# Red y Homelab - Consultoria-AS

## Resumen de Infraestructura

- **IP Publica**: 201.142.180.120 (dinamica)
- **ISP**: Infinitum (Telmex)
- **Modem/Gateway**: 192.168.10.254
- **Red principal**: 192.168.10.0/24
- **Reverse Proxy**: Caddy (en container Dockge, 192.168.10.74)
- **DNS**: Cloudflare (consultoria-as.com) + AWS Route 53 (horuxfin.com)
- **Monitoreo**: UptimeKuma (https://status.consultoria-as.com)

## Servidores Fisicos

### Servidor 1: TYAN (192.168.10.3)
| Caracteristica | Valor |
|---|---|
| **Nodo Proxmox** | Consultoria-AS |
| **PVE Version** | 8.4.14 |
| **CPU** | Intel Xeon Gold 5120 @ 2.20GHz (14c/28t) |
| **RAM** | 755 GB |
| **Disco root** | 64 GB |
| **Acceso** | https://192.168.10.3:8006 |

### Servidor 2: Dell T430 #1 Cisco1 (192.168.10.185)
| Caracteristica | Valor |
|---|---|
| **Nodo Proxmox** | Cisco1 |
| **PVE Version** | 8.4.14 |
| **CPU** | Intel Xeon E5-2609 v4 @ 1.70GHz (16c/16t, 2 sockets) |
| **RAM** | 755 GB |
| **Disco root** | 94 GB |
| **Acceso** | https://192.168.10.185:8006 |

### Servidor 3: Dell T430 #2 DellT430-2 (192.168.10.187)
| Caracteristica | Valor |
|---|---|
| **Nodo Proxmox** | DellT430-2 |
| **PVE Version** | 9.1.2 |
| **CPU** | Intel Xeon E5-2620 v4 @ 2.10GHz (8c/16t) |
| **RAM** | 126 GB |
| **Disco root** | 94 GB |
| **Acceso** | https://192.168.10.187:8006 |

### Servidor 4: Ryzen PC - AI Server (192.168.10.144)
| Caracteristica | Valor |
|---|---|
| **OS** | Ubuntu 24.04 (bare metal) |
| **CPU** | AMD Ryzen 7 7700X |
| **RAM** | 32 GB |
| **GPU** | NVIDIA RTX 3060 |
| **Servicio** | Ollama (LLM inference) |
| **Acceso SSH** | ssh consultoria-as@192.168.10.144 |

## VMs y Containers

### Servidor TYAN (192.168.10.3)

| VMID | Nombre | Tipo | IP Estatica | MAC | RAM | Funcion | URL Externa |
|---|---|---|---|---|---|---|---|
| 100 | OMV | VM | 192.168.10.75 | - | 8 GB | NAS/Nube (SMB) | `\\192.168.10.75\VAULT-OMV` |
| 102 | Dashy | LXC | 192.168.10.86 | BC:24:11:EB:9A:4F | 2 GB | Dashboard | - |
| 104 | Immich | LXC | 192.168.10.78 | BC:24:11:2E:96:EC | 6 GB | Fotos | https://immich.consultoria-as.com |
| 105 | Hotel Hacienda | LXC | 192.168.10.167 | BC:24:11:7C:01:9B | 16 GB | Gestion Hotel | https://hacienda.consultoria-as.com |
| 106 | Dockge | LXC | 192.168.10.74 | BC:24:11:DD:C9:B9 | 40 GB | Multimedia/Docker/Caddy | http://192.168.10.74:5001 |
| 108 | n8n | LXC | 192.168.10.83 | BC:24:11:11:FC:30 | 8 GB | Automatizacion | https://n8n.consultoria-as.com |
| 109 | Navidrome | LXC | 192.168.10.85 | BC:24:11:2B:49:23 | 10 GB | Musica | https://navidrome.consultoria-as.com |
| 110 | UptimeKuma | LXC | 192.168.10.87 | BC:24:11:22:73:8C | 1 GB | Monitoreo | https://status.consultoria-as.com |
| 111 | Metabase | LXC | 192.168.10.170 | BC:24:11:85:90:87 | 20 GB | Analytics | https://metabase.consultoria-as.com |
| 112 | Gitea | LXC | 192.168.10.69 | BC:24:11:30:EF:4E | 10 GB | Git | https://git.consultoria-as.com |

