# Red y Homelab - Consultoria-AS

## Resumen de Infraestructura

- **IP Publica**: 187.250.132.40 (dinamica)
- **ISP**: Infinitum (Telmex)
- **Modem/Gateway**: 192.168.10.254
- **Red principal**: 192.168.10.0/24
- **Reverse Proxy**: Caddy (en container Dockge, 192.168.10.74)
- **DNS**: Cloudflare (consultoria-as.com) + AWS Route 53 (horuxfin.com) + Hostinger (nexusautoparts.com.mx)
- **Monitoreo**: UptimeKuma (https://status.consultoria-as.com)

## Servidores Fisicos

### Servidor 1: TYAN (192.168.10.3)
| Caracteristica | Valor |
|---|---|
| **Nodo Proxmox** | Consultoria-AS |
| **PVE Version** | 8.4.14 |
| **CPU** | Intel Xeon Gold 5120 @ 2.20GHz (14c/28t) |
| **RAM** | 755 GB |
| **Disco root** | 64 GB |
| **Acceso** | https://192.168.10.3:8006 |

### Servidor 2: Dell T430 #1 Cisco1 (192.168.10.185)
| Caracteristica | Valor |
|---|---|
| **Nodo Proxmox** | Cisco1 |
| **PVE Version** | 8.4.14 |
| **CPU** | Intel Xeon E5-2609 v4 @ 1.70GHz (16c/16t, 2 sockets) |
| **RAM** | 755 GB |
| **Disco root** | 94 GB |
| **Acceso** | https://192.168.10.185:8006 |

### Servidor 3: Dell T430 #2 DellT430-2 (192.168.10.187)
| Caracteristica | Valor |
|---|---|
| **Nodo Proxmox** | DellT430-2 |
| **PVE Version** | 9.1.2 |
| **CPU** | Intel Xeon E5-2620 v4 @ 2.10GHz (8c/16t) |
| **RAM** | 126 GB |
| **Disco root** | 94 GB |
| **Acceso** | https://192.168.10.187:8006 |

### Servidor 4: Ryzen PC - AI Server (192.168.10.144)
| Caracteristica | Valor |
|---|---|
| **OS** | Ubuntu 24.04 (bare metal) |
| **CPU** | AMD Ryzen 7 7700X |
| **RAM** | 32 GB |
| **GPU** | NVIDIA RTX 3060 |
| **Servicio** | Ollama (LLM inference) |
| **Acceso SSH** | ssh consultoria-as@192.168.10.144 |

## VMs y Containers

### Servidor TYAN (192.168.10.3)

| VMID | Nombre | Tipo | IP Estatica | RAM | Funcion | URL Externa | Estado |
|---|---|---|---|---|---|---|---|
| 100 | OMV | VM | 192.168.10.75 | 8 GB | NAS/Nube (SMB) | `\\192.168.10.75\VAULT-OMV` | running |
| 102 | Dashy | LXC | 192.168.10.86 | 2 GB | Dashboard | - | running |
| 104 | Immich | LXC | 192.168.10.78 | 6 GB | Fotos | https://immich.consultoria-as.com | running |
| 105 | Hotel Hacienda | LXC | 192.168.10.167 | 16 GB | Gestion Hotel | https://hacienda.consultoria-as.com | running |
| 106 | Dockge | LXC | 192.168.10.74 | 40 GB | Multimedia/Docker/Caddy | http://192.168.10.74:5001 | running |
| 108 | n8n | LXC | 192.168.10.83 | 8 GB | Automatizacion | https://n8n.consultoria-as.com | running |
| 109 | Navidrome | LXC | 192.168.10.85 | 10 GB | Musica | https://navidrome.consultoria-as.com | running |
| 110 | UptimeKuma | LXC | 192.168.10.87 | 1 GB | Monitoreo | https://status.consultoria-as.com | running |
| 111 | Metabase | LXC | 192.168.10.170 | 20 GB | Analytics | https://metabase.consultoria-as.com | running |
| 112 | Gitea | LXC | 192.168.10.69 | 10 GB | Git | https://git.consultoria-as.com | running |
| **200** | **NexusManager** | **LXC** | **192.168.10.138 (DHCP)** | **32 GB** | **Nueva (Ubuntu 24.04)** | **-** | **running** |
| **201** | **VisasChinas** | **LXC** | **192.168.10.139 (DHCP)** | **8 GB** | **Nueva (Ubuntu 24.04)** | **-** | **running** |
| **202** | **VT210** | **LXC** | **192.168.10.140 (DHCP)** | **16 GB** | **Nueva (Ubuntu 24.04)** | **-** | **running** |

