Infra Knowledge Base

Network

Mon, 01 Jan 0001 00:00:00 +0000

Network Subnets Subnet Range Gateway Notes 192.168.68.0/22 .68.0 – .71.255 192.168.68.1 Main LAN. One flat L2 spanning the .68, .69, .70, .71 octets. 192.168.39.0/24 .39.0 – .39.255 192.168.39.1 Secondary net — tower, bbd-vms, fleet-container-abe Tip Because the main LAN is a /22, 192.168.70.2 and 192.168.68.10 are on the same L2 segment — which is why the PXE proxyDHCP (scoped to 192.168.68.0/22) serves clients anywhere in .68–.71.

Proxmox Nodes

Mon, 01 Jan 0001 00:00:00 +0000

Proxmox Nodes Three Proxmox VE hosts. pmdell is the primary and now holds everything that was consolidated onto it. Node IP Version Guests pmdell 192.168.70.1 PVE 9.2 PXE (702), HAOS (703), docker CTs 731–736 nanofleet 192.168.68.128 PVE Fleet worker VMs (150–153, 201) pmhp 192.168.69.1 PVE 8.4 decommissioning — emptied Note pmdell and nanofleet are standalone (not clustered), so cross-host moves were done via vzdump backup → transfer → restore, not live migration.

Docker Services

Mon, 01 Jan 0001 00:00:00 +0000

Docker Services Self-hosted apps, all now running on pmdell docker CTs. Migrations moved the built images + data volumes (not rebuilds, to avoid stale base-image breakage). Apps App Runs on Port Notes evolutly-app docker-vinioki (70.35) 8080 PHP app + MariaDB; image + DB volume migrated homebox docker-22143 (70.36) 3100 Inventory (SQLite). Needs HBOX_AUTH_API_KEY_PEPPER on recent versions inventree stack docker-pop (70.31) — server/worker/db/cache + docuseal + tunnel-pop MCP servers docker-vivek (70.32) 8001/8002/8004/8006 datetime, kcls, contacts, homebox — see below MCP servers (viveks-mcp-servers) Four running MCP servers, migrated as prebuilt images onto docker-vivek:

Discord Fleet

Mon, 01 Jan 0001 00:00:00 +0000

Discord Fleet A system that runs one Claude Code session per Discord channel inside tmux, fed by a Discord “broker”. Each channel = a worker directory + a tmux session running claude in bypass-permissions mode. Deployments Deployment Host Form Notes viveks-fleet bot-fleet (192.168.70.99) Docker container docker exec viveks-fleet tmux ls native fleet fleet-22143 (192.168.68.39) systemd (fleet.service) /fleet/tools/fleet-tmux fleet-container-abe 192.168.39.20 native fleet container host (was bbd-vm02) How it works Broker (core/discord-broker.py) connects to Discord (one bot token) and listens on a unix socket (DISCORD_FLEET_SOCKET). fleet-tmux launch-all starts one tmux session per channel from /fleet/workers/-/, each running claude --dangerously-load-development-channels server:discord-fleet. Each worker’s .mcp.json binds a discord-fleet MCP shim (mcp_shim.py) to its channel id(s), which the broker delivers messages through. Gotchas learned Warning Bypass permissions: newer Claude Code (2.1.x) added an “Auto mode” that shifted the shift-tab cycle, and a one-time “accept bypass mode” prompt. Fleet workers must reach ⏵⏵ bypass permissions on — set bypassPermissionsModeAccepted and use --dangerously-skip-permissions, or accept once interactively. MCP shim needs enableAllProjectMcpServers + enabledMcpjsonServers in the worker’s .claude/settings.local.json, and the venv needs mcp==1.27.2 (latest breaks Server.list_tools). Per-UID egress firewall on fleet-22143 jails the fleet user (uid 1500) to specific LAN ranges via iptables owner-match (fleet-lan-block.service). Fleet infra repo vkirub/fleet-container — the container/tooling for fleet hosts: bin/ commands (flc install-required, flc update --name , flc status, flc connect), a shared base/ image, and per-fleet compose under fleets//.

