with 65 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+57 -43
View File
@@ -13,22 +13,22 @@
- **Provider:** netcup RS 2000 G12
- **Specs:** 8 vCPU EPYC 9645, 15 GB DDR5 ECC, 512 GB NVMe
- **OS:** Debian 13
- Role: Hermes + Ollama fallback + Portals
- **Role:** Hermes + Ollama fallback + Portals
- **Key Services:**
- Hermes Agent (Telegram + cron, 22 cron jobs)
- Caddy reverse proxy (11 domains, auto-TLS)
- Caddy reverse proxy (10 domains, auto-TLS)
- Ops Portal (FastAPI, port 8090)
- Prometheus (native, port 9090) + Grafana (native, port 3002)
- Uptime Kuma (Docker, port 3001) — 9+ monitors
- Vaultwarden (Docker, port 8080) — vault.iamgmb.com
- Super Search MCP v2.0.0 (FastMCP, port 8899)
- Super Search MCP v2.0.0 (FastMCP, port 8899) — 10 tools
- Twenty CRM (Docker) — crm.debtrecoveryexperts.com
- DocuSeal (Docker, port 3000) — sign.itpropartner.com
- DocuSeal (Docker, port 3000) — sign.core.itpropartner.com
- SearXNG (Docker, port 8888)
- Komodo (Docker, port 9120)
- Tailscale, StrongSwan, WireGuard (home CCR tunnel)
- Tailscale, StrongSwan, WireGuard (home CCR tunnel 10.77.0.0/24)
- Redis cache
- Ollama (systemd, port 11434) — lightweight fallback LLM
- Ollama (systemd, port 11434)
### App1 Server
- **Hostname:** app1
@@ -41,9 +41,9 @@
- Ollama (Docker, port 11434)
- Open WebUI (Docker, port 3000) — ai.itpropartner.com
- n8n + Postgres (Docker, port 5678) — n8n.itpropartner.com
- Caddy (systemd, 80/443)
- LiteLLM (Docker) + Postgres — admin-ai.itpropartner.com
- 5 MCP servers: Super Search (:8899), Browser (:8901), Filesystem (:8900), Email (:8902), Git (:8903)
- Caddy (systemd, 80/443)
- 4 MCP servers: Browser (:8901), Filesystem (:8900), Email (:8902), Git (:8903)
### App2 Server
- **Hostname:** app2
@@ -70,19 +70,20 @@
- CloudPanel CE — panel.itpropartner.com
- Nginx (80/443) + Percona MySQL 8.4 + PHP 8.3
- voipsimplicity.com (WordPress, migrated Jul 16)
- my.voipsimplicity.com (PHP customer portal)
- my.voipsimplicity.com (static HTML SPA, VoIP customer portal)
### Core-BU (Warm Standby)
- **Hostname:** core-bu
- **IP:** 5.161.114.8
- **Provider:** Hetzner CPX11 (planned upgrade: CPX31)
- **Specs:** 2 vCPU, 2 GB RAM, 40 GB SSD
- **IP:** 5.161.225.131
- **Provider:** Hetzner CPX21
- **Specs:** 3 vCPU, 4 GB RAM, 80 GB SSD
- **Role:** Warm standby — auto-failover if Core down
- **Watchdog:** 5-min check, 4-cycle confirmation, S3 sync every 10 min
### Other Active Servers
- **old-ai:** 178.156.167.181 (Hetzner CPX41) — LiteLLM + Open WebUI + Ollama — **deprecated, migrating to app1**
- **wphost02:** 5.161.62.38 (Hetzner CPX21) — WordPress host — **migrating to app3**
### Legacy / Decommissioned
- **old-ai:** 178.156.167.181 (Hetzner CPX41) — **decommissioned** (LiteLLM migrated to app1)
- **old app1:** 87.99.144.163 (Hetzner CPX11) — **deleted**
- **wphost02:** 5.161.62.38 (Hetzner CPX21) — **migrating to app3**
- **Tony Hermes:** 87.99.159.142 (Hetzner CPX21) — Anthony's personal Hermes
---
@@ -95,27 +96,39 @@
