Patrick Plate
134 lines
5.6 KiB
Markdown
134 lines
5.6 KiB
Markdown
# Homelab Session Handover
|
|
_Last updated: 2026-06-11 by Lumen_
|
|
|
|
## 🔑 SSH Access (no password needed)
|
|
|
|
```bash
|
|
ssh-add ~/.ssh/id_ed25519_homelab
|
|
```
|
|
|
|
| Alias | Host | User | What it is |
|
|
|-------|------|------|-----------|
|
|
| `ssh vps` | 85.214.154.199 | root | plate.software — Strato OpenVZ, Plesk, Apache |
|
|
| `ssh ionos` | 82.165.206.45 | root | plate-software.de — IONOS, Ubuntu 18.04, Apache |
|
|
| `ssh truenas` | 192.168.188.119 | root | TrueNAS SCALE 24.10.2.4, k3s, Gitea |
|
|
|
|
---
|
|
|
|
## ✅ Fully Done
|
|
|
|
### plate.software (VPS — 85.214.154.199)
|
|
- Let's Encrypt cert valid (ACME path fixed in Plesk HTTP directives)
|
|
- `frps` v0.68.1 running systemd, port 7000, token in BigMind fact #188
|
|
- `git.plate.software` Apache proxy → `localhost:30008` via frpc ✅ HTTP 200
|
|
- `frpc.service` on TrueNAS tunneling port 30008 → VPS
|
|
|
|
### IONOS (plate-software.de — 82.165.206.45)
|
|
- SSL wildcard-like cert renewed via acme.sh — now covers `git.plate-software.de` too
|
|
- Valid until ~2026-08-04
|
|
- ownCloud, Collabora still running
|
|
|
|
### TrueNAS — ChunkyTown ZFS Pool (rebuilt 2026-05-04)
|
|
- New pool: RAIDZ1 on `sda`+`sdb`+`sdd`+`sdl` (3 Toshibas + new Seagate WWZAXXKL)
|
|
- Hot spare: `sdk` (oldest Toshiba 3220A0PBFA3H)
|
|
- **29.1TB usable**, ONLINE, 0 errors
|
|
- Old pool was unrecoverable (2 simultaneous failures)
|
|
- Data was acceptable loss (Plex re-downloadable, photos in Google Photos)
|
|
|
|
### TrueNAS — frpc tunnel
|
|
- Binary: `/mnt/VM_SSD_Pool/frp/frpc`
|
|
- Config: `/mnt/VM_SSD_Pool/frp/frpc.toml`
|
|
- Systemd: `frpc.service` (enabled, running)
|
|
- Gitea `app.ini`: `/mnt/VM_SSD_Pool/VM_POOL1/gitea/config/app.ini`
|
|
- `ROOT_URL = https://git.plate.software/`
|
|
- `SSH_DOMAIN = git.plate.software`
|
|
|
|
### git.plate.software ✅ LIVE
|
|
- `curl https://git.plate.software/` → HTTP 200
|
|
|
|
---
|
|
|
|
## ✅ IONOS Gitea Mirror — FIXED 2026-06-11
|
|
|
|
### Status: FULLY WORKING
|
|
- `https://git.plate-software.de/` → HTTP 200 ✅
|
|
- Gitea API → HTTP 200 ✅
|
|
- Push mirrors syncing: `pplate/bigmind`, `pplate/cannamanage`, `pplate/pi_mcps` ✅
|
|
|
|
### What's running
|
|
- Gitea Docker container on IONOS: `docker ps | grep gitea-mirror`
|
|
- Port: `127.0.0.1:3000` (local only, behind Apache)
|
|
- Data: `/opt/gitea/data`
|
|
- Admin user: `pplate` (password: `HomelabGit2026!` — reset 2026-06-11)
|
|
- API token: `1e87f855d448727e9d213599d654542881bdca0f`
|
|
|
|
### Root cause (fixed)
|
|
The `sites-enabled/` files for collabora, owncloud, and ssl.conf were **stale copies** (not symlinks) still using hostname-specific VirtualHost bindings (`collabora.plate-software.de:443`, `owncloud.plate-software.de:443`, `plate-software.de:443`). These resolved to `82.165.206.45:443` and Apache treated that as a separate higher-priority NameVirtualHost group — intercepting all git smart HTTP requests before the `*:443` git vhost was ever consulted.
