From 17b6fc6fcb13d93e06907ca4a7372477c942be16 Mon Sep 17 00:00:00 2001 From: "fkrebs (via Claude)" Date: Thu, 28 May 2026 00:49:28 +0200 Subject: [PATCH] CT 108 decommissioned: Zoraxy replaced by Traefik v3 on CT 109 Traefik v3 now handles all *.nuclide.systems traffic (ports 80/443). ACME DNS-01 via Cloudflare, HTTP/2, Keep-Alive fix for Immich. CT 108 backup: vzdump-lxc-108-2026_05_28-00_46_45.tar.zst on UNAS. --- ct-inventory.md | 4 ++-- services/zoraxy.md | 8 ++++++-- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/ct-inventory.md b/ct-inventory.md index 7bd511e..9b4177d 100644 --- a/ct-inventory.md +++ b/ct-inventory.md @@ -10,8 +10,8 @@ Verified 2026-05-20 via `pct list`, `pct config `, `qm config 100` on `nuc`. | 103 | backrest | LXC unpriv | 192.168.1.3/24 | 1 | 4096 + 1024 swap | 8 GiB | **Backrest** (restic) backup scheduler | mp0 NFS | no | running | | 104 | docker | LXC unpriv (idmapped) | 192.168.1.40/24 | 16 | 49152 | 200 GiB | Main Docker host — AI/ML + media + identity-adjacent (~70 containers); **Gitea** (:3000/:222) + **Coder** (:7080) migrated from CT 111 2026-05-26; **Proton Mail Bridge** (:1025 SMTP/:1143 IMAP) | mp0 NFS | Intel iGPU (card+render) | running | | 105 | nextcloud | LXC priv | 192.168.1.41/24 | 4 | 8196 | 100 GiB | Nextcloud AIO | mp0 NFS | Intel iGPU (render only) | running | -| 108 | zoraxy | LXC unpriv | 192.168.1.4/24 | 2 | 2048 | 6 GiB | **Zoraxy** reverse proxy + ACME (`*.nuclide.systems`) | — | no | running | -| 109 | ops | LXC unpriv | 192.168.1.8/24 | 4 | 4096 | 32 GiB | **Ops** — Prometheus + Grafana + Loki + Alloy + pve-exporter + **Homepage** (:10000) + Portainer (:9000) + Dozzle (server) + docs-server + **Infisical** (:8200) + **Pocket-ID** (:11000, migrated from CT 110 2026-05-26); Dozzle agents on all Docker hosts | — | no | running | +| ~~108~~ | ~~zoraxy~~ | — | — | — | — | — | **DESTROYED 2026-05-28** — replaced by Traefik v3 on CT 109; backup `vzdump-lxc-108-2026_05_28-00_46_45.tar.zst` on UNAS | — | — | — | +| 109 | ops | LXC unpriv | 192.168.1.8/24 | 4 | 4096 | 32 GiB | **Ops** — Prometheus + Grafana + Loki + Alloy + pve-exporter + **Homepage** (:10000) + Portainer (:9000) + Dozzle (server) + docs-server + **Infisical** (:8200) + **Pocket-ID** (:11000, migrated from CT 110 2026-05-26) + **Traefik v3** (:80/:443/:8090) — public reverse proxy + ACME DNS-01; Dozzle agents on all Docker hosts | — | no | running | | ~~110~~ | ~~id~~ | — | — | — | — | — | **DESTROYED 2026-05-26** — Pocket-ID migrated to CT 109; LXC removed | — | — | — | | ~~111~~ | ~~dev~~ | — | — | — | — | — | **DESTROYED 2026-05-26** — Coder + Gitea migrated to CT 104; LXC removed | — | — | — | | ~~112~~ | ~~secrets~~ | — | — | — | — | — | **DESTROYED 2026-05-26** — Infisical migrated to CT 109; LXC removed | — | — | — | diff --git a/services/zoraxy.md b/services/zoraxy.md index f02aaf5..b440a43 100644 --- a/services/zoraxy.md +++ b/services/zoraxy.md @@ -1,6 +1,10 @@ -# Zoraxy Reverse Proxy +# Zoraxy Reverse Proxy — DECOMMISSIONED 2026-05-28 -> Zoraxy is a Go-based reverse proxy + ACME daemon running as a **systemd service** on **LXC 108** (`zoraxy`, 192.168.1.4). Config lives in JSON files at `/opt/zoraxy/conf/proxy/`. Changes take effect after `systemctl restart zoraxy`. +> **CT 108 destroyed 2026-05-28.** Replaced by **Traefik v3** on CT 109 (`192.168.1.8`). Backup at `unas:/dump/vzdump-lxc-108-2026_05_28-00_46_45.tar.zst`. All `*.nuclide.systems` traffic now routes through Traefik. See `/docs/infra/portmap.md` and the Traefik stack at `/opt/stacks/traefik/` on CT 109. + +--- + +> ~~Zoraxy is a Go-based reverse proxy + ACME daemon running as a **systemd service** on **LXC 108** (`zoraxy`, 192.168.1.4). Config lives in JSON files at `/opt/zoraxy/conf/proxy/`. Changes take effect after `systemctl restart zoraxy`.~~ ## Current route table