70 lines
2.8 KiB
Markdown
70 lines
2.8 KiB
Markdown
# Mini Mac Server
|
|
|
|
## Device -- 2012 Mac Mini
|
|
|
|
## Information
|
|
This Mac Mini acts as my network gateway and DNS, it additionally hosts my Gitea for right now
|
|
|
|
|
|
## Contents:
|
|
**`~/Docker`**
|
|
├── **`adguard/`**
|
|
├── **`cloudflared/`**
|
|
├── **`gitea/`**
|
|
├── **`glances/`**
|
|
├── **`nginx/`**
|
|
├── **`portainer/`**
|
|
└── **`README.md`**
|
|
|
|
## Current Ports:
|
|
- **`53`** --> adgaurd DNS
|
|
- **`81`** --> nginx proxy manager web ui
|
|
- **`2222`** --> gitea ssh
|
|
- **`3000`** --> adguard web UI
|
|
- **`3001`** --> gitea web ui
|
|
- **`8000`** --> portainer
|
|
- **`9443`** --> portainer web ui
|
|
- **`61208`** --> glances web ui
|
|
|
|
## Current Web Paths:
|
|
- **`szumko.net`** --> Home Assistant
|
|
- **`git.szumko.net`** --> Gitea
|
|
- **`cloud.szumko.net`** --> nextcloud
|
|
|
|
## Adding Subdomains:
|
|
1. Go to cloudflare account and add a dns record for the subdomain
|
|
2. Go to **`~/docker/cloudflared/config.yml`** and add the ingress pointing to NPM
|
|
3. Create a proxy host in NPM pointing to container_name:port (must be on **`homelab`** internal network)
|
|
|
|
## Adding Paths:
|
|
1. Add path in NPM (must be on **`homelab`**)
|
|
|
|
## UFW Settings
|
|
```
|
|
Status: active
|
|
Logging: on (low)
|
|
Default: deny (incoming), allow (outgoing), deny (routed)
|
|
New profiles: skip
|
|
|
|
To Action From
|
|
-- ------ ----
|
|
22 ALLOW IN 192.168.0.0/24 # LAN SSH
|
|
22 on tailscale0 ALLOW IN Anywhere # Tailscale SSH
|
|
Anywhere ALLOW IN 192.168.0.0/24 # LAN General Access
|
|
81 on tailscale0 ALLOW IN Anywhere # Tailscale NPM
|
|
53 on tailscale0 ALLOW IN Anywhere # Tailscale DNS
|
|
3000 on tailscale0 ALLOW IN Anywhere # Tailscale AGH
|
|
3001 on tailscale0 ALLOW IN Anywhere # Tailscale Gitea
|
|
2222 on tailscale0 ALLOW IN Anywhere # Tailscale Gitea
|
|
9443 on tailscale0 ALLOW IN Anywhere # Tailscale Portainer
|
|
61208 on tailscale0 ALLOW IN Anywhere # Tailscale Glances
|
|
22 (v6) on tailscale0 ALLOW IN Anywhere (v6) # Tailscale SSH
|
|
81 (v6) on tailscale0 ALLOW IN Anywhere (v6) # Tailscale NPM
|
|
53 (v6) on tailscale0 ALLOW IN Anywhere (v6) # Tailscale DNS
|
|
3000 (v6) on tailscale0 ALLOW IN Anywhere (v6) # Tailscale AGH
|
|
3001 (v6) on tailscale0 ALLOW IN Anywhere (v6) # Tailscale Gitea
|
|
2222 (v6) on tailscale0 ALLOW IN Anywhere (v6) # Tailscale Gitea
|
|
9443 (v6) on tailscale0 ALLOW IN Anywhere (v6) # Tailscale Portainer
|
|
61208 (v6) on tailscale0 ALLOW IN Anywhere (v6) # Tailscale Glances
|
|
```
|