Servers

Hardware Notes — aperture

• Platform: Raspberry Pi 4 (Cortex-A72 @ 1.5 GHz)

• Architecture: ARM64 (aarch64)

• CPU: 4 cores / 4 threads

• RAM: 4 GB

• Boot Device: 16 GB microSD

• GPU: Integrated VideoCore (not modeled; no discrete GPU)

• Network Interfaces:

  • eth0 — 1 Gb onboard Ethernet (primary LAN uplink)
  • wlan0 — Present but not intentionally used (not modeled)

• Capability Tags:

  • Participates in Tailscale overlay

Hardware Notes — drogher

• Platform: Raspberry Pi 4 (Cortex-A72 @ 1.5 GHz)

• Architecture: ARM64 (aarch64)

• CPU: 4 cores / 4 threads

• RAM: 4 GB

• Boot Device: 32 GB microSD

• Additional Storage:

  • 232 GB SSD (mounted at /srv/ssd)
  • 2 TB USB HDD (mounted at /mnt/backup_mariadb)

• GPU: Integrated VideoCore (not modeled; no discrete GPU)

• Network Interfaces:

  • eth0 — 1 Gb onboard Ethernet (primary LAN uplink)
  • wlan0 — Present (not intentionally modeled)

• Capability Tags:

  • Participates in Tailscale overlay

TODO: Hardware audit required

Hardware Notes — forge

• Platform: Raspberry Pi 5 Model B Rev 1.0

• Architecture: ARM64 (aarch64)

• CPU: Cortex-A76, 4 cores @ 2.4 GHz

• RAM: 8 GB

• Boot Device: 64 GB microSD

• GPU: Integrated VideoCore (not modeled; no discrete GPU)

• Network Interfaces:

  • eth0 — 2.5 Gb capable; LAN uplink (tl-sg108e:5)
  • eth1 — 1 Gb USB Ethernet adapter; dedicated SPAN/mirror ingress from managed switch (tl-sg108e:6)
  • wlan0 — Present but unused (not modeled)

• NIC Modeling Policy:

  • Modeled at hardware capability, not negotiated link speed
  • eth0 capable of 2.5 Gb
  • eth1 limited to 1 Gb

Hardware Notes — ironclad

• Platform: Custom build (Antec C5 ARGB Mid Tower)

• Architecture: x86_64

• CPU: Intel Core i7-14700F, 20 cores (8P+12E) / 28 threads

• RAM: 32 GB DDR5 6000MHz (2x16GB, XMP enabled)

• Boot Device: Kingston NV3 1TB NVMe M.2 Gen4 SSD

• GPU: Asus Dual RTX 5060 Ti OC 16GB GDDR7 (Blackwell)

• Motherboard: MSI MAG B760 Tomahawk WiFi (ATX, DDR5, LGA1700)

• PSU: Gigabyte 750W UD750GM PG5 V2 ICE (80+ Gold, Fully Modular)

• CPU Cooler: Thermalright Peerless Assassin 120 SE (dual tower)

• Thermal Paste: Thermal Grizzly Kryonaut

• Network Interfaces:

  • Intel I226-V 2.5 Gb Ethernet (onboard)
  • Intel Wi-Fi 6E (onboard, unused)

• BIOS Configuration:

  • XMP Profile 1 enabled (DDR5 6000MHz)
  • Wake-on-LAN: Resume by PCI-E Device enabled
  • Restore After AC Power Loss: Power On
  • Intel Virtualization Technology: Enabled

• Role: Primary development workstation, SSH-first. Runs Immich photo management (migrated from surfaceblack 2026-03-07), offloads heavy Claude Code sessions, and local inference workloads from chromebullet.

