# ExpertFab – Zugangsdaten & Verbindungen

> **SSH-Key:** `~/.ssh/hetzner_key` (für alle Server)

---

## Cloudflare

| Parameter   | Wert                                                 |
|-------------|------------------------------------------------------|
| API Token   | `euknQxray528vidJ2beVxYZ4auN4gbQxHvxpJ5iz`          |
| Zone ID     | `c587e1538c5121b4985938551b96dc9c` (expertfab.de)    |
| Berechtigungen | DNS:Edit für Zone expertfab.de                    |

---

## Proxmox

| Zugang         | Wert                                      |
|----------------|-------------------------------------------|
| Web-UI         | https://95.156.232.42:8006                |
| SSH (Node 1)   | `ssh -i ~/.ssh/hetzner_key root@10.42.70.1` |
| SSH (Node 2)   | `ssh -i ~/.ssh/hetzner_key root@10.42.70.2` |
| Benutzer       | `root`                                    |

---

## K3s Cluster

| Zugang              | Wert                                                   |
|---------------------|--------------------------------------------------------|
| SSH Control Plane   | `ssh -i ~/.ssh/hetzner_key sd@10.42.71.50`             |
| kubectl (am Node)   | `sudo KUBECONFIG=/etc/rancher/k3s/k3s.yaml kubectl …`  |
| kubectl via Proxmox | `ssh root@10.42.70.1 "qm guest exec 119 -- bash -c 'KUBECONFIG=/etc/rancher/k3s/k3s.yaml kubectl …'"` |

**K3s Version:** v1.34.6+k3s1  
**Container Runtime:** containerd 2.2.2  
**OS:** Ubuntu 24.04.4 LTS

### Nodes

| Node          | IP           | Rolle          |
|---------------|--------------|----------------|
| efsckubadm    | 10.42.71.50  | control-plane  |
| efsckubnode1  | 10.42.71.51  | worker         |
| efsckubnode2  | 10.42.71.52  | worker         |

> Proxmox-VM `efsckubctl` = K3s-Node `efsckubadm`

---

## Paperless-NGX

| Zugang      | Wert                                         |
|-------------|----------------------------------------------|
| URL         | https://docs.expertfab.de                   |
| API Token   | `3960b56c7c56d21af06af7d32e49613d8e7f78c8`  |
| API Header  | `Authorization: Token <token>`               |

---

## Documenso (Document Signing)

| Zugang             | Wert                                  |
|--------------------|---------------------------------------|
| URL                | https://signing.expertfab.de          |
| Namespace          | `documenso`                           |
| Image              | docker.io/documenso/documenso:latest  |
| Database           | Eigene Postgres im Namespace          |
| StorageClass       | `longhorn-documenso` (Retain)         |
| Signing-Zertifikat | Self-signed P12, passphrase `documenso`, gültig 10 Jahre |
| SMTP               | smtprelay.expertfab.de:587 / it-admin@expertfab.de |
| Auth               | Documenso-eigene Auth (kein Zitadel SSO) |

---

## Joplin (Notes Server)

| Zugang        | Wert                                  |
|---------------|---------------------------------------|
| URL           | https://note.expertfab.de             |
| Namespace     | `joplin`                              |
| Image         | docker.io/joplin/server:latest        |
| Database      | Eigene Postgres im Namespace          |
| StorageClass  | `longhorn-joplin` (Retain)            |
| SMTP          | smtprelay.expertfab.de:587 / it-admin@expertfab.de |
| Auth          | Joplin-eigene Auth (kein Zitadel SSO) |

---

## ERPNext

| Zugang       | Wert                                                              |
|--------------|-------------------------------------------------------------------|
| URL          | https://expertfab.de / https://www.expertfab.de                  |
| Helm Chart   | frappe/erpnext 8.0.14 (ERPNext v15)                               |
| Namespace    | `erpnext`                                                         |
| Auth Token   | Airflow Variable: `ErpnextAuthToken`                              |
| Base URL     | Airflow Variable: `ErpnextBaseurl`                                |
| Docker Image | git.expertfab.de/expertfab/customdocker:1.0.2                     |
| Image Pull   | Secret `gitea-registry` im Namespace `erpnext`                   |

---

## Gitea

| Zugang | Wert                        |
|--------|-----------------------------|
| URL    | https://git.expertfab.de    |
| VM     | efgit01 (Proxmox n01 / 110) |

---

## SMTP (Accounting)

| Parameter | Airflow Variable          |
|-----------|---------------------------|
| Server    | `smtpAccountingServer`    |
| Port      | `smtpAccountingPort`      |
| User      | `smtpAccountingUser`      |
| Password  | `smtpAccountingPassword`  |
| Sender    | `smtpAccountingSenderName`|

---

## Öffentlich erreichbare Dienste

| Dienst       | URL                          | Namespace    |
|--------------|------------------------------|--------------|
| ERPNext      | https://expertfab.de         | erpnext      |
| ERPNext      | https://www.expertfab.de     | erpnext      |
| Paperless    | https://docs.expertfab.de    | paperless    |
| Zitadel SSO  | https://auth.expertfab.de    | zitadel      |
| Documenso    | https://signing.expertfab.de | documenso    |
| Joplin       | https://note.expertfab.de    | joplin       |
| FastAPI      | https://api.expertfab.de     | rabbitmq     |
| Coworkbase   | https://coworkbase.de        | coworkbase   |
| Qubicticker  | https://qubicticker.qchief.io| qubicticker  |
| Gitea        | https://git.expertfab.de     | –            |