### Servidor Dell T430 #1 Cisco1 (192.168.10.185)

| VMID | Nombre | Tipo | IP Estatica | MAC | RAM | Funcion | URL |
|---|---|---|---|---|---|---|---|
| 100 | OpenClaw | VM | 192.168.10.105 | 02:57:2C:98:3E:34 | 64 GB | Bot WhatsApp + ClawLibrary | https://192.168.10.105 |
| 101 | OpenWebUI | LXC | 192.168.10.135 | BC:24:11:8F:0F:87 | 40 GB | Interfaz Web AI (Ollama) | http://192.168.10.135:8080 |
| 102 | CraneGOO | VM | 192.168.10.140 | 02:C9:63:B1:E2:D5 | 8 GB | Proyecto CraneGOO | http://192.168.10.140 |
| 106 | AfterlifeProject | VM | - | 02:67:B8:4F:80:B4 | 41 GB | Proyecto Afterlife | Pendiente |

### Servidor Dell T430 #2 DellT430-2 (192.168.10.187)

| VMID | Nombre | Tipo | IP Estatica | MAC | RAM | Funcion | URL Externa |
|---|---|---|---|---|---|---|---|
| 100 | SKEEN.MX | VM | 192.168.10.100 | 02:7C:23:A0:4A:1C | 16 GB | Proyecto SKEEN | - |
| 101 | CocinaConAlma (Tandoor) | VM | 192.168.10.156 | 02:71:EC:C8:90:07 | 8 GB | Recetas - Negocio comida | https://recetas.consultoria-as.com |
| 102 | Odoo | LXC | DHCP | - | 16 GB | ERP | https://odoo.consultoria-as.com |
| 103 | NodeBB | LXC | 192.168.10.73 | BC:24:11:36:90:2C | 8 GB | Foro | https://foro.consultoria-as.com |
| 104 | Autopartes | VM | 192.168.10.91 | 02:CD:37:96:6B:4F | 50 GB | Sistema Autopartes | https://nexus.consultoria-as.com |
| 106 | CAS-PaginasWeb | VM | 192.168.10.92 | 02:49:5F:9E:62:EC | 8 GB | Paginas Web | cronicas/pagoda.consultoria-as.com |
| 108 | Horux | VM | 192.168.10.90 | 02:BF:A9:58:B9:04 | 24 GB | Gestion Horux | https://horuxfin.com |
| 111 | SocialAutomation | VM | DHCP | 02:6F:24:5E:4F:1C | 8 GB | Automatizacion Social | - |
| 112 | Padel | VM | DHCP | 02:EB:58:2C:9E:1A | 8 GB | Proyecto Padel | - |
| 113 | MSP | VM | 192.168.10.97 | 02:DD:3B:3E:16:90 | 20 GB | MeshCentral/MSP | https://mesh.consultoria-as.com |

### Servidor Ryzen PC (192.168.10.144)

| Servicio | Puerto | Funcion | Modelo |
|---|---|---|---|
| Ollama | 11434 | LLM inference con GPU | qwen3.5:9b |

## Servicios Web y URLs

### Servicios con acceso externo (via Caddy reverse proxy)

| Servicio | URL Externa | IP:Puerto Interno | DNS | Estado |
|---|---|---|---|---|
| Jellyfin | https://jellyfin.consultoria-as.com | 127.0.0.1:8096 (Dockge) | Cloudflare | OK |
| Jellyseerr | https://mediarequest.consultoria-as.com | 127.0.0.1:5055 (Dockge) | Cloudflare | OK |
| Immich | https://immich.consultoria-as.com | 192.168.10.78:2283 | Cloudflare | OK |
| Odoo | https://odoo.consultoria-as.com | 192.168.10.81:8069 | Cloudflare | OK |
| n8n | https://n8n.consultoria-as.com | 192.168.10.83:5678 | Cloudflare | OK |
| Horux | https://horuxfin.com | 192.168.10.90:3000 | AWS Route 53 | OK |
| Hotel Hacienda | https://hacienda.consultoria-as.com | 192.168.10.167:5172 | Cloudflare | OK |
| API Hotel | https://api-hacienda.consultoria-as.com | 192.168.10.167:4000 | Cloudflare | OK |
| Metabase | https://metabase.consultoria-as.com | 192.168.10.170:3000 | Cloudflare | OK |
| Autopartes | https://nexus.consultoria-as.com | 192.168.10.91:5000 | Cloudflare | OK |
| Gitea | https://git.consultoria-as.com | 192.168.10.69:3000 | Cloudflare | OK |
| Navidrome | https://navidrome.consultoria-as.com | 192.168.10.85:4533 | Cloudflare | OK |
| NodeBB | https://foro.consultoria-as.com | 192.168.10.73:4567 | Cloudflare | OK |
| UptimeKuma | https://status.consultoria-as.com | 192.168.10.87:3001 | Cloudflare | OK |
| Cronicas | https://cronicas.consultoria-as.com | 192.168.10.92:3000 | Cloudflare | OK |
| Pagoda | https://pagoda.consultoria-as.com | 192.168.10.92:3001 | Cloudflare | OK |
| MeshCentral | https://mesh.consultoria-as.com | 192.168.10.97:4443 (HTTPS) | Cloudflare | OK |
| Recetas (Tandoor) | https://recetas.consultoria-as.com | 192.168.10.156:8080 | Cloudflare | OK |

