From 79a383a3b5e8c53dfcbbe17a727258d98c1ad86f Mon Sep 17 00:00:00 2001 From: root Date: Fri, 24 Jul 2026 17:13:54 -0400 Subject: [PATCH] =?UTF-8?q?fix:=20model=20chain,=20service=20locations,=20?= =?UTF-8?q?dead=20IPs,=20stale=20paths=20=E2=80=94=20audit=20Jul=2024=2020?= =?UTF-8?q?26?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- README.md | 22 +++++++++++----------- backup-plan.md | 2 +- docs/key-inventory.md | 2 +- 3 files changed, 13 insertions(+), 13 deletions(-) diff --git a/README.md b/README.md index 29a6cae..f383aab 100644 --- a/README.md +++ b/README.md @@ -20,7 +20,7 @@ - Ops Portal (FastAPI, port 8090) - Prometheus (native, port 9090) + Grafana (native, port 3002) - Uptime Kuma (Docker, port 3001) — 9+ monitors - - Vaultwarden (Docker, port 8080) — vault.iamgmb.com + - Vaultwarden (migrated to app1, port 8081) — vault.iamgmb.com - Twenty CRM (Docker) — crm.debtrecoveryexperts.com - DocuSeal (Docker, port 3000) — sign.core.itpropartner.com - SearXNG (Docker, port 8888) @@ -93,17 +93,17 @@ ## Model Fallback Chain -All providers use direct API keys. GPT-5.5 quality survives through admin-ai → OpenRouter, then degrades through DeepSeek → Gemini → Grok. +Direct API keys for all providers. Claude Sonnet 5 for primary quality, then direct fallbacks through DeepSeek → GPT → Grok → Gemini. | # | Model | Provider | Gateway | |---|---|---|---| -| Primary | GPT-5.5 | admin-ai | Self-hosted LiteLLM (app1) | -| Fallback 1 | GPT-5.5 | OpenRouter | openrouter.ai | -| Fallback 2 | DeepSeek v4 Pro | DeepSeek | api.deepseek.com | -| Fallback 3 | Gemini 3.5 Flash | Google | generativelanguage.googleapis.com | -| Fallback 4 | Grok 4.5 | xAI | api.x.ai | +| Primary | Claude Sonnet 5 | admin-ai | Self-hosted LiteLLM (app1) | +| Fallback 1 | DeepSeek v4 Pro | DeepSeek (direct) | api.deepseek.com | +| Fallback 2 | GPT-5.6 Terra | admin-ai | Self-hosted LiteLLM (app1) | +| Fallback 3 | Grok 2 1212 | xAI (direct) | api.x.ai | +| Fallback 4 | Gemini 3.6 Flash | Google (direct) | generativelanguage.googleapis.com | -**Credits (Jul 17):** DeepSeek $58, OpenRouter ~$30 remaining, OpenAI/xAI/Google on pay-as-you-go +**Credits (Jul 24):** DeepSeek $~58 remaining, OpenAI/xAI/Google on pay-as-you-go **Health check:** Daily 8 AM cron (`model-usage-check`) --- @@ -139,7 +139,7 @@ All providers use direct API keys. GPT-5.5 quality survives through admin-ai → | my.voipsimplicity.com | Cloudflare | app3 | VoIP customer portal | | portal.debtrecoveryexperts.com | 152.53.192.33 | Core | DRE portal | | crm.debtrecoveryexperts.com | Cloudflare Access | — | DRE CRM | -| vault.iamgmb.com | 152.53.192.33 | Core | Vaultwarden | +| vault.iamgmb.com | 152.53.36.131 | app1 | Vaultwarden | | sign.iamgmb.com | 152.53.192.33 | Core | Document signing | | shark.iamgmb.com | 152.53.192.33 | Core | Shark game | @@ -158,7 +158,7 @@ All providers use direct API keys. GPT-5.5 quality survives through admin-ai → |---|---|---|---| | hermes-live-sync | Every 15 min | s3://hermes-vps-backups/live/ | Live state sync | | hermes-full-backup | Daily 1 AM | s3://hermes-vps-backups/hermes-full-backup/ | Full Hermes backup | -| home-router-backup | Daily 6 AM | s3://mikrotik-ccr-backups/ | CCR config | +| run-wisp-backup | Daily 6 AM | s3://mikrotik-ccr-backups/ | CCR config (via wisp-backup.py) | | root-essentials-backup | Daily 3 AM | S3 | /root essentials | | docker-volume-sync | Daily 3 AM | S3 | Docker volumes | | system-config-sync | Daily 4 AM | S3 | System configs | @@ -220,7 +220,7 @@ unifi.itpropartner.com → :8443 (UniFi) | Ops Portal | https://ops.itpropartner.com | Core | Internal dashboard | | Grafana | http://core.itpropartner.com:3002 | Core | admin/admin | | Uptime Kuma | https://uptimekuma.itpropartner.com | Core | Service monitoring | -| Vaultwarden | https://vault.iamgmb.com | Core | Password vault | +| Vaultwarden | https://vault.iamgmb.com | app1 | Password vault | | CloudPanel | https://panel.itpropartner.com | app3 | user: gmb / SQLite auth | | Traccar | https://gps.fleettracker360.com | app2 | GPS fleet tracking | | UniFi | https://unifi.itpropartner.com | app2 | Network controller | diff --git a/backup-plan.md b/backup-plan.md index c1f6053..2cff114 100644 --- a/backup-plan.md +++ b/backup-plan.md @@ -23,7 +23,7 @@ | 1:00 AM + 1:00 PM | app3 | /opt/backup-restore/snapshot.sh | Per-site WordPress snapshots (files + DB), 60-day retention | | 3:00 AM | Core | docker-volume-sync.sh | Docker volumes | | 4:00 AM | Core | system-config-sync.sh | System configs | -| 6:00 AM | Core | home-router-backup.sh | MikroTik CCR config | +| 6:00 AM | Core | run-wisp-backup.sh | MikroTik CCR config (via wisp-backup.py) | | Every 10 min | core-bu | warm-standby-sync | Pull from S3 live/ → standby readiness | --- diff --git a/docs/key-inventory.md b/docs/key-inventory.md index bb34bd8..47eb127 100644 --- a/docs/key-inventory.md +++ b/docs/key-inventory.md @@ -39,7 +39,7 @@ homelab.pub: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHT+727Cti4cZ2x6CiYDeDKZ9 | **app1** | 152.53.36.131 | netcup RS 4000 | Via root or ippadmin+sudo | Root password in Vaultwarden | | **app2** | 152.53.39.202 | netcup RS 4000 | Via root or ippadmin+sudo | Root password in Vaultwarden | | **app3** | 152.53.241.111 | netcup RS 4000 | Via root or ippadmin+sudo | Root password in Vaultwarden | -| **app1-bu** | 5.161.114.8 | Hetzner CPX11 | itpp-infra SSH key | Warm standby, offline by default | +| **app1-bu** | 5.161.225.131 | Hetzner CPX21 | itpp-infra SSH key | Warm standby (core-bu) | ### Admin Account (all servers)