diff --git a/SCRATCH/hardcoded-ips-api.md b/SCRATCH/hardcoded-ips-api.md
new file mode 100644
index 0000000..eb6cfcd
--- /dev/null
+++ b/SCRATCH/hardcoded-ips-api.md
@@ -0,0 +1,40 @@
+# Hardcoded IPs in zpac-api — Need to Move to ENV
+
+## CORE_LAN Services
+| File | IP | What it is | ENV var to use |
+|------|----|------------|----------------|
+| src/app.js:61 | 10.60.0.66:3000 | Portal URL | PORTAL_URL |
+| src/app.js:64 | 10.60.0.245:4000 | API self-reference | API_URL |
+| src/services/technitiumClient.js:22 | 10.60.0.253:5380 | Technitium DNS API | TECHNITIUM_URL |
+| src/services/devIdePublisher.js:3 | 10.60.0.245:4000 | API self-reference | API_URL |
+| src/utils/catalog.js:3 | 10.60.0.251:8080 | zlh-artifacts file server | ARTIFACTS_URL |
+| src/services/edgePublisher.js:60 | 10.60.0.242 | Edge/proxy IP | CORE_PROXY_IP |
+
+## ZPACK_LAN Services
+| File | IP | What it is | ENV var to use |
+|------|----|------------|----------------|
+| src/services/velocityClient.js:10 | 10.70.0.241:8081 | Velocity management API | VELOCITY_URL |
+| src/services/proxyClient.js:12 | 10.70.0.242 | Zpack proxy IP | ZPACK_PROXY_IP |
+| src/services/edgePublisher.js:52 | 10.70.0.241 | Velocity IP | VELOCITY_IP |
+
+## Public IP
+| File | IP | What it is | ENV var to use |
+|------|----|------------|----------------|
+| src/services/edgePublisher.js:72 | 139.64.165.248 | Old Denver public IP | PUBLIC_IP |
+
+## Localhost (fine as-is)
+| File | Value | Notes |
+|------|-------|-------|
+| src/routes/devProxy.js:23 | 127.0.0.1:${IDE_PORT} | Dynamic port, fine |
+| src/utils/redis.js:8 | redis://127.0.0.1:6379 | Redis is local to VM, fine |
+| src/queues/postProvision.js:15 | redis://127.0.0.1:6379 | Redis is local to VM, fine |
+
+## New IPs to Determine
+- Portal (zpac-portal 9021) — TBD after DHCP lock
+- API self (zpac-api 9020) — TBD after DHCP lock
+- Technitium (zlh-dns 9010) — same as old, 10.60.0.253
+- Artifacts (zlh-artifacts 9014) — TBD after DHCP lock
+- Velocity (zlh-velocity 9015) — TBD after DHCP lock
+- Zpack proxy (zlh-zpack-proxy 9012) — TBD after DHCP lock
+- Core proxy (zlh-proxy 9011) — TBD after DHCP lock
+- New Detroit public IP — confirm from GTHost panel