### Servicios solo acceso local

| Servicio | URL Local |
|---|---|
| OMV (NAS) | http://192.168.10.75 / `\\192.168.10.75\VAULT-OMV` |
| Dockge | http://192.168.10.74:5001 |
| qBittorrent | http://192.168.10.74:8080 |
| Sonarr | http://192.168.10.74:8989 |
| Radarr | http://192.168.10.74:7878 |
| Prowlarr | http://192.168.10.74:9696 |
| Bazarr | http://192.168.10.74:6767 |
| OpenClaw | https://192.168.10.105 |
| ClawLibrary | http://192.168.10.105:5173 |
| OpenWebUI | http://192.168.10.135:8080 |
| CraneGOO | http://192.168.10.140 |
| Ollama API | http://192.168.10.144:11434 |
| Proxmox TYAN | https://192.168.10.3:8006 |
| Proxmox Dell185 | https://192.168.10.185:8006 |
| Proxmox Dell187 | https://192.168.10.187:8006 |

## Red

### Topologia

`
Internet
  |
Modem ISP (192.168.10.254)
  |
Switch Cisco (administrable)
  |
  +-- Servidor TYAN (192.168.10.3)
  +-- Servidor Dell T430 #1 (192.168.10.185)
  +-- Servidor Dell T430 #2 (192.168.10.187)
  +-- Servidor Ryzen AI (192.168.10.144)
  +-- PCs de oficina
  +-- Otros dispositivos
`

### Port Forwarding (Modem)

| Puerto Externo | Destino | Puerto Interno | Servicio |
|---|---|---|---|
| 80 | 192.168.10.74 | 80 | Caddy (HTTP/ACME) |
| 443 | 192.168.10.74 | 443 | Caddy (HTTPS) |

### Reverse Proxy (Caddy)

- **Ubicacion**: Container Dockge (VMID 106, TYAN)
- **IP**: 192.168.10.74
- **Modo**: Docker container con --network host
- **SSL**: Automatico via Lets Encrypt
- **Config**: /opt/caddy/Caddyfile

### Asignacion de IPs (Todas Estaticas)

| IP | Dispositivo/Servicio | MAC |
|---|---|---|
| 192.168.10.3 | Proxmox TYAN | - |
| 192.168.10.67 | **Dispositivo Dell desconocido** (conflicto) | a4:46:b4:e7:a5:30 |
| 192.168.10.69 | Gitea (LXC 112 TYAN) | BC:24:11:30:EF:4E |
| 192.168.10.70 | **Dispositivo desconocido** (conflicto) | 08:cc:81:07:9a:41 |
| 192.168.10.73 | NodeBB (LXC 103 DellT430-2) | BC:24:11:36:90:2C |
| 192.168.10.74 | Dockge/Caddy (LXC 106 TYAN) | BC:24:11:DD:C9:B9 |
| 192.168.10.75 | OMV (VM 100 TYAN) | - |
| 192.168.10.78 | Immich (LXC 104 TYAN) | BC:24:11:2E:96:EC |
| 192.168.10.83 | n8n (LXC 108 TYAN) | BC:24:11:11:FC:30 |
| 192.168.10.85 | Navidrome (LXC 109 TYAN) | BC:24:11:2B:49:23 |
| 192.168.10.86 | Dashy (LXC 102 TYAN) | BC:24:11:EB:9A:4F |
| 192.168.10.87 | UptimeKuma (LXC 110 TYAN) | BC:24:11:22:73:8C |
| 192.168.10.90 | Horux (VM 108 DellT430-2) | 02:BF:A9:58:B9:04 |
| 192.168.10.91 | Autopartes (VM 104 DellT430-2) | 02:CD:37:96:6B:4F |
| 192.168.10.92 | CAS-PaginasWeb (VM 106 DellT430-2) | 02:49:5F:9E:62:EC |
| 192.168.10.97 | MSP/MeshCentral (VM 113 DellT430-2) | 02:DD:3B:3E:16:90 |
| 192.168.10.100 | SKEEN.MX (VM 100 DellT430-2) | 02:7C:23:A0:4A:1C |
| 192.168.10.105 | OpenClaw (VM 100 Cisco1) | 02:57:2C:98:3E:34 |
| 192.168.10.135 | OpenWebUI (LXC 101 Cisco1) | BC:24:11:8F:0F:87 |
| 192.168.10.140 | CraneGOO (VM 102 Cisco1) | 02:C9:63:B1:E2:D5 |
| 192.168.10.144 | Ryzen PC / Ollama (bare metal) | - |
| 192.168.10.156 | CocinaConAlma/Tandoor (VM 101 DellT430-2) | 02:71:EC:C8:90:07 |
| 192.168.10.167 | Hotel Hacienda (LXC 105 TYAN) | BC:24:11:7C:01:9B |
| 192.168.10.170 | Metabase (LXC 111 TYAN) | BC:24:11:85:90:87 |
| 192.168.10.185 | Proxmox Dell T430 #1 | - |
| 192.168.10.187 | Proxmox Dell T430 #2 | - |
| 192.168.10.254 | Modem ISP | - |

