zlh-grind/INFRASTRUCTURE.md

89 lines
3.2 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# ZeroLagHub Infrastructure
## Dedicated Server — GTHost Detroit (Active)
**Hardware:** Supermicro 2029TP-HTR
**CPU:** Intel Xeon Gold 6152 — 22 cores / 44 threads, 2.13.7GHz
**RAM:** 192GB DDR4
**Storage:** 2x 1.92TB SSD
**Network:** Unmetered bandwidth
**OS:** Proxmox VE 9.x
**Provider:** GTHost Detroit
**Cost:** $99/month
**Public IP:** 66.163.115.224 (Proxmox mgmt), additional IPs for OPNsense WAN
**IPMI:** Available via GTHost panel for out-of-band access
---
## Network Bridges (Proxmox)
| Bridge | Purpose | Notes |
|--------|---------|-------|
| vmbr0 | WAN / Proxmox mgmt | ens6f0, 66.163.115.224/24 |
| vmbr1 | CORE_LAN | 10.60.0.0/24 |
| vmbr2 | DEV_LAN | |
| vmbr3 | GAME_LAN | |
| vmbr4 | VPN_LAN | |
| vmbr5 | MGMT_LAN | 172.60.0.0/24 — Proxmox host at 172.60.0.6 |
| vmbr6 | ZPACK_LAN | 10.70.0.0/24 |
---
## VM / LXC Inventory
### Core Infrastructure (9000s)
| ID | Name | Type | IP | WAN / MGMT | Role |
|----|------|------|----|------------|------|
| 9001 | zlh-router | VM | — | 66.163.115.221 | OPNsense 26.1 — core router, DHCP, firewall |
| 9002 | zpack-router | VM | — | 66.163.115.115 | OPNsense 26.1 — game/dev router |
| 9010 | zpack-dns | LXC | 10.60.0.14 | — | Technitium DNS |
| 9011 | zlh-proxy | LXC | 10.60.0.16 | — | Caddy — core reverse proxy |
| 9012 | zpack-proxy | LXC | 10.70.0.11 | — | Traefik v3 — game/dev edge, wildcard TLS |
| 9013 | zlh-connect | LXC | — | — | Twingate connector — admin remote access |
| 9014 | zlh-artifacts | LXC | 10.60.0.17 | — | Caddy file server — runtimes, jars, agent binaries |
| 9015 | zpack-velocity | LXC | 10.70.0.10 | — | Velocity 3.5 — Minecraft proxy |
| 9016 | zlh-monitor | LXC | 10.60.0.25 | — | Prometheus + Grafana |
| 9017 | zlh-back | VM | 10.60.0.24 | 172.60.0.30 | Proxmox Backup Server |
| 9020 | zpack-api | VM | 10.60.0.18 | — | Node.js API, MariaDB, Redis |
| 9021 | zpack-portal | VM | 10.60.0.19 | — | Next.js portal |
| 9030 | aimeesites | LXC | — | — | Static site hosting |
### Templates
| ID | Name | Notes |
|----|------|-------|
| 820 | zlh-base | Base LXC template for game/dev container provisioning |
### ID Ranges
| Range | Purpose |
|-------|---------|
| 9000s | Core infrastructure |
| 5000+ | Game server containers (provisioned by platform) |
| 6000+ | Dev containers (provisioned by platform) |
---
## DNS / Service Discovery Notes
- `internal.zlh` is **not currently used** for active hot-path service discovery.
- Prefer explicit env-configured IPs / addresses in runtime-critical paths.
- DNS records may still exist historically or for reference, but should not be treated as the current source of truth for service routing.
---
## Backup Strategy
- **PBS (zlh-back 9017)** — primary backup for all VMs/LXCs on new host
- **Backblaze B2 (zpack-migration bucket)** — offsite copy of critical data and old host backups
- Old Denver host decommissioned Apr 2, 2026 — OS wiped, disks striped
---
## Decommissioned
| Server | Specs | Dates | Notes |
|--------|-------|-------|-------|
| GTHost Denver | Silver 4116 12c/24t, 192GB, 2x1.92TB SSD, $103/mo | Until Apr 2, 2026 | Migrated to Detroit. OS wiped Apr 2, 2026. |