admin/Bruchtal
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(tunnel): allgemeines Setup

Browse Source
This commit is contained in:
admin
2026-02-20 22:45:31 +01:00
parent 201e52c98e
commit 32af25f0a3
2 changed files with 81 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

75
docs/network/tunnel.md Normal file
View File

@@ -0,0 +1,75 @@
##Tunnel
#Sicherheits-Setup
# Sicherheits-Setup
- Stand 3.1.26: Crowsec bislang noch ohne ban
<pre>
+------------------+
| Internet |
+--------+---------+
|
| TCP 80 / 443
v
+------------------------------------------------------------------+
| Hetzner Server |
| seanluc1 |
| |
| +------------+ shared docker network +---------------+ |
| | Traefik | <--------------------------> | CrowdSec | |
| | v3.4.1 | | LAPI | |
| | | | | |
| | :80 :443 | | Decisions | |
| | :8080 | | (CAPI) | |
| +------+-----+ +---------------+ |
| | |
| | dynamic config (file provider) |
| v |
| +-----------------------------------------------------------+ |
| | Pangolin | |
| | v1.14.1 | |
| | | |
| | Web UI :3002 | |
| | API :3000 | |
| | Internal API :3001 | |
| | | |
| | - generates Traefik routers | |
| | - manages resources | |
| | - controls Gerbil / Newt | |
| +-----------+-----------------------------------------------+ |
| | |
| | WireGuard control |
| v |
| +-----------------------------------------------------------+ |
| | Gerbil | |
| | | |
| | WireGuard Exit Node | |
| | wg0: 100.89.128.1/24 | |
| | Control API :3003 | |
| | | |
| | - terminates tunnel | |
| | - forwards TCP ports | |
| +-----------+-----------------------------------------------+ |
| | |
+---------------|--------------------------------------------------+
|
| WireGuard tunnel (encrypted)
v
+------------------------------------------------------------------+
| Local Network (LAN) |
| |
| +-------------+ +------------------------------------+ |
| | Newt | | Target Services | |
| | | | | |
| | wg IP | | Home Assistant | |
| | 100.89.128.4| | 192.168.178.203:8123 | |
| | | | | |
| | TCP Proxy | | Wiki / Bitwarden | |
| +-------------+ +------------------------------------+ |
| |
+------------------------------------------------------------------+
</pre>

8
mkdocs.yml
View File

@@ -9,11 +9,15 @@ theme:
nav:
- Übersicht: index.md
- Netzwerk:
- Topologie: network/topology.md
- Topologie: network/topology.md
- Tunnel: network/tunnel.md
- Proxmox:
- VMs: proxmox/vms.md
- Docker:
- Adguardhome: docker/adguardhome/adguardhome.md
- Wikijs: docker/wikijs/wikijs.md
- Architektur: docker/architecture.md
- Backup & Storage:
- Backup: backup/backup.md
- Storage: backup/storage.md