ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: model chain, service locations, dead IPs, stale paths — audit Jul 24 2026

Browse Source
This commit is contained in:
root
2026-07-24 17:13:54 -04:00
parent 5f48e0213a
commit 79a383a3b5
3 changed files with 13 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+11 -11
View File
@@ -20,7 +20,7 @@
- Ops Portal (FastAPI, port 8090) - Ops Portal (FastAPI, port 8090)
- Prometheus (native, port 9090) + Grafana (native, port 3002) - Prometheus (native, port 9090) + Grafana (native, port 3002)
- Uptime Kuma (Docker, port 3001) — 9+ monitors - Uptime Kuma (Docker, port 3001) — 9+ monitors
- Vaultwarden (Docker, port 8080) — vault.iamgmb.com - Vaultwarden (migrated to app1, port 8081) — vault.iamgmb.com
- Twenty CRM (Docker) — crm.debtrecoveryexperts.com - Twenty CRM (Docker) — crm.debtrecoveryexperts.com
- DocuSeal (Docker, port 3000) — sign.core.itpropartner.com - DocuSeal (Docker, port 3000) — sign.core.itpropartner.com
- SearXNG (Docker, port 8888) - SearXNG (Docker, port 8888)
@@ -93,17 +93,17 @@
## Model Fallback Chain ## Model Fallback Chain
All providers use direct API keys. GPT-5.5 quality survives through admin-ai → OpenRouter, then degrades through DeepSeek → Gemini → Grok. Direct API keys for all providers. Claude Sonnet 5 for primary quality, then direct fallbacks through DeepSeek → GPT → Grok → Gemini.
| # | Model | Provider | Gateway | | # | Model | Provider | Gateway |
|---|---|---|---| |---|---|---|---|
| Primary | GPT-5.5 | admin-ai | Self-hosted LiteLLM (app1) | | Primary | Claude Sonnet 5 | admin-ai | Self-hosted LiteLLM (app1) |
| Fallback 1 | GPT-5.5 | OpenRouter | openrouter.ai | | Fallback 1 | DeepSeek v4 Pro | DeepSeek (direct) | api.deepseek.com |
| Fallback 2 | DeepSeek v4 Pro | DeepSeek | api.deepseek.com | | Fallback 2 | GPT-5.6 Terra | admin-ai | Self-hosted LiteLLM (app1) |
| Fallback 3 | Gemini 3.5 Flash | Google | generativelanguage.googleapis.com | | Fallback 3 | Grok 2 1212 | xAI (direct) | api.x.ai |
| Fallback 4 | Grok 4.5 | xAI | api.x.ai | | Fallback 4 | Gemini 3.6 Flash | Google (direct) | generativelanguage.googleapis.com |
**Credits (Jul 17):** DeepSeek $58, OpenRouter ~$30 remaining, OpenAI/xAI/Google on pay-as-you-go **Credits (Jul 24):** DeepSeek $~58 remaining, OpenAI/xAI/Google on pay-as-you-go
**Health check:** Daily 8 AM cron (`model-usage-check`) **Health check:** Daily 8 AM cron (`model-usage-check`)
--- ---
@@ -139,7 +139,7 @@ All providers use direct API keys. GPT-5.5 quality survives through admin-ai →
| my.voipsimplicity.com | Cloudflare | app3 | VoIP customer portal | | my.voipsimplicity.com | Cloudflare | app3 | VoIP customer portal |
| portal.debtrecoveryexperts.com | 152.53.192.33 | Core | DRE portal | | portal.debtrecoveryexperts.com | 152.53.192.33 | Core | DRE portal |
| crm.debtrecoveryexperts.com | Cloudflare Access | — | DRE CRM | | crm.debtrecoveryexperts.com | Cloudflare Access | — | DRE CRM |
| vault.iamgmb.com | 152.53.192.33 | Core | Vaultwarden | | vault.iamgmb.com | 152.53.36.131 | app1 | Vaultwarden |
| sign.iamgmb.com | 152.53.192.33 | Core | Document signing | | sign.iamgmb.com | 152.53.192.33 | Core | Document signing |
| shark.iamgmb.com | 152.53.192.33 | Core | Shark game | | shark.iamgmb.com | 152.53.192.33 | Core | Shark game |
@@ -158,7 +158,7 @@ All providers use direct API keys. GPT-5.5 quality survives through admin-ai →
|---|---|---|---| |---|---|---|---|
| hermes-live-sync | Every 15 min | s3://hermes-vps-backups/live/ | Live state sync | | hermes-live-sync | Every 15 min | s3://hermes-vps-backups/live/ | Live state sync |