### Servidor Dell T430 #1 Cisco1 (192.168.10.185)

| VMID | Nombre | Tipo | IP | RAM | Funcion | URL | Estado |
|---|---|---|---|---|---|---|---|
| 100 | vm-nier | VM | 192.168.10.108 | 8 GB | NieR Reincarnation server | https://play.consultoria-as.com | stopped |
| 101 | OpenWebUI | LXC | 192.168.10.135 | 40 GB | Interfaz Web AI (Ollama) | http://192.168.10.135:8080 | running |
| 102 | CraneGOO | VM | 192.168.10.140 | 8 GB | Proyecto CraneGOO | http://192.168.10.140 | running |
| 103 | vm-dbo | VM | - | 8 GB | Base de datos | - | stopped |
| 105 | EstradaApp | VM | - | 16 GB | Proyecto Estrada | - | running |
| 106 | AfterlifeProject | VM | 192.168.10.84 | 41 GB | Proyecto Afterlife (Strapi+Next.js+MinIO) | https://afterlife.consultoria-as.com | running |
| 107 | SocialAutomationX | VM | - | 8 GB | Automatizacion social | - | running |
| 108 | GimTracker | VM | - | 8 GB | Gym tracker | - | running |

### Servidor Dell T430 #2 DellT430-2 (192.168.10.187)

| VMID | Nombre | Tipo | IP | RAM | Funcion | URL Externa | Estado |
|---|---|---|---|---|---|---|---|
| 100 | SKEEN.MX | VM | 192.168.10.100 | 16 GB | Proyecto SKEEN | - | running |
| 101 | CocinaConAlma (Tandoor) | VM | 192.168.10.156 | 8 GB | Recetas - Negocio comida | https://recetas.consultoria-as.com | running |
| 102 | Odoo | LXC | 192.168.10.81 | 16 GB | ERP | https://odoo.consultoria-as.com | running |
| 103 | NodeBB | LXC | 192.168.10.73 | 8 GB | Foro | https://foro.consultoria-as.com | running |
| 104 | Autopartes | VM | 192.168.10.91 | 50 GB | Sistema Autopartes | https://nexus.consultoria-as.com + nexusautoparts.com.mx | running |
| 105 | 3D (STL Manager) | VM | 192.168.10.104 | 8 GB | Gestor archivos 3D | https://3d.consultoria-as.com | running |
| 106 | CAS-PaginasWeb | VM | 192.168.10.92 | 8 GB | Paginas Web | cronicas/pagoda.consultoria-as.com | running |
| 107 | CrawlAI | VM | - | 16 GB | Crawler con IA | - | running |
| 108 | Horux | VM | 192.168.10.90 | 24 GB | Gestion Horux | https://horuxfin.com | running |
| 109 | VOIP | VM | - | 8 GB | Telefonia | - | stopped |
| 113 | MSP | VM | 192.168.10.97 | 20 GB | MeshCentral/MSP | https://mesh.consultoria-as.com | running |

### Servidores adicionales (no Proxmox)

| IP | Servicio | URL |
|---|---|---|
| 192.168.10.117 | Strada (refaccionaria) | https://strada.consultoria-as.com |
| 192.168.10.123 | wger (gym tracker) | https://gym.consultoria-as.com |
| 192.168.10.144 | Ollama (Ryzen PC) | - |

