New articles: - Postfix SendGrid TLS handshake failure (port 465 vs 587) - Plex transcoding troubleshooting - Ansible Ubuntu reboot detection kernel mismatch - WSL2 PyTorch checkpoint Windows filesystem deadlock Updated: - AWS S3 cost management (expanded) - Network overview (IP updates) - HEVC VAAPI batch encode (progress + fixes) - SUMMARY.md (new entries)
1.6 KiB
1.6 KiB
| title | domain | category | tags | status | created | updated | |||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Network Overview | selfhosting | dns-networking |
|
published | 2026-04-02 | 2026-05-19 |
🌐 Network Overview
The MajorsHouse infrastructure is connected via a private Tailscale mesh network. This allows secure, peer-to-peer communication between devices across different geographic locations (US and UK) without exposing services to the public internet.
🏛️ Infrastructure Summary
- Address Space: 100.x.x.x (Tailscale CGNAT)
- Management: Centralized via Ansible (
MajorAnsiblerepo) - Host Groupings: Functional (web, mail, homelab, bots), OS (Fedora, Ubuntu), and Location (US, UK).
🌍 Geographic Nodes
| Host | Location | IP | OS | Notes |
|---|---|---|---|---|
dcaprod |
🇺🇸 US | 100.104.11.146 | Ubuntu 24.04 | DO droplet — live until ~2026-05-22 |
dcaprod-hetzner |
🇺🇸 US | 100.98.223.93 | Ubuntu 24.04 | Hetzner CPX21 — migration target; DNS cutover ~May 22 |
majortoot |
🇺🇸 US | 100.110.197.17 | Ubuntu 24.04 | |
majorhome |
🇺🇸 US | 100.120.209.106 | Fedora 43 | |
teelia |
🇬🇧 UK | 100.120.32.69 | Ubuntu 24.04 |
🔗 Tailscale Setup
Tailscale is configured as a persistent service on all nodes. Key features used include:
- Tailscale SSH: Enabled for secure management via Ansible.
- MagicDNS: Used for internal hostname resolution (e.g.,
majorlab.tailscale.net). - ACLs: Managed via the Tailscale admin console to restrict cross-group communication where necessary.
Last updated: 2026-05-19