| Property | Value |
|---|---|
| Role | Active — primary site for media library, family photos, internal LAN services, and most homelab VMs. |
| Hypervisor | Single Proxmox VE 8.4 host (VE-IO-01). 11 VMs running. No second physical hypervisor by design. |
| Router | pfSense Home (10.100.100.1) — VM 101 on VE-IO-01. |
| Primary LAN | 10.10.100.0/24 (HOME VLAN 100, daily-use devices) + 10.100.100.0/24 (SERVER VLAN 1000, Proxmox VMs) |
| NAS | Two NAS at home: SV-IO-02 (DS918+ @ 10.100.100.200) — primary media + Immich + PBS image repo; SV-IO-01 (@ 10.100.100.210) — secondary, role TBD. |
| Internet | Residential WAN, dynamic IPv4. |
lancachenet/monolithic Docker image which wraps an nginx that intercepts HTTPS CDN domains, caches responses on local disk, and serves repeat downloads from cache. Holds the largest single-VM disk allocation on VE-IO-01 (1.8 TiB). Currently NOT in active use (user confirmed 2026-04-29): the LAN DNS resolvers are 10.100.0.10 / 1.1.1.1 / 8.8.8.8 with no redirection of CDN hostnames to 10.100.100.161, so no client traffic is reaching the cache. The 797 GB on disk is leftover from a previous setup ~16 months ago. Decision (2026-04-29): keep the service installed but empty the cache to reclaim disk (P-09).gitlab-runner (registered as runner ID 6, name VM-SL-41, executor docker, privileged) against https://git.blackreset.com, plus the portainer_agent (port 9001/tcp) connected into the Portainer EE on VM-SL-12. No public ingress — LAN-only. Idle workload (load avg 0.01) most of the time, spikes during CI runs.postgres:17.2 exposed on 10.100.100.162:5432 (LAN), the pgAdmin 4 web UI on :8080, and a Portainer agent on :9001 managed by Portainer EE on VM-SL-12. Backing store for the outline database (consumed by the Outline wiki app, frontend VM TBD — P-08) and a currently-empty home default DB. Postgres data lives on the Thunderbolt-attached 512 GB pool mounted at /mnt/data.PI-IO-01 Brother Color, PI-IO-03 Brother Generic Jpeg) discovered via WSD, plus the Santak Winpower 6.2 UPS-monitor service watching a USB-attached HID UPS battery. Installation date 2022-12-03 — originally provisioned on ESXi (VMware Tools still installed as a relic), migrated to Proxmox 2024-11 (Virtio drivers + QEMU-GA + SPICE/QXL added). Member server of AD domain xio.bio (forest root, single-domain), DC = VM-DC-01.xio.bio at 10.100.0.10 (RZ side via VPN).VM-DC-01 @ 10.100.0.10 at RZ, ESXi). VM-DC-02 was retired — internal AD/DNS for xio.bio is therefore a single point of failure dependent on the site-to-site VPN to RZ.SV-IO-02 primary + SV-IO-01 secondary). Off-site Lager NAS is the slow third copy.| VM | Rolle | IP | Status |
|---|---|---|---|
| VM-HM-EDGE-01 | Traefik public ingress (CrowdSec entfernt 2026-05-05) | 10.150.100.101 | LIVE |
| VM-HM-SVC-PROD-01 | UptimeKuma + Homepage + CUPS + UniFi | 10.100.100.102 | LIVE |
| VM-HM-SVC-PROD-02 | Plex/Tdarr/Immich/jDownloader Migration-Target (media-mapped) | 10.100.100.103 | Baseline LIVE — Stacks pending NAS-NFS-Whitelist |
| VM-HM-APP-PROD-01 | IP-Updater + GitLab-Runner heavy | 10.100.100.104 | LIVE |
| VM-HM-APP-STAGE-01 | (geplant) Stage + Builds | 10.100.100.105 | not provisioned |
| VM-HM-DB-01 | Postgres 17.6 + MariaDB 11.8 | 10.100.100.111 | LIVE |
| VM-HM-BACKUP-01 | Databasement (DB-Dump-Orchestration). PBS-Server-Pakete am 2026-05-05 purged. | 10.100.100.130 | LIVE |
| VM-HM-GAME-01 | Game-Server-Konsolidierung (Pterodactyl/Pelican + MC + Rust + Satisfactory). Baseline live, Game-Migration pending SL-09-SSH. | 10.100.100.151 | Baseline LIVE |
| VM-HM-DC-01 | AD DC (xio.bio) — Migration RZ→HM auf 10.100.100.10 | 10.100.100.10 (target) | DOWN, Proxmox-Import blockt auf ESXi-Snapshot-Reference |
Decom: vm-sw-03 (2026-05-02, ersetzt durch CUPS auf vm-hm-svc-prod-01); vm-sl-21 (2026-05-02, ersetzt durch Traefik auf vm-hm-edge-01).
Pending decom (Karenz nach Cutover): vm-sl-22 (Plex/Tdarr/Immich/jD/Tautulli laufen weiter bis Migration auf vm-hm-svc-prod-02 verifiziert).
version.crowdsec.net über container-DNS 8.8.8.8 unerreichbar) — Bouncer-Plugin in Traefik raus, edge-crowdsec-Container gestoppt+entfernt. Decom-Begründung: "hat bis jetzt nur Probleme gemacht" (Alex 2026-05-05).tools/ansible/playbooks/stabilize.yml auf alle 11 docker_hosts (HM+RZ) ausgerollt:
/etc/docker/daemon.json: dns: [10.100.100.10, 1.1.1.1, 8.8.8.8] (DC primary + public fallback), log-rotation 20m/5files, live-restore: true./opt/*/: restart: unless-stopped → restart: always (Exit-Code 128 nach VM-Reboots wurde sonst nicht recovered).proxmox-backup-{server,client,docs} purged + pbs.list apt-source raus). LVM-Volume vg-pbs/lv-data bleibt für Databasement-Backups bestehen, /etc/issue zurück auf plain Debian.