sascha.dodenhoeft/expertfab-infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initial commit: Infrastructure documentation

Browse Source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Sascha Dodenhöft
2026-05-03 13:46:47 +02:00
commit bbe86c55d9
9 changed files with 568 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

66
docs/infrastructure.md Normal file
View File

@@ -0,0 +1,66 @@
# ExpertFab – VM-Inventar
## Proxmox Cluster
| Hostname | URL / IP | Rolle |
|--------------------|-----------------------------------|-----------------------------|
| efproxcl02 | https://95.156.232.42:8006 | Proxmox Web-UI (Cluster) |
| efproxcl02n01 | 10.42.70.1 | Proxmox Host Node 1 |
| efproxcl02n02 | 10.42.70.2 | Proxmox Host Node 2 |
**Specs je Node:** 64 vCPU / 128 GB RAM
**DNS:** efproxcl02n01.sc.expertfab.de / efproxcl02n02.sc.expertfab.de
---
## VMs – efproxcl02n01
| VM-ID | Name | Status | CPU | RAM | IP | Rolle |
|-------|-----------------|---------|--------|-------|-----------------|------------------------------|
| 100 | efscfw01 | stopped | – | 16 GB | – | OPNsense Backup (inaktiv) |
| 101 | efsmtprelay | running | 4 vCPU | 16 GB | 109.230.227.36 | SMTP Relay |
| 102 | efscweb01 | stopped | – | 16 GB | – | Webserver (inaktiv) |
| 105 | efcacert | running | – | 4 GB | – | CA / Zertifikatsserver |
| 110 | efgit01 | running | – | 8 GB | – | Gitea (git.expertfab.de) |
| 111 | eftrade01 | running | 16vCPU | 16 GB | 10.42.71.102 | Trading-VM |
| 112 | efbtcpay | stopped | – | 8 GB | – | BTCPay Server (inaktiv) |
| 114 | efubutemp | stopped | – | 4 GB | – | Ubuntu Template |
| 115 | efxmr01 | stopped | – | 16 GB | – | Monero Node (inaktiv) |
| 116 | efscbank | stopped | – | 4 GB | – | Bank-VM (inaktiv) |
| 117 | efmatrix01 | running | – | 4 GB | – | Matrix Chat Server |
| 118 | efubu24lts* | – | – | 4 GB | – | Template (Ubuntu 24.04 LTS) |
| 119 | efsckubctl | running | 4 vCPU | 8 GB | 10.42.71.50 | K3s Control Plane |
| 121 | efsckubnode02 | running | 4 vCPU | 8 GB | 10.42.71.52 | K3s Worker Node 2 |
| 150 | efscfw01 | running | 8 vCPU | 16 GB | 109.230.227.38 | OPNsense Firewall (aktiv) |
*Template
## VMs – efproxcl02n02
| VM-ID | Name | Status | CPU | RAM | IP | Rolle |
|-------|-----------------|---------|---------|-------|-----------------|------------------------------|
| 103 | efscdc01 | running | 8 vCPU | 32 GB | 10.42.71.15 | Domain Controller (Windows) |
| 104 | efscveeam01 | running | 16 vCPU | 16 GB | 10.42.71.16 | Veeam Backup Server |
| 106 | efscprint01 | running | – | 8 GB | – | Printserver |
| 107 | eferp01 | stopped | – | 4 GB | – | Alt-ERP (inaktiv) |
| 108 | efscairflow01 | running | – | 8 GB | – | Apache Airflow |
| 109 | efscmoni01 | running | – | 4 GB | – | Monitoring |
| 113 | efbookstack01 | running | – | 8 GB | – | BookStack Wiki |
| 120 | efsckubnode1 | running | 4 vCPU | 8 GB | 10.42.71.51 | K3s Worker Node 1 |
| 122 | efscNffsBackup | running | – | – | – | NFS Backup |
---
## Netzwerk
| Netz | Bereich | Verwendung |
|--------------|-----------------|-----------------------------------|
| Public | 109.230.227.x | Öffentliche IPs (Hetzner) |
| Intern | 10.42.70.x | Proxmox Hosts / Management |
| Intern | 10.42.71.x | VMs / Server |
| K3s Pod-CIDR | 172.16.0.0/16 | Kubernetes Pod-Netzwerk (Flannel) |
| K3s SVC-CIDR | 10.43.0.0/16 | Kubernetes Services |
**Traefik LoadBalancer IP:** 10.42.71.60
**OPNsense** löst `www.expertfab.de` → `10.42.71.60` (intern), `expertfab.de` → öffentliche IP
→ Wichtig: `host_name` in ERPNext muss `https://www.expertfab.de` sein (Hairpin-NAT-Fix)