feat: initial commit with AGENTS, network topology, and mini-pc handoff

2026-05-19 11:50:59 +00:00
parent aec9fc3903
commit 8bf362ffbb
4 changed files with 278 additions and 1 deletions
@@ -0,0 +1,71 @@
+# Network Topology — dzonicasa.xyz
+
+## Machines
+
+| Name | Device | LAN IP | WireGuard IP | Location |
+|------|--------|--------|-------------|----------|
+| home-core-dev | Mini PC | 192.168.0.240 | 10.8.0.6 | Home |
+| lenovo | Laptop | DHCP | 10.8.0.3 | Mobile |
+| vpn-server | Oracle VPS | 10.0.0.197 | 10.8.0.1 | Cloud |
+
+## VPNs
+
+### 1. Wolkabout Office VPN
+- **Endpoint**: `79.101.44.157:51820`
+- **Config on lenovo**: `/etc/wireguard/njovanovic.conf` (and duplicate `njovanovic.conf.conf`)
+- **Lenovo IP**: `10.8.0.3/24`
+- **DNS**: `10.0.50.15`
+- **PrivateKey**: `yFNg+e6esP1K5PofLKNZQqFJ1+InjC9DpXhFldECm1o=`
+- **Peer PublicKey**: `HsupulTLfUrQXUNSu2NMpM9RsUja5drl73a9bvZz31s=`
+- **PSK**: `s3zCeMxAr44V/QDiyf4opHgcwtZfoDojL/JvJ/b5s0Q=`
+- **AllowedIPs**: `0.0.0.0/0` (full tunnel)
+
+### 2. Oracle VPS Personal VPN (wg-easy)
+- **Endpoint**: `130.162.209.80:51820`
+- **Web UI**: `http://localhost:51821` (SSH tunnel, password `WZaadgj6`)
+- **Subnet**: `10.8.0.0/24`
+
+#### Peers on Oracle VPS:
+| Name | WG IP | Public Key |
+|------|-------|-----------|
+| dzoni-mob (OLD) | 10.8.0.2 | `T+2YH4hS970lyRsCmxybHzEaCszWZPIyoU31uRXgO2M=` |
+| dzoni-lenovo | 10.8.0.3 | `bP3tvdeAEHqZnVXBKd7qqe9S9PhI3nMX7DhNQ200sj8=` |
+| mini-pc (CURRENT) | 10.8.0.6 | `xekIYyq18hcW9vP3LoRbMG/w0q4UcxX1c0cK96NJFQA=` |
+
+#### Mini PC WireGuard Config (`/etc/wireguard/wg0.conf`):
+```ini
+[Interface]
+PrivateKey = 8F/FUxwzSRAo8TS49YIRRpEnktQ9dNWlrg4JXFiFvnI=
+Address = 10.8.0.6/24
+
+[Peer]
+PublicKey = d5Vvb77K6aI0IvcpzBfRBWwCk6ou6BNh710y0spylyE=
+PresharedKey = sNicM+F7kR+uRMWy2ZREhS/clOco5lSV+xQSnz+wUP0=
+Endpoint = 130.162.209.80:51820
+AllowedIPs = 10.8.0.0/24
+PersistentKeepalive = 25
+```
+
+## Routing Flow
+```
+Office → Wolkabout VPN (79.101.44.157) → Oracle VPS (130.162.209.80) → nginx → WireGuard → Mini PC (192.168.0.240)
+```
+
+## Services (via nginx on Oracle VPS)
+
+| Service | URL | Backend |
+|---------|-----|---------|
+| Home Assistant | `https://ha.dzonicasa.xyz` | `192.168.0.240:8123` |
+| Pi-hole | `https://pihole.dzonicasa.xyz` | `192.168.0.240:8180` |
+| Docs Portal | `https://docs.dzonicasa.xyz` | Static + Authelia |
+| Authelia SSO | `https://docs.dzonicasa.xyz/authelia/` | `authelia:9091` |
+
+## Oracle VPS SSH Access
+```
+ssh -i ~/.ssh/ssh-key-2024-10-17.key ubuntu@130.162.209.80
+```
+
+## Mini PC SSH Access
+```
+ssh devops@192.168.0.240
+```