## Servicios Web y URLs

### Servicios con acceso externo (via Caddy reverse proxy)

| Servicio | URL Externa | IP:Puerto Interno | DNS | Estado |
|---|---|---|---|---|
| Jellyfin | https://jellyfin.consultoria-as.com | 127.0.0.1:8096 (Dockge) | Cloudflare | OK |
| Jellyseerr | https://mediarequest.consultoria-as.com | 127.0.0.1:5055 (Dockge) | Cloudflare | OK |
| Immich | https://immich.consultoria-as.com | 192.168.10.78:2283 | Cloudflare | OK |
| Odoo | https://odoo.consultoria-as.com | 192.168.10.81:8069 | Cloudflare | OK |
| n8n | https://n8n.consultoria-as.com | 192.168.10.83:5678 | Cloudflare | OK |
| Horux | https://horuxfin.com | 192.168.10.90:3000 | AWS Route 53 | OK |
| Hotel Hacienda | https://hacienda.consultoria-as.com | 192.168.10.167:5172 | Cloudflare | OK |
| API Hotel | https://api-hacienda.consultoria-as.com | 192.168.10.167:4000 | Cloudflare | OK |
| Metabase | https://metabase.consultoria-as.com | 192.168.10.170:3000 | Cloudflare | OK |
| Autopartes (Nexus) | https://nexus.consultoria-as.com | 192.168.10.91:5000 | Cloudflare | OK |
| Gitea | https://git.consultoria-as.com | 192.168.10.69:3000 | Cloudflare | OK |
| Navidrome | https://navidrome.consultoria-as.com | 192.168.10.85:4533 | Cloudflare | OK |
| NodeBB | https://foro.consultoria-as.com | 192.168.10.73:4567 | Cloudflare | OK |
| UptimeKuma | https://status.consultoria-as.com | 192.168.10.87:3001 | Cloudflare | OK |
| Cronicas | https://cronicas.consultoria-as.com | 192.168.10.92:3000 | Cloudflare | OK |
| Pagoda | https://pagoda.consultoria-as.com | 192.168.10.92:3001 | Cloudflare | OK |
| MeshCentral | https://mesh.consultoria-as.com | 192.168.10.97:4443 (HTTPS) | Cloudflare | OK |
| Recetas (Tandoor) | https://recetas.consultoria-as.com | 192.168.10.156:8080 | Cloudflare | OK |
| Afterlife | https://afterlife.consultoria-as.com | 192.168.10.84:3000 | Cloudflare | OK |
| Play (NieR) | https://play.consultoria-as.com | 192.168.10.108:443 (h2c) | Cloudflare | DOWN (vm-nier stopped) |
| 3D (STL) | https://3d.consultoria-as.com | 192.168.10.104:8000 | Cloudflare | OK |
| Gym (wger) | https://gym.consultoria-as.com | 192.168.10.123:80 | Cloudflare | OK |
| Strada (refaccionaria) | https://strada.consultoria-as.com | 192.168.10.117:80 | Cloudflare | OK |
| **NexusAutoparts (raiz)** | **https://nexusautoparts.com.mx** | **192.168.10.91:80** | **Hostinger** | **OK** |
| **NexusAutoparts WWW** | **https://www.nexusautoparts.com.mx** | **192.168.10.91:80** | **Hostinger** | **OK** |
| **NexusAutoparts Admin** | **https://admin.nexusautoparts.com.mx** | **192.168.10.91:80** | **Hostinger** | **OK** |
| **NexusAutoparts POS** | **https://pos.nexusautoparts.com.mx** | **192.168.10.91:80** | **Hostinger** | **OK** |

### Servicios solo acceso local

| Servicio | URL Local |
|---|---|
| OMV (NAS) | http://192.168.10.75 / `\\192.168.10.75\VAULT-OMV` |
| Dockge | http://192.168.10.74:5001 |
| qBittorrent | http://192.168.10.74:8080 |
| Sonarr | http://192.168.10.74:8989 |
| Radarr | http://192.168.10.74:7878 |
| Prowlarr | http://192.168.10.74:9696 |
| Bazarr | http://192.168.10.74:6767 |
| OpenWebUI | http://192.168.10.135:8080 |
| CraneGOO | http://192.168.10.140 |
| Ollama API | http://192.168.10.144:11434 |
| Afterlife CMS (Strapi) | http://192.168.10.84:1337 |
| Afterlife MinIO | http://192.168.10.84:9001 |
| Proxmox TYAN | https://192.168.10.3:8006 |
| Proxmox Dell185 | https://192.168.10.185:8006 |
| Proxmox Dell187 | https://192.168.10.187:8006 |

## VMs nuevas Ubuntu 24.04 (TYAN)

3 containers LXC nuevos creados para uso general:

| VM | IP | CPU | RAM | Disco | SSH |
|---|---|---|---|---|---|
| NexusManager (200) | 192.168.10.138 | 8 | 32 GB | 150 GB | ssh root@192.168.10.138 |
| VisasChinas (201) | 192.168.10.139 | 4 | 8 GB | 50 GB | ssh root@192.168.10.139 |
| VT210 (202) | 192.168.10.140 | 8 | 16 GB | 75 GB | ssh root@192.168.10.140 |

- Template: Ubuntu 24.04 standard LXC
- Storage: Multimedia (ZFS)
- Network: vmbr0 (DHCP)
- SSH habilitado: root con password Aasi940812
- features: nesting=1 (permite Docker)

**ATENCION**: VT210 (192.168.10.140) tiene conflicto de IP con CraneGOO (Cisco1 VM 102). Asignar IP estatica diferente cuanto antes.

