Initial commit: Vollständige Homelab-Dokumentation (Stand 2026-04-15)

- Proxmox Host pve-braetter (Hardware, Storage, Bridges)
- 14x LXC Container (CT 100-303) vollständig dokumentiert
- 8x VMs (103-201) vollständig dokumentiert
- Netzwerk-Übersicht mit komplettem IP-Belegungsplan
- Dienste-Übersicht aller Web-Interfaces, DBs, Monitoring
- PostgreSQL 16 HA Cluster (Patroni/etcd) detailliert

network/README.md

@@ -0,0 +1,73 @@
+# Netzwerk-Dokumentation
+
+## Subnetz
+
+**192.168.0.0/24**  
+Gateway: 192.168.0.1 (Router)  
+DNS: 192.168.0.202 (Technitium DNS)  
+DNS-Fallback: 192.168.0.1
+
+## IP-Belegungsplan
+
+| IP | System | Typ | Dienst |
+|----|--------|-----|--------|
+| 192.168.0.1 | Router | Physisch | Gateway / DHCP |
+| 192.168.0.20 | Unbekannt | Physisch | - |
+| 192.168.0.31 | Physisch | Physisch | - |
+| 192.168.0.47 | WD MyCloud | NAS | SMB-Share (Musik) |
+| 192.168.0.48 | pve-braetter | Physisch | Proxmox Hypervisor |
+| 192.168.0.49 | Physisch | Physisch | - |
+| 192.168.0.73 | mac-nico | MacOS | Arbeitsrechner |
+| 192.168.0.78 | patchmon (CT 100) | LXC | Patch-Monitoring |
+| 192.168.0.79 | nginxproxymanager (CT 101) | LXC | Reverse Proxy |
+| 192.168.0.80 | octoprint (CT 102) | LXC | 3D-Drucker |
+| 192.168.0.85 | ids-monitor (CT 207) | LXC | IDS/SIEM |
+| 192.168.0.86 | netbox (CT 208) | LXC | IPAM/DCIM |
+| 192.168.0.87 | authentik (CT 209) | LXC | SSO/IdP |
+| 192.168.0.88 | wazuh (CT 210) | LXC | SIEM |
+| 192.168.0.89 | paperless (VM 106) | VM | Dokumentenmanagement |
+| 192.168.0.90 | vaultwarden (VM 107) | VM | Passwort-Manager |
+| 192.168.0.91 | workfs (VM 108) | VM | Samba Dateiserver |
+| 192.168.0.92 | notes (CT 109) | LXC | Notes Manager |
+| 192.168.0.98 | navidrome (VM 105) | VM | Musik-Streaming |
+| 192.168.0.148 | gaming-nico | Physisch | Gaming-PC |
+| 192.168.0.175 | ovpn-gw (VM 201) | VM | VPN Gateway |
+| 192.168.0.202 | dns (VM 103) | VM | DNS Server |
+| 192.168.0.220 | sql1 (CT 300) | LXC | PostgreSQL Leader |
+| 192.168.0.221 | sql2 (CT 301) | LXC | PostgreSQL Replica |
+| 192.168.0.222 | sql3 (CT 302) | LXC | PostgreSQL Replica |
+| 192.168.0.240 | outline (VM 200) | VM | Knowledge Base |
+| 192.168.0.241 | logserver (CT 202) | LXC | Syslog / Monitoring |
+| 192.168.0.245 | openclaw (CT 206) | LXC | OpenClaw Gateway |
+| 192.168.0.246 | aqualog (CT 211) | LXC | Aquarium Logbuch |
+
+## DNS (Technitium DNS — 192.168.0.202)
+
+- **Web-UI:** http://192.168.0.202:5380
+- Interne Domain: `braetter.local`
+- Externe Domain: `braetter-int.de`
+
+## Reverse Proxy (Nginx Proxy Manager — 192.168.0.79)
+
+| Externe Domain | Ziel | Port |
+|---------------|------|------|
+| notes.braetter-int.de | 192.168.0.92 | 80 |
+| (weitere über NPM-UI verwaltbar) | | |
+
+- **NPM Admin:** http://192.168.0.79:81
+
+## VPN (Pritunl — 192.168.0.175)
+
+| Tunnel | Subnetz | Verwendung |
+|--------|---------|-----------|
+| tun0 | 10.11.99.0/24 | VPN Clients |
+| tun1 | 10.11.120.0/24 | Site-to-Site |
+
+- **Pritunl Web:** https://192.168.0.175
+- OpenVPN Configs in `/etc/openvpn/`
+
+## Gitea (lokale Code-Verwaltung)
+
+- **URL:** http://gitea.braetter.local
+- **User:** braetter
+- Repositories: aqualog, noteapp, homelabdoku, ...