Homelab #

VLANs #

VID	NAME	PREFIX	ACESS	PERMISSIONS
10	ADMIN	`172.16.10.0/24`	Ethernet with 802.1X	Internet without restrictions, SSH to servers
15	ADMIN VPN	`172.16.15.0/24`	WireGuard	Internet without restrictions, SSH to servers
20	SERVERS	`172.16.20.0/24`	specific Ethernet ports	Internet without restrictions
100	GUEST	`172.16.100.0/24`	Ethernet and Wi-Fi	Restricted to HTTP and HTTPS

IPs #

hostname	address(es)
OpnSense-DeLoreane	`172.16.10.1/24`, `172.16.15.1/24`, `172.16.20.1/24`
CRS309-PortalGun	`172.16.20.2/24`
SG250X-Argo3	`172.16.20.3/24`
Conseil	`172.16.20.10/24`
fant0mib0t	`172.16.20.20/24`

Ports & DNS #

There are 4 domains that are in use:

fantomitechno.dev and renoux.dev that are domains used for public services and are available over the internet
fantom.home which is not a real domain (it only exists via my router), this one is used for local services I, as a user, uses
fantom.internal another local domain, this one used only for communication between different devices

All DNS entries are registered by OpnSense-DeLoreane to point to each machine (using their 172.16.20.0/24 IP if they are on multiple networks).

All public DNS entries are also registered on Cloudflare with a CNAME entry to rack.fantomitechno.dev which points to my public IP.

There is a Port forward for all traffic from the Internet to ports 80, 443, 7881, 17230 and the range from 50100 to 50200 of OpnSense-DeLoreane to fant0mib0t.

Ranges	Description
10XX	Websites
20XX	Communications
30XX	Metrics
40XX	Storages

OpnSense-DeLoreane #

Port Number	Service	DNS entry
443	OpnSense	`router.fantom.home`

SG250X-Argo3 #

Port Number	Service	DNS entry
443	Cisco Web UI	`leaf.fantom.home`

CRS309-PortalGun #

Port Number	Service	DNS entry
443	Cisco Web UI	`core.fantom.home`

Conseil #

Global DNS: conseil.fantom.home

Port Number	Service	DNS entry
22	OpenSSH
80, 443, 2019	Caddy	Port 2019 is the admin API used for Prometheus
3001, 3002	Prometheus
4000, 4001, 4002	NFS
4010	Garage S3 API	`s3.fantom.internal`
4011	Garage S3 Web UI	`s3.fantom.home`

fant0mib0t #

Global DNS: fant0mib0t.fantom.home

Port Number	Service	DNS entry
22	OpenSSH (used for SSH and Tangled Knot)
80, 443, 2019	Caddy	Port 2019 is the admin API used for Prometheus
222	Gitea SSH
1099	CelesteNet Admin	`cneta.fantomitechno.dev`
2000	Matrix	`matrix.fantomitechno.dev`
2001, 2002	Livekit (Call for Matrix)	`livekit.fantomitechno.dev`
2010	Tranquill PDS	`pds.fantomitechno.dev`
2020	Akkoma	`fedi.fantomitechno.dev`, `fedi.m.fantomitechno.dev`
3000	Graphana	`graph.fantom.home`
3001, 3002, 3003	Prometheus
4000	Tangled Knot	`knot.fantomitechno.dev`
4005	Anubis (for Forgejo)	`git.fantomitechno.dev`
4006	Forgejo (Behind Anubis)
4010	Tangled Spindle	`spindle.fantomitechno.dev`
4020, 4021	Cryptpad	`drive.renoux.dev`, `drive.s.renoux.dev`
4025	Copyparty	`files.fantomitechno.dev`
4030	Kiwix	`kiwix.fantomitechno.dev`, `kiwix.renoux.dev`
	(redirection to Wikipedia .zim)	`wikipedia.renoux.dev`
4040	Immich	`photo.renoux.dev`
4050	Vaultwarden	`vault.renoux.dev`
4060	Paperless	`pdf.fantom.home`
4070	Affine	`notes.fantomitechno.dev`
4080	Jellyfin	`jellyfin.fantom.home`
4085	Navidrome	`music.fantom.home`
4090	qBittorrent	`torrent.fantom.home`
4091	FlareSolver	`flaresolver.fantom.home`
4092	Prowlarr	`prowlarr.fantom.home`
4093	Jackett	`jackett.fantom.home`
4094	Sonarr	`sonarr.fantom.home`
4095	Radarr	`radarr.fantom.home`
4096	Bazarr	`bazarr.fantom.home`
7881	Livekit
17230	CelesteNet	`cnet.fantomitechno.dev`
50100-50200	Livekit Voice ports