Skip to content

Menu

  • Home
  • Sysadmin
  • Debian
  • Security
  • Docker

Blog by Constantin Herold | Theme by ThemeinProgress | Proudly powered by WordPress

Spaaacesysadmin & dev stuff

Network Overview

February 23, 2021Debian, Docker, Personal, Proxmox, Sysadmin Standard
Read time 2 minutes

Overview of some services on my network.

The setup is fully redundant as high availability cluster.

Driven by open source and powered with renewable energy.

Using Terraform, Cloud-init and Ansible for IaC.

And K8s, Gitlab, Flux2 and Renovate for GitOps.

Network Diagram

DMZ

ServiceDescription
Postfix, Dovecot, SpamAssassinEmail Server with DKIM, DMARC, SPF, DANE, Sieve
Nextcloud, CollaboraCloud With Mail, Calendar, Contacts, Notes, Tasks, Online Editing of Documents
Gitlab, Gitlab Runner, RenovateVersion Control System with CI/CD, Kanban, Issue Tracking, Private Docker Registry, Dependency Update Bot, Unit Tests, Smoke Tests, End-to-End Tests, Automatic Staging Deploy
MariaDB GaleraSQL Database Cluster
Nginx, Certbot, ModsecReverse Proxy with Let’s Encrypt and Web Application Firewall
Apache2, PHP 7.4, MemcachedWeb Environment for Production and Staging
Apache2, PHP 8.0, Memcached, XdebugWeb Environment for Development

LAN

ServiceDescription
HeimdallBookmark Dashboard
NetBoxIP Address and Inventory Management
netboot.xyzPXE TFTP Server
BitwardenPassword Manager
SonarrSeries Media Manager
RadarrMovie Media Manager
JellyfinMedia Server, Transcoder, DVR
SambaWindows Network Share
NFSLinux Network Share

IOT

ServiceDescription
Home AssistantHome Automation System
Ha-BridgeIOT bridge for Alexa
MosquittoMQTT Broker
TasmotaAlternative Firmware for ESP8266/ESP32 IOT Devices, BLE MQTT Gateway, Zigbee MQTT Gateway
Marlin, OctoPrint, Cura3D Printer Firmware, Controller, STL Viewer, Slicer

GSM

ServiceDescription
PterodactylGame Server Manager

Quorum Node

ServiceDescription
Corosync QdeviceQuorum for KVM Cluster
Galera ArbitratorQuorum for MariaDB Cluster
NUT ServerNetwork UPS Tools
ZabbixMonitoring System
Telegraf, InfluxDB, GrafanaMetrics Dashboard
Elasticsearch, Logstash, KibanaCentral Log Server with Reports

OPNsense Firewall

ServiceDescription
VLANSLAN, DMZ, IOT, GSM, GUEST, PBX, NVR, VPN, WAN1, WAN2, MGMT
Multi WANWAN Failover
WireguardVPN for Remote Access
WireguardAdditional Static IPv4/IPv6 Gateways
DOHDNS over HTTPS with DNSSEC
AdblockDNS based Ad-Blocker
SuricataIntrusion Detection and Prevention
Traffic ShapingBandwidth Limiting, QoS
NtopngTraffic Analysis
HAProxyTCP Load Balancer
CarpHigh Availability
OtherDHCP, RA, DNS, NTP, NAT, IPv4, IPv6

Additional VM’s

VMDescription
AsteriskPBX Telephone System
ShinobiNVR Camera System
MyrtilleRDP Web Gateway

Offsite VPS

ServiceDescription
Uptime KumaMonitoring System with Status Page
Wireguard GatewayGateway for Additional Static IPv4/IPv6
Backup StorageOffsite Backup 3-2-1

Write a Reply or Comment Cancel reply

Your email address will not be published. Required fields are marked *

Recent Posts

  • Create SWAP on ZFS ZVOL
  • Raspberry Pi Grafana Kiosk
  • Proxmox Grafana Dashboard
  • Proxmox Full Disk Encryption with SSH Remote Unlock
  • Login Mail Alert Using Rsyslog

Categories

  • Debian
  • Docker
  • Monitoring
  • Personal
  • Proxmox
  • Raspberry Pi
  • Security
  • Sysadmin