| hermes-full-backup | Daily 1 AM | s3://hermes-vps-backups/hermes-full-backup/ | Full Hermes backup | | hermes-full-backup | Daily 1 AM | s3://hermes-vps-backups/hermes-full-backup/ | Full Hermes backup |
| home-router-backup | Daily 6 AM | s3://mikrotik-ccr-backups/ | CCR config | | run-wisp-backup | Daily 6 AM | s3://mikrotik-ccr-backups/ | CCR config (via wisp-backup.py) |
| root-essentials-backup | Daily 3 AM | S3 | /root essentials | | root-essentials-backup | Daily 3 AM | S3 | /root essentials |
| docker-volume-sync | Daily 3 AM | S3 | Docker volumes | | docker-volume-sync | Daily 3 AM | S3 | Docker volumes |
| system-config-sync | Daily 4 AM | S3 | System configs | | system-config-sync | Daily 4 AM | S3 | System configs |
@@ -220,7 +220,7 @@ unifi.itpropartner.com → :8443 (UniFi)
| Ops Portal | https://ops.itpropartner.com | Core | Internal dashboard | | Ops Portal | https://ops.itpropartner.com | Core | Internal dashboard |
| Grafana | http://core.itpropartner.com:3002 | Core | admin/admin | | Grafana | http://core.itpropartner.com:3002 | Core | admin/admin |
| Uptime Kuma | https://uptimekuma.itpropartner.com | Core | Service monitoring | | Uptime Kuma | https://uptimekuma.itpropartner.com | Core | Service monitoring |
| Vaultwarden | https://vault.iamgmb.com | Core | Password vault | | Vaultwarden | https://vault.iamgmb.com | app1 | Password vault |
| CloudPanel | https://panel.itpropartner.com | app3 | user: gmb / SQLite auth | | CloudPanel | https://panel.itpropartner.com | app3 | user: gmb / SQLite auth |
| Traccar | https://gps.fleettracker360.com | app2 | GPS fleet tracking | | Traccar | https://gps.fleettracker360.com | app2 | GPS fleet tracking |
| UniFi | https://unifi.itpropartner.com | app2 | Network controller | | UniFi | https://unifi.itpropartner.com | app2 | Network controller |
backup-plan.md
+1 -1
View File
@@ -23,7 +23,7 @@
| 1:00 AM + 1:00 PM | app3 | /opt/backup-restore/snapshot.sh | Per-site WordPress snapshots (files + DB), 60-day retention | | 1:00 AM + 1:00 PM | app3 | /opt/backup-restore/snapshot.sh | Per-site WordPress snapshots (files + DB), 60-day retention |
| 3:00 AM | Core | docker-volume-sync.sh | Docker volumes | | 3:00 AM | Core | docker-volume-sync.sh | Docker volumes |
| 4:00 AM | Core | system-config-sync.sh | System configs | | 4:00 AM | Core | system-config-sync.sh | System configs |
| 6:00 AM | Core | home-router-backup.sh | MikroTik CCR config | | 6:00 AM | Core | run-wisp-backup.sh | MikroTik CCR config (via wisp-backup.py) |
| Every 10 min | core-bu | warm-standby-sync | Pull from S3 live/ → standby readiness | | Every 10 min | core-bu | warm-standby-sync | Pull from S3 live/ → standby readiness |
--- ---
docs/key-inventory.md
+1 -1
View File
@@ -39,7 +39,7 @@ homelab.pub: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHT+727Cti4cZ2x6CiYDeDKZ9
| **app1** | 152.53.36.131 | netcup RS 4000 | Via root or ippadmin+sudo | Root password in Vaultwarden | | **app1** | 152.53.36.131 | netcup RS 4000 | Via root or ippadmin+sudo | Root password in Vaultwarden |
| **app2** | 152.53.39.202 | netcup RS 4000 | Via root or ippadmin+sudo | Root password in Vaultwarden | | **app2** | 152.53.39.202 | netcup RS 4000 | Via root or ippadmin+sudo | Root password in Vaultwarden |
| **app3** | 152.53.241.111 | netcup RS 4000 | Via root or ippadmin+sudo | Root password in Vaultwarden | | **app3** | 152.53.241.111 | netcup RS 4000 | Via root or ippadmin+sudo | Root password in Vaultwarden |
| **app1-bu** | 5.161.114.8 | Hetzner CPX11 | itpp-infra SSH key | Warm standby, offline by default | | **app1-bu** | 5.161.225.131 | Hetzner CPX21 | itpp-infra SSH key | Warm standby (core-bu) |
### Admin Account (all servers) ### Admin Account (all servers)