## Red

### Topologia

`
Internet
  |
Modem ISP (192.168.10.254)
  |
Switch Cisco (administrable)
  |
  +-- Servidor TYAN (192.168.10.3)
  +-- Servidor Dell T430 #1 (192.168.10.185)
  +-- Servidor Dell T430 #2 (192.168.10.187)
  +-- Servidor Ryzen AI (192.168.10.144)
  +-- PCs de oficina
  +-- Otros dispositivos
`

### Port Forwarding (Modem)

| Puerto Externo | Destino | Puerto Interno | Servicio |
|---|---|---|---|
| 80 | 192.168.10.74 | 80 | Caddy (HTTP/ACME) |
| 443 | 192.168.10.74 | 443 | Caddy (HTTPS) |

### Reverse Proxy (Caddy)

- **Ubicacion**: Container Dockge (VMID 106, TYAN)
- **IP**: 192.168.10.74
- **Modo**: Docker container con --network host
- **SSL**: Automatico via Lets Encrypt
- **Config**: /opt/caddy/Caddyfile

### Asignacion de IPs

| IP | Dispositivo/Servicio |
|---|---|
| 192.168.10.3 | Proxmox TYAN |
| 192.168.10.69 | Gitea (LXC 112 TYAN) |
| 192.168.10.73 | NodeBB (LXC 103 DellT430-2) |
| 192.168.10.74 | Dockge/Caddy (LXC 106 TYAN) |
| 192.168.10.75 | OMV (VM 100 TYAN) |
| 192.168.10.78 | Immich (LXC 104 TYAN) |
| 192.168.10.81 | Odoo (LXC 102 DellT430-2) |
| 192.168.10.83 | n8n (LXC 108 TYAN) |
| 192.168.10.84 | AfterlifeProject (VM 106 Cisco1) |
| 192.168.10.85 | Navidrome (LXC 109 TYAN) |
| 192.168.10.86 | Dashy (LXC 102 TYAN) |
| 192.168.10.87 | UptimeKuma (LXC 110 TYAN) |
| 192.168.10.90 | Horux (VM 108 DellT430-2) |
| 192.168.10.91 | Autopartes (VM 104 DellT430-2) |
| 192.168.10.92 | CAS-PaginasWeb (VM 106 DellT430-2) |
| 192.168.10.97 | MSP/MeshCentral (VM 113 DellT430-2) |
| 192.168.10.100 | SKEEN.MX (VM 100 DellT430-2) |
| 192.168.10.104 | 3D / STL Manager (VM 105 DellT430-2) |
| 192.168.10.108 | vm-nier (NieR server, VM 100 Cisco1) |
| 192.168.10.117 | Strada (refaccionaria) |
| 192.168.10.123 | wger (gym tracker) |
| 192.168.10.135 | OpenWebUI (LXC 101 Cisco1) |
| 192.168.10.138 | NexusManager (LXC 200 TYAN) |
| 192.168.10.139 | VisasChinas (LXC 201 TYAN) |
| 192.168.10.140 | CraneGOO (Cisco1) Y VT210 (TYAN) - **CONFLICTO** |
| 192.168.10.144 | Ryzen PC / Ollama (bare metal) |
| 192.168.10.156 | CocinaConAlma/Tandoor (VM 101 DellT430-2) |
| 192.168.10.167 | Hotel Hacienda (LXC 105 TYAN) |
| 192.168.10.170 | Metabase (LXC 111 TYAN) |
| 192.168.10.185 | Proxmox Dell T430 #1 |
| 192.168.10.187 | Proxmox Dell T430 #2 |
| 192.168.10.254 | Modem ISP |

## Servicios Multimedia (Container Dockge - 192.168.10.74)

| Servicio | Puerto | Funcion |
|---|---|---|
| Jellyfin | 8096 | Streaming video |
| Jellyseerr | 5055 | Peticiones multimedia |
| Sonarr | 8989 | Gestion de series |
| Radarr | 7878 | Gestion de peliculas |
| Prowlarr | 9696 | Indexadores |
| Bazarr | 6767 | Subtitulos |
| qBittorrent | 8080 | Descargas |
| Dockge | 5001 | Gestion Docker |
| Caddy | 80/443 | Reverse Proxy |

## Stack de AI

| Componente | Ubicacion | IP | Funcion |
|---|---|---|---|
| Ollama | Ryzen PC (bare metal) | 192.168.10.144:11434 | LLM inference con GPU RTX 3060 |
| OpenWebUI | Cisco1 (LXC 101) | 192.168.10.135:8080 | Interfaz web para chat AI |
| Modelo actual | - | - | qwen3.5:9b (Q4_K_M, 6.6 GB) |

## Project Afterlife (192.168.10.84)

Plataforma de preservacion de videojuegos con arquitectura multi-VM.

