New Grimoire

Keystone-Grimoire/Hosts/Host-Inventory.md

@@ -0,0 +1,59 @@
+---
+title: Host Inventory
+description: All Netgrimoire nodes — roles, IPs, services, hardware
+published: true
+date: 2026-04-12T00:00:00.000Z
+tags: keystone, hosts
+editor: markdown
+dateCreated: 2026-04-12T00:00:00.000Z
+---
+
+# Host Inventory
+
+## Swarm Cluster
+
+| Host | Hostname | IP | Role | Runtime |
+|------|----------|----|------|---------|
+| znas | znas | 192.168.5.10 | NAS + Primary Swarm manager | Swarm manager + Compose |
+| docker2 | — | — | VPN gateway | Compose only |
+| docker3 | — | — | LibreNMS | Compose only |
+| docker4 | hermes | 192.168.5.16 | Mail server + AI worker | Compose + Swarm worker |
+| docker5 | — | 192.168.5.18 | Media host | Compose only |
+| Pi nodes | various | various | Swarm workers + vault nodes | Swarm workers |
+
+## Other Infrastructure
+
+| Device | IP | Purpose |
+|--------|----|---------|
+| OPNsense firewall | 192.168.3.4 | Firewall, dual-WAN, NAT, WireGuard |
+| Internal DNS | 192.168.5.7 | Technitium DNS |
+| ISPConfig | 192.168.4.11 | Web/DNS hosting control panel |
+
+## WAN
+
+| Interface | IP | Status | Purpose |
+|-----------|----|----|---------|
+| ATT (`igc1`) | 107.133.34.145/28 | Primary | 5 static IPs allocated |
+| Cox | — | Retiring | Legacy WAN |
+
+**ATT Static IP Assignments:**
+
+| IP | Assigned To |
+|----|-------------|
+| .145 | Admin / default |
+| .146 | Web services |
+| .147 | Jellyfin |
+| .148 | Mail (ATT_Mail — pending) |
+| .149 | WireGuard / Spare |
+
+## Pinned Services by Host
+
+**znas** — Caddy, Forgejo, Wiki.js, Homepage, Uptime Kuma, AutoKuma, ntfy, Portainer, Authentik, LLDAP, Kopia, Vault, Nextcloud AIO, Immich, Joplin, n8n (Gremlin), all arr services, all media services
+
+**docker4 (hermes)** — MailCow (Compose), Ollama, Open WebUI, Qdrant (Swarm, pinned docker4), Roundcube
+
+**docker5** — Jellyfin, Jellyfinx (Compose)
+
+**docker2** — Gluetun, Jackett, Transmission (Compose)
+
+**docker3** — LibreNMS (Compose)