Storage — seastore

• Device: /dev/sda1 (SATA 6.0 Gb/s)
• Model: Seagate ST4000DM000-1F2168 (Desktop HDD.15)
• Serial: Z301NLGY
• Firmware: CC54
• Capacity: 4TB (3.6T usable, 1% reserved)
• Filesystem: ext4, label "seastore"
• UUID: 69107d4c-9e48-4d01-b642-3be53c858b42
• Mount: /mnt/seastore (noatime, nofail)
• Role: Media and secondary backup storage (3-2-1 methodology). All data is replaceable.
• SMART monitoring: smartd — daily short test 2am, long test Saturdays 3am, temp alerts at 45/55°C
• Commissioned: 2026-04-03. Drive has ~43,871 power-on hours (~5 years). Past warranty but SMART clean.

drives_info:

• size: 4000.0 type: sata model: Seagate ST4000DM000-1F2168 serial: Z301NLGY label: seastore mount: /mnt/seastore filesystem: ext4 role: media and secondary backup storage (3-2-1)

TODO: Hardware audit required

Asustor NAS. ARM64/RTD1619B — no hardware transcoding, no Docker. File storage only. SSH access via gagarin user, key-based auth. OpenSSH 9.8 with PerSourcePenalties (can auto-block IPs on failed connections).

Hardware Notes — pihole

• Platform: Raspberry Pi 3 Model B Rev 1.2
• Boot Device: microSD (8 GB)
• Architecture: ARM (32-bit)

Network Interfaces

• eth1 — LAN-facing interface, connected to ls108g:2

Network Role — DNS/Ad-block Only (superseded 2026-06-10)

UCG-Ultra (ucg-ultra) is now the sole Layer-3 gateway, NAT, firewall, and DHCP authority for the LAN (cut over 2026-06-10). pihole no longer performs routing — it is a downstream DNS resolver only (Pi-hole + Unbound), reached via ls108g → tl-sg108e → ucg-ultra.

Topology Context

Internet ↓ NBN NTD (L1/L2) ↓ tl-sg108e (L2 only) ↓ ucg-ultra (L3 boundary — gateway/NAT/DHCP) ↓ usw-lite-8-poe / gs608v4 / ls108g ↓ pihole (DNS only, no routing)

Hardware Notes — surfaceblack

• Platform: Microsoft Surface Laptop 3 (Model 1873)

• Architecture: x86_64

• CPU: AMD Ryzen 5 Microsoft Surface Edition, 4 cores / 8 threads

• RAM: 8 GB

• Storage: 256 GB NVMe (HFM256GDGTNG-87A0A)

• Battery: Li-ion, 45.8 Wh design capacity, ~39.3 Wh actual (85.7% health), 79 cycles as of 2026-03-07

• Kernel: linux-surface 6.14.2-surface-1 (surface_battery, surface_charger, surface_aggregator modules)

• Battery Control: No software charge thresholds available. UEFI battery limit (50% fixed) exists but is read-only at runtime. SAM probing is dangerous — avoid unknown CIDs.

• Always-on: Runs 24/7 plugged in as a server. Smart plug recommended for charge cycling.

• GPU: Integrated Radeon graphics (not modeled; no discrete GPU)

• Network Interfaces:

  • USB Ethernet adapter (primary LAN uplink; bridged via br0)
  • WiFi present but not used (not modeled)

• Modeling Policy:

  • Physical capability modeled, not negotiated link state
  • Integrated components not represented as discrete devices

Hardware Notes — vps

• Platform: Oracle Cloud Always Free VM (VM.Standard.E2.1.Micro)

• Architecture: x86_64

• CPU: AMD EPYC 7551, 2 vCPUs

• RAM: 1 GB

• Storage: 47 GB block volume (SSD)

• Hostname: rabbithole.unbiasedrhino.cyou

• Provider: Oracle Cloud Infrastructure (Sydney region)

• Tier: Always Free

• Network:

  • Public IP (static)
  • Tailscale node (headscale self-hosted)
  • SSH alias: vps

• Key Services:

  • Headscale (Tailscale coordination server)
  • Caddy (reverse proxy, TLS termination)