|
|
|
|
**Fix applied 2026-06-11:**
|
|
```bash
|
|
sed -i "s|VirtualHost collabora.plate-software.de:443|VirtualHost *:443|g" /etc/apache2/sites-enabled/collabora.plate-software.de.conf
|
|
sed -i "s|VirtualHost collabora.plate-software.de:80|VirtualHost *:80|g" /etc/apache2/sites-enabled/collabora.plate-software.de.conf
|
|
sed -i "s|VirtualHost owncloud.plate-software.de:443|VirtualHost *:443|g" /etc/apache2/sites-enabled/owncloud.plate-software.de.conf
|
|
sed -i "s|VirtualHost owncloud.plate-software.de:80|VirtualHost *:80|g" /etc/apache2/sites-enabled/owncloud.plate-software.de.conf
|
|
sed -i "s|VirtualHost plate-software.de:443|VirtualHost *:443|g" /etc/apache2/sites-enabled/ssl.conf
|
|
systemctl reload apache2
|
|
```
|
|
|
|
⚠️ **Note:** `sites-enabled/collabora`, `owncloud`, and `ssl.conf` are plain files (not symlinks to `sites-available/`). If Apache is ever reconfigured via `a2ensite`, these edits will be lost — the `sites-available/` originals still have the correct `*:443` bindings.
|
|
|
|
---
|
|
|
|
## ⚠️ Other Pending Items
|
|
|
|
### Plex (superplex app)
|
|
- Shows CRASHED in TrueNAS app panel
|
|
- Likely due to old ChunkyTown dataset paths being gone
|
|
- Fix: TrueNAS web UI → Apps → superplex → Edit → update media library paths to new `/mnt/ChunkyTown/...` datasets
|
|
|
|
### Let's Encrypt for git.plate.software (VPS side)
|
|
- Currently no SSL cert for `git.plate.software` in Plesk
|
|
- Apache proxy works but is HTTP→HTTP (Plesk's SSL termination handles it)
|
|
- Issue cert: Plesk UI → Domains → git.plate.software → Let's Encrypt
|
|
|
|
---
|
|
|
|
## 🏗️ Infrastructure Overview
|
|
|
|
```
|
|
Internet
|
|
↓ DNS
|
|
plate.software VPS (85.214.154.199)
|
|
Apache/Plesk
|
|
├── plate.software → :8080 (Docker WildFly)
|
|
└── git.plate.software → :30008 (frp tunnel ← TrueNAS) ✅
|
|
frps :7000 ← frpc on TrueNAS ✅
|
|
|
|
TrueNAS.local (192.168.188.119)
|
|
├── Gitea :30008 (ROOT_URL = https://git.plate.software/) ✅
|
|
├── VM_SSD_Pool (ZFS RAIDZ2, ONLINE) — Gitea data lives here
|
|
└── ChunkyTown (ZFS RAIDZ1, ONLINE, 29.1TB) — rebuilt 2026-05-04
|
|
├── raidz1: sda + sdb + sdd + sdl (Seagate)
|
|
└── spare: sdk
|
|
|
|
IONOS (82.165.206.45)
|
|
Apache
|
|
├── owncloud.plate-software.de → :8080 ✅
|
|
├── collabora.plate-software.de → :9980 ✅
|
|
└── git.plate-software.de → :3000 (Gitea mirror Docker) ✅ FULLY WORKING (fixed 2026-06-11)
|
|
Docker: gitea-mirror, data: /opt/gitea/data
|
|
Token: 1e87f855d448727e9d213599d654542881bdca0f (in BigMind fact #192)
|
|
Repos: pplate/bigmind, pplate/cannamanage, pplate/pi_mcps (push mirrors from TrueNAS)
|
|
```
|
|
|
|
---
|
|
|
|
## 🗂️ Key File Locations
|
|
|
|
| File | Purpose |
|
|
|------|---------|
|
|
| `~/.ssh/id_ed25519_homelab` | Automation SSH key |
|
|
| `~/.ssh/config` | SSH aliases (vps, ionos, truenas) |
|
|
| `plans/frpc-truenas-deploy.sh` | frpc installer (already run on TrueNAS) |
|
|
| `plans/HOMELAB-HANDOVER.md` | This file |
|