## Servicios Multimedia (Container Dockge - 192.168.10.74)

| Servicio | Puerto | Funcion |
|---|---|---|
| Jellyfin | 8096 | Streaming video |
| Jellyseerr | 5055 | Peticiones multimedia |
| Sonarr | 8989 | Gestion de series |
| Radarr | 7878 | Gestion de peliculas |
| Prowlarr | 9696 | Indexadores |
| Bazarr | 6767 | Subtitulos |
| qBittorrent | 8080 | Descargas |
| Dockge | 5001 | Gestion Docker |
| Caddy | 80/443 | Reverse Proxy |

## Stack de AI

| Componente | Ubicacion | IP | Funcion |
|---|---|---|---|
| Ollama | Ryzen PC (bare metal) | 192.168.10.144:11434 | LLM inference con GPU RTX 3060 |
| OpenWebUI | Cisco1 (LXC 101) | 192.168.10.135:8080 | Interfaz web para chat AI |
| Modelo actual | - | - | qwen3.5:9b (Q4_K_M, 6.6 GB) |

## Pendientes

- [ ] Levantar proyecto Afterlife (restauracion de juegos)
- [ ] Acceder al switch Cisco para configurar VLANs
- [ ] Reparar/reemplazar NIC re1 del firewall OPNsense
- [ ] Configurar DDNS o Cloudflare Proxy para IP dinamica
- [ ] Configurar alta disponibilidad (failover multi-sitio)
- [ ] Arrancar OpenClaw (actualmente detenido)
- [ ] Investigar dispositivos en 192.168.10.67 y 192.168.10.70 (conflicto)
- [ ] Configurar IP estatica en Odoo (LXC 102 DellT430-2), SocialAutomation, Padel

## Notas importantes

- El firewall OPNsense esta desactivado temporalmente por fallo en NIC re1
- El modem ISP actua como gateway directo (192.168.10.254)
- La IP publica es dinamica - actualmente 201.142.180.120
- Actualizar DNS en Cloudflare cada vez que cambie la IP
- Todas las VMs/containers criticos tienen IP estatica para evitar conflictos DHCP
- El container n8n tiene un workflow desactivado por falta de conexion a PostgreSQL en 192.168.10.148

## Servicios Hotel Hacienda (requieren inicio manual tras reboot)

`ash
pct enter 105
cd /home/HotelEntregaNoTocar/backend/hotel_hacienda
nohup node server.js > /tmp/hotel-backend.log 2>&1 &
disown
cd /home/HotelEntregaNoTocar/frontend/Frontend-Hotel
nohup npx vite --host > /tmp/hotel-frontend.log 2>&1 &
disown
exit
`

## Cambios recientes (24 de abril 2026)

- Corte de luz causo reinicio completo de infraestructura
- DHCP del modem asigno IPs en conflicto entre servidores
- Configurada IP estatica en TODOS los containers/VMs criticos
- Hotel cambio de 192.168.10.67 a 192.168.10.167 (por conflicto con dispositivo Dell)
- Metabase cambio de 192.168.10.70 a 192.168.10.170 (por conflicto con dispositivo HP/TI)
- OpenWebUI asignado IP estatica 192.168.10.135
- SKEEN.MX asignado IP estatica 192.168.10.100
- NodeBB asignado IP estatica 192.168.10.73
- Caddyfile actualizado con nuevas IPs
- Todos los servicios externos verificados y funcionando

---
*Documentacion actualizada el 24 de Abril de 2026*
*Consultoria-AS*