# Netzwerk-Dokumentation

## Subnetz

**192.168.0.0/24**  
Gateway: 192.168.0.1 (Router)  
DNS: 192.168.0.202 (Technitium DNS)  
DNS-Fallback: 192.168.0.1

## IP-Belegungsplan

| IP | System | Typ | Dienst |
|----|--------|-----|--------|
| 192.168.0.1 | Router | Physisch | Gateway / DHCP |
| 192.168.0.20 | Unbekannt | Physisch | - |
| 192.168.0.31 | Physisch | Physisch | - |
| 192.168.0.47 | WD MyCloud | NAS | SMB-Share (Musik) |
| 192.168.0.48 | pve-braetter | Physisch | Proxmox Hypervisor |
| 192.168.0.49 | Physisch | Physisch | - |
| 192.168.0.73 | mac-nico | MacOS | Arbeitsrechner |
| 192.168.0.78 | patchmon (CT 100) | LXC | Patch-Monitoring |
| 192.168.0.79 | nginxproxymanager (CT 101) | LXC | Reverse Proxy |
| 192.168.0.80 | octoprint (CT 102) | LXC | 3D-Drucker |
| 192.168.0.85 | ids-monitor (CT 207) | LXC | IDS/SIEM |
| 192.168.0.86 | netbox (CT 208) | LXC | IPAM/DCIM |
| 192.168.0.87 | authentik (CT 209) | LXC | SSO/IdP |
| 192.168.0.88 | wazuh (CT 210) | LXC | SIEM |
| 192.168.0.89 | paperless (VM 106) | VM | Dokumentenmanagement |
| 192.168.0.90 | vaultwarden (VM 107) | VM | Passwort-Manager |
| 192.168.0.91 | workfs (VM 108) | VM | Samba Dateiserver |
| 192.168.0.92 | notes (CT 109) | LXC | Notes Manager |
| 192.168.0.98 | navidrome (VM 105) | VM | Musik-Streaming |
| 192.168.0.148 | gaming-nico | Physisch | Gaming-PC |
| 192.168.0.175 | ovpn-gw (VM 201) | VM | VPN Gateway |
| 192.168.0.202 | dns (VM 103) | VM | DNS Server |
| 192.168.0.220 | sql1 (CT 300) | LXC | PostgreSQL Leader |
| 192.168.0.221 | sql2 (CT 301) | LXC | PostgreSQL Replica |
| 192.168.0.222 | sql3 (CT 302) | LXC | PostgreSQL Replica |
| 192.168.0.240 | outline (VM 200) | VM | Knowledge Base |
| 192.168.0.241 | logserver (CT 202) | LXC | Syslog / Monitoring |
| 192.168.0.245 | openclaw (CT 206) | LXC | OpenClaw Gateway |
| 192.168.0.246 | aqualog (CT 211) | LXC | Aquarium Logbuch |

## DNS (Technitium DNS — 192.168.0.202)

- **Web-UI:** http://192.168.0.202:5380
- Interne Domain: `braetter.local`
- Externe Domain: `braetter-int.de`

## Reverse Proxy (Nginx Proxy Manager — 192.168.0.79)

| Externe Domain | Ziel | Port |
|---------------|------|------|
| notes.braetter-int.de | 192.168.0.92 | 80 |
| (weitere über NPM-UI verwaltbar) | | |

- **NPM Admin:** http://192.168.0.79:81

## VPN (Pritunl — 192.168.0.175)

| Tunnel | Subnetz | Verwendung |
|--------|---------|-----------|
| tun0 | 10.11.99.0/24 | VPN Clients |
| tun1 | 10.11.120.0/24 | Site-to-Site |

- **Pritunl Web:** https://192.168.0.175
- OpenVPN Configs in `/etc/openvpn/`

## Gitea (lokale Code-Verwaltung)

- **URL:** http://gitea.braetter.local
- **User:** braetter
- Repositories: aqualog, noteapp, homelabdoku, ...