Service Inventory — Self-Hosted
Last updated: 2026-10-30
eagleserver (192.168.1.7)
Network Services
| Name | Port(s) | URL / Access | Config Path | Notes |
|---|---|---|---|---|
| nginx | 80, 443, 8080 | https://eaglehub.dev | /etc/nginx/sites-enabled/landing | |
| sshd | 2222 | ssh eagle@192.168.1.7 -p 2222 | /etc/ssh/sshd_config | Key-only auth, hardened |
| tailscaled | internal | 100.93.230.2 | /etc/tailscale/ | VPN mesh |
| dnsmasq | 53 | localhost | /etc/dnsmasq.conf | Local DNS |
| qemu-system-x86 | 5900 | 127.0.0.1:5900 | — | VM console, local only |
| docker-proxy | 3001 | http://192.168.1.7:3001 | — | Uptime Kuma container |
Docker Containers
| Name | Image | Ports | Status | Notes |
|---|---|---|---|---|
| uptime-kuma | louislam/uptime-kuma:2 | 3001:3001 | healthy | Monitoring |
| vaultwarden | vaultwarden/server:latest | 8081:80 | running | Self-hosted Bitwarden-compatible password manager |
Systemd Services (running)
- containerd, docker, nginx, ssh, sshd-keygen
- fail2ban, cron, rsyslog, systemd-resolved, networkd-dispatcher
- tailscaled, mdmonitor, mdcheck_start, mdcheck_continue
- chronyd, polkit, systemd-logind, systemd-hostnamed
- thermald, fwupd, packagekit
- unattended-upgrades, ubuntu-advantage, vault-web
- snapd, snap.hwctl.hwctl-daemon
Storage
| Mount | Device | Size | Purpose |
|---|---|---|---|
| / | /dev/nvme0n1p3 (LVM) | — | Root OS |
| /boot | /dev/nvme0n1p2 | — | Boot |
| /mnt/backup | /dev/md0 (RAID10) | 3.6TB | Restic backups |
EaglePi (192.168.1.13)
Network Services
| Name | Port(s) | URL / Access | Config Path | Notes |
|---|---|---|---|---|
| sshd | 22 | ssh eagle@192.168.1.13 | /etc/ssh/sshd_config | Key-only auth |
| smbd | 139, 445 | smb://192.168.1.13 | /etc/samba/smb.conf | |
| AdGuardHome | 53, 3000 | http://192.168.1.13:3000 | /etc/AdGuardHome/ | DNS + web UI |
| rpcbind | 111 | localhost | — | Samba dependency |
Systemd Services (running)
- ssh, AdGuardHome, smbd, rpcbind, systemd-resolved, cron, rsyslog
Remote Access
| Tool | Accounts | Notes |
|---|---|---|
| Tailscale | tlong44687@gmail.com | Mesh VPN, both devices online |
Monitoring
| Service | Host | URL |
|---|---|---|
| Uptime Kuma | eagleserver | http://192.168.1.7:3001 |
| Uptime Kuma | EaglePi | http://192.168.1.13:3001 |
Active Monitors (to add)
- https://eaglehub.dev
- https://eaglehub.dev/brain/
- http://192.168.1.13:3001 (EaglePi)
Security Baseline
| Item | Status |
|---|---|
| Firewall | UFW active, default deny |
| SSH auth | Key-only, port 2222 |
| Fail2ban | Active for sshd |
| Auto-updates | unattended-upgrades enabled |
| HTTPS | Let's Encrypt / Certbot |
| Security headers | HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy |
| sysctl hardening | rp_filter=1, accept_redirects=0, log_martians=1 |
| Lynis score | 72/100 |
| Backups | Restic daily local + offsite to Backblaze B2, automated via systemd timer |
| Password manager | Vaultwarden self-hosted at https://vault.eaglehub.dev |
Recovery
- Backup repo:
/mnt/backup - Restore command:
restic -r /mnt/backup --password-file ~/.restic-password restore latest --target /tmp/restore - Vault path:
~/ObsidianVaults/2nd-brain/