| Domain | IP | Server | Service |
|---|---|---|---|
| core.itpropartner.com | 152.53.192.33 | Core | Static API docs |
| core.itpropartner.com | 152.53.192.33 | Core | Landing page + Grafana link |
| ops.itpropartner.com | 152.53.192.33 | Core | Ops dashboard |
| sign.itpropartner.com | 152.53.192.33 | Core | DocuSeal |
| uptimekuma.itpropartner.com | 152.53.192.33 | Core | Monitoring |
| sign.core.itpropartner.com | 152.53.192.33 | Core | DocuSeal |
| uptimekuma.itpropartner.com | 152.53.192.33 | Core | Uptime monitoring |
| gps.fleettracker360.com | 152.53.192.33 | Core | Traccar HTTPS proxy → app2 |
| my.itpropartner.com | 152.53.192.33 | Core | Customer portal hub |
| hudu.itpropartner.com | 152.53.39.202 | app2 | IT documentation |
| unifi.itpropartner.com | 152.53.39.202 | app2 | UniFi controller |
| panel.itpropartner.com | 152.53.241.111 | app3 | CloudPanel CE |
| ai.itpropartner.com | 152.53.36.131 | app1 | Open WebUI |
| n8n.itpropartner.com | 152.53.36.131 | app1 | n8n automation |
| admin-ai.itpropartner.com | 152.53.36.131 | app1 | LiteLLM (currently → old-ai) |
| admin-ai.itpropartner.com | 152.53.36.131 | app1 | LiteLLM |
### Cloudflare-Managed Domains
| Domain | IP | Server | Service |
|---|---|---|---|
| fleettracker360.com | 152.53.39.202 | app2 | Fleet tracking |
| gps.fleettracker360.com | 152.53.39.202 | app2 | GPS devices |
| voipsimplicity.com | 152.53.241.111 | app3 | VoIP site |
| support.voipsimplicity.com | 152.53.241.111 | app3 | Support portal |
| fleettracker360.com | Cloudflare | app2 | Fleet tracking website |
| gps.fleettracker360.com | Cloudflare → Core | Core → app2 | Traccar devices |
| voipsimplicity.com | Cloudflare | app3 | VoIP marketing site |
| my.voipsimplicity.com | Cloudflare | app3 | VoIP customer portal |
| portal.debtrecoveryexperts.com | 152.53.192.33 | Core | DRE portal |
| crm.debtrecoveryexperts.com | Cloudflare Access | — | DRE CRM |
| vault.iamgmb.com | 152.53.192.33 | Core | Vaultwarden |
| sign.iamgmb.com | 152.53.192.33 | Core | Document signing |
| shark.iamgmb.com | 152.53.192.33 | Core | Shark game |
### DNS PENDING (create at SiteGround)
| Subdomain | → IP | Service |
|---|---|---|
| vault.itpropartner.com | 152.53.36.131 | Vaultwarden (after migration) |
| status.itpropartner.com | 152.53.192.33 | Public status page |
---
@@ -140,27 +153,29 @@
## Caddy Configuration
### Core (152.53.192.33)
```
sign.itpropartner.com → :3000 (DocuSeal)
core.itpropartner.com → static files
crm.debtrecoveryexperts.com → :3001 (Twenty)
portal.debtrecoveryexperts.com → static
internal.debtrecoveryexperts.com → static
app.itpropartner.com → static + :8082
shark.itpropartner.com → static + :8083
sign.core.itpropartner.com → localhost:3000 (DocuSeal)
ops.itpropartner.com → 127.0.0.1:8090 + static
uptimekuma.itpropartner.com → 127.0.0.1:3001 (Uptime Kuma)
gps.fleettracker360.com → app2:8082 (Traccar)
my.itpropartner.com → static files
portal.debtrecoveryexperts.com → static files
