Josh: Updated documentation from markdown files

2026-05-16T14:04:33Z

Updated documentation from markdown files

Josh: Major update - troubleshooting guide: Current Services - Service Inventory (32 sections)

2026-01-01T13:44:39Z

Major update - troubleshooting guide: Current Services - Service Inventory (32 sections)

← Older revision		Revision as of 13:44, 1 January 2026
Line 1:		Line 1:
	~~= Current Services - Service Inventory =~~

	This document provides a detailed inventory of all services currently configured on the reverse proxy system.		This document provides a detailed inventory of all services currently configured on the reverse proxy system.

Line 69:		Line 67:
	<pre class="lang-bash">		<pre class="lang-bash">
	curl -I https://wiki.jb-vpn.uk		curl -I https://wiki.jb-vpn.uk
	= Or access directly: https://wiki.jb-vpn.uk/index.php?title=Main_Page =		== Or access directly: https://wiki.jb-vpn.uk/index.php?title=Main_Page ==
	</pre>		</pre>

Line 299:		Line 297:
	'''Management''':		'''Management''':
	<pre class="lang-bash">		<pre class="lang-bash">
	= List all SSH port forwards =		== List all SSH port forwards ==
	sudo ssh-forward list		sudo ssh-forward list

	= Add a new device =		== Add a new device ==
	sudo ssh-forward add <name> <external_port> <vpn_ip> [ssh_port]		sudo ssh-forward add <name> <external_port> <vpn_ip> [ssh_port]

	= Remove a device =		== Remove a device ==
	sudo ssh-forward remove <name>		sudo ssh-forward remove <name>
	</pre>		</pre>
Line 320:		Line 318:

	<pre class="lang-bash">		<pre class="lang-bash">
	= Test all HTTPS services =		==== Test all HTTPS services ====
	for domain in wiki.jb-vpn.uk werbs-wiki.jb-vpn.uk dsm.jb-vpn.uk plex.jb-vpn.uk vps.jb-vpn.uk; do		for domain in wiki.jb-vpn.uk werbs-wiki.jb-vpn.uk dsm.jb-vpn.uk plex.jb-vpn.uk vps.jb-vpn.uk; do
	echo "Testing $domain..."		echo "Testing $domain..."
Line 351:		Line 349:
	=== Required for All Services ===		=== Required for All Services ===

	= '''OpenVPN Tunnel''': Must be active (tun0 interface up) =		==== '''OpenVPN Tunnel''': Must be active (tun0 interface up) ====
	= '''Synology NAS''': Must be connected to VPN (10.8.0.2 reachable) =		== '''Synology NAS''': Must be connected to VPN (10.8.0.2 reachable) ==
	= '''Nginx Service''': Must be running =		== '''Nginx Service''': Must be running ==
	= '''DNS Records''': Must point to VPS IP (87.106.61.62) =		== '''DNS Records''': Must point to VPS IP (87.106.61.62) ==

	=== Service-Specific Requirements ===		=== Service-Specific Requirements ===

Josh: Content removed - troubleshooting guide: Current Services - Service Inventory (23 sections)

2026-01-01T13:28:14Z

Content removed - troubleshooting guide: Current Services - Service Inventory (23 sections)

Show changes

Josh: Added troubleshooting guide: Current Services - Service Inventory

2026-01-01T13:15:55Z

Added troubleshooting guide: Current Services - Service Inventory

New page

= Current Services - Service Inventory =

This document provides a detailed inventory of all services currently configured on the reverse proxy system.

== Service Summary ==

{| class="wikitable"
|-
| Service || Subdomain || Internal Port || Protocol || Status || SSL
|-
| Wiki || wiki.jb-vpn.uk || 8080 || HTTP || Active || ✅
|-
| Werbs-Wiki || werbs-wiki.jb-vpn.uk || 8081 || HTTP || Active || ✅
|-
| Synology DSM || dsm.jb-vpn.uk || 5001 || HTTPS || Active || ✅
|-
| Plex Media Server || plex.jb-vpn.uk || 32400 || HTTP || Active || ✅
|-
| VPS Default || vps.jb-vpn.uk || - || - || Active || ✅
|}
== Service Details ==

=== 1. Wiki Service ===

'''Subdomain''': <code>wiki.jb-vpn.uk</code>

'''Public Access''': <code>https://wiki.jb-vpn.uk</code>

'''Internal Configuration''':
'' '''Target IP''': <code>10.8.0.2</code> (Synology NAS via VPN)
'' '''Target Port''': <code>8080</code>
'' '''Protocol''': HTTP

'''Nginx Configuration''':
'' '''File''': <code>/etc/nginx/sites-available/wiki.jb-vpn.uk</code>
'' '''Enabled''': <code>/etc/nginx/sites-enabled/wiki.jb-vpn.uk</code>

'''SSL Certificate''':
'' '''Provider''': Let's Encrypt
'' '''Certificate Path''': <code>/etc/letsencrypt/live/wiki.jb-vpn.uk/</code>
'' '''Expiry Date''': 2026-02-01
'' '''Status''': Valid (89 days remaining)

'''Traffic Flow''':
<pre>
External Request → wiki.jb-vpn.uk:443 (HTTPS)
→ Nginx