| Componente | Puerto | URL |
|---|---|---|
| Web (Next.js) | 3000 | https://afterlife.consultoria-as.com |
| CMS (Strapi) | 1337 | http://192.168.10.84:1337 (local) |
| MinIO Console | 9001 | http://192.168.10.84:9001 (local) |

## NieR Reincarnation Server (192.168.10.108)

| Componente | Puerto | URL |
|---|---|---|
| Assets HTTP | 80 | https://play.consultoria-as.com |
| gRPC h2c | 443 | https://play.consultoria-as.com |

## Pendientes

- [ ] Asignar IP estatica a VT210 (conflicto con CraneGOO en 192.168.10.140)
- [ ] Acceder al switch Cisco para configurar VLANs
- [ ] Reparar/reemplazar NIC re1 del firewall OPNsense
- [ ] Configurar DDNS o Cloudflare Proxy para IP dinamica (cambio frecuente)
- [ ] Configurar alta disponibilidad (failover multi-sitio)
- [ ] Iniciar vm-nier (VM 100 Cisco1) para que play.consultoria-as.com responda
- [ ] Configurar IP estatica en EstradaApp, SocialAutomationX, GimTracker, CrawlAI
- [ ] Configurar Hostinger DNS sin Cloudflare CDN para evitar conflictos

## Notas importantes

- El firewall OPNsense esta desactivado temporalmente por fallo en NIC re1
- El modem ISP actua como gateway directo (192.168.10.254)
- La IP publica es dinamica - actualmente 187.250.132.40 (cambia frecuentemente)
- Actualizar DNS cada vez que cambie la IP publica
- Todas las VMs/containers criticos tienen IP estatica
- Importante: el dominio consultoria-as.com expiro previamente y se renovo
- Nameservers de Cloudflare: christina.ns.cloudflare.com, aiden.ns.cloudflare.com
- Dominio nexusautoparts.com.mx esta en Hostinger (no Cloudflare)

## Servicios Hotel Hacienda (requieren inicio manual tras reboot)

`ash
pct enter 105
cd /home/HotelEntregaNoTocar/backend/hotel_hacienda
nohup node server.js > /tmp/hotel-backend.log 2>&1 &
disown
cd /home/HotelEntregaNoTocar/frontend/Frontend-Hotel
nohup npx vite --host > /tmp/hotel-frontend.log 2>&1 &
disown
exit
`

## Cambios recientes

### 17 mayo 2026
- IP publica cambio: 201.142.180.120 -> 187.250.132.40
- DNS actualizados en Cloudflare para nueva IP
- Agregado: Strada (https://strada.consultoria-as.com) - 192.168.10.117 (refaccionaria)
- Agregado: NexusAutoparts dominios (.com.mx, www, admin, pos) en Hostinger
- Creadas 3 nuevas LXC Ubuntu 24.04 en TYAN:
  - NexusManager (200) - 192.168.10.138 - 8 CPU/32 GB/150 GB
  - VisasChinas (201) - 192.168.10.139 - 4 CPU/8 GB/50 GB
  - VT210 (202) - 192.168.10.140 - 8 CPU/16 GB/75 GB
- Repo Git agregado: HoruxDespachosNuevo
- SSH habilitado en VMs nuevas (root/Aasi940812)
- CONFLICTO PENDIENTE: VT210 y CraneGOO usan 192.168.10.140

### 5 mayo 2026
- IP publica cambio: 201.142.187.207 -> 187.250.132.40
- Eliminado registro AAAA de Hostinger que causaba conflicto IPv6
- DNS Cloudflare verificados y sincronizados

### 28 abril 2026
- Agregado: Project Afterlife (https://afterlife.consultoria-as.com) - 192.168.10.84
- Agregado: NieR Server play.consultoria-as.com - 192.168.10.108 (h2c)
- Agregado: STL/3D Manager (https://3d.consultoria-as.com) - 192.168.10.104
- Agregado: wger Gym (https://gym.consultoria-as.com) - 192.168.10.123
- Nuevas VMs Cisco1: EstradaApp (105), SocialAutomationX (107), GimTracker (108)
- Nuevas VMs DellT430-2: 3D (105), CrawlAI (107)
- Renovado dominio consultoria-as.com (habia expirado)

### 24-25 abril 2026
- Corte de luz causo reinicio completo de infraestructura
- IP estatica configurada en TODOS los containers/VMs criticos
- Hotel cambio de 192.168.10.67 a 192.168.10.167
- Metabase cambio de 192.168.10.70 a 192.168.10.170
- OpenWebUI, SKEEN.MX, NodeBB, Odoo asignados IPs estaticas

---
*Documentacion actualizada el 17 de Mayo de 2026*
*Consultoria-AS*