PXE Server

Mon, 01 Jan 0001 00:00:00 +0000

PXE Server (netboot.xyz) Network-boot install server. Runs in LXC 702 on pmdell at 192.168.70.2 (migrated from nanofleet LXC 101). Stack Component Role dnsmasq proxyDHCP (dhcp-range=192.168.68.0,proxy) + TFTP (:69), serves the iPXE bootloader nginx (:80) serves the iPXE menus + large assets (ISOs, kernels) from /var/www/html iPXE menus boot.cfg, menu.ipxe, per-OS *.ipxe, and a Custom URL Menu (custom/custom.ipxe) Because the proxyDHCP scope is the whole 192.168.68.0/22, any machine on the LAN that network-boots gets served — pointed at 192.168.70.2 for TFTP/HTTP.

Other Hosts

Mon, 01 Jan 0001 00:00:00 +0000

Other Hosts Non-Proxmox machines on the network. tower — GPU box IP: 192.168.39.10 · Quadro RTX 4000 (8 GB VRAM), 32 GB RAM Runs the audio-server transcription/diarization service (WhisperX) on :8080 Holds ~135 GB of Ollama models (/usr/share/ollama) — ~24 models, mostly stale Repo: vkirub-2026/audio-server bot-fleet IP: 192.168.70.99 · Docker host Runs the viveks-fleet container (Discord fleet) + tailscale-exit-node, onecli, postgres See Discord Fleet fleet-22143 IP: 192.168.68.39 (on the main 68.0/22 LAN, not the .39.x net) Native Discord fleet host — fleet.service launches per-channel Claude sessions Has a per-UID egress firewall jailing the fleet user (uid 1500) fleet-container-abe IP: 192.168.39.20 (was bbd-vm02 at .39.12; rebuilt + re-homed via DHCP reservation) Fleet container host. Repo checked out at /fleet-container with the flc helper. bbd-vm01 / 03 / 04 / 05 Bare-metal Debian 13 boxes (despite the “vm” naming):

Repositories

Mon, 01 Jan 0001 00:00:00 +0000

Repositories Inventory of every GitHub repo across the personal account and all the orgs, based on their READMEs. ~205 repos across 14 orgs + personal. Click a namespace to jump straight to that org’s repo table on its page. By namespace Namespace Repos Focus Page vkirub 24 personal: sites, AI/MCP, archive Personal vkirub-2026 32 media, infra, CV, Tamil Personal packofparts 48 FRC robotics team 1294 (2013–2026) packofparts sde-skills 15 interview-prep / meetup community Fleet & AI orgs fleet-22143 15 Discord-channel fleet workers Fleet & AI orgs brigelabs-ai 9 agent infra (NanoClaw, Fleet Factory) Fleet & AI orgs boxbytedigital 7 LinkedIn lead-gen agency Fleet & AI orgs vinioki 8 Blink, SEO tooling, sites Fleet & AI orgs acejournal 4 AI tech publication Publications & education kandamangalam 2 Vedic / spiritual sites Publications & education tcmagazine-org 1 magazine site Publications & education sagebrook 1 HOA site + portal Publications & education vkirub-graveyard 10 retired repos Graveyard Hidden orgs Course-material orgs — one repo per weekly session, mostly title-only. Tucked away here rather than in the main list.

Project Ideas

Mon, 01 Jan 0001 00:00:00 +0000

Project Ideas A running list of things to build / fix / improve. Click an item to jump to its details. Index Repurpose pmhp Prune stale Ollama models Consolidate the mail-truck detectors Pin HAOS to 192.168.70.3 Automated infra backups Tradier stock-trading automation Rebuild sport.sdeskills 1. Repurpose pmhp Status: idea · Effort: M