vault.iamgmb.com → localhost:8080 (Vaultwarden)
sign.iamgmb.com → 127.0.0.1:8090
shark.iamgmb.com → static + :8083
ops.itpropartner.com → :8090 + static
uptimekuma.itpropartner.com → :3001
vault.iamgmb.com → :8080
```
### App1 (152.53.36.131)
```
ai.itpropartner.com → :3000 (Open WebUI)
n8n.itpropartner.com → :5678 (n8n)
```
### App2 (152.53.39.202)
```
hudu.itpropartner.com → Hudu internal
gps.fleettracker360.com → :8082 (Traccar)
@@ -177,9 +192,10 @@ unifi.itpropartner.com → :8443 (UniFi)
| Open WebUI | https://ai.itpropartner.com | app1 | Chat UI |
| Open WebUI Admin | https://admin-ai.itpropartner.com/ui | app1 | user: admin, pw: LITELLM_MASTER_KEY |
| Ops Portal | https://ops.itpropartner.com | Core | Internal dashboard |
| Grafana | http://core.itpropartner.com:3002 | Core | admin/admin |
| Uptime Kuma | https://uptimekuma.itpropartner.com | Core | Service monitoring |
| Vaultwarden | https://vault.iamgmb.com | Core | Password vault |
| CloudPanel | https://panel.itpropartner.com | app3 | SQLite DB at /home/clp/htdocs/app/data/db.sq3 |
| CloudPanel | https://panel.itpropartner.com | app3 | user: gmb / SQLite auth |
| Traccar | https://gps.fleettracker360.com | app2 | GPS fleet tracking |
| UniFi | https://unifi.itpropartner.com | app2 | Network controller |
| UNMS | https://unms.forefrontwireless.com | app2 | WISP management |
@@ -189,15 +205,13 @@ unifi.itpropartner.com → :8443 (UniFi)
### MCP Access (from Open WebUI)
All 5 MCP servers run on **app1** and are wired into Open WebUI at https://ai.itpropartner.com:
| MCP | Port | Tools |
|---|---|---|
| Super Search | :8899 | web_search, web_extract, web_search_premium |
| Browser | :8901 | browser_navigate, browser_snapshot, browser_click, browser_type, browser_console |
| Filesystem | :8900 | read_file, write_file, search_files, list_dir, file_info |
| Email | :8902 | search_emails, send_email, get_email |
| Git/Gitea | :8903 | clone, commit, push, pull |
| MCP Server | Location | Port | Tools |
|---|---|---|---|
| Super Search | Core | :8899 | 10 tools — web_search, web_extract, web_search_exa, web_fetch_exa, email_search, phone_search, person_search, business_affiliation_search, score_source, dossier_report |
| Browser | app1 | :8901 | browser_navigate, browser_snapshot, browser_click, browser_type, browser_console |
| Filesystem | app1 | :8900 | read_file, write_file, search_files, list_dir, file_info |
| Email | app1 | :8902 | search_emails, send_email, get_email |
| Git/Gitea | app1 | :8903 | clone, commit, push, pull |
---
@@ -213,7 +227,7 @@ All 5 MCP servers run on **app1** and are wired into Open WebUI at https://ai.it
## Firewall
UFW is enabled on all servers. Standard rules:
- **Core:** 22, 80, 443, 3000, 3001, 8080, 8082, 8443, 9090, 3002
- **Core:** 22, 80, 443, 3000, 3001, 3002, 8080, 8082, 8090, 8443, 9090
- **app1:** 22, 80, 443, 3000, 5678, 8899, 8900, 8901, 8902, 8903
- **app2:** 22, 80, 443, 3000, 8080, 8082, 8089, 8443, 8843, 3478, 10001, 5000:5150
- **app3:** 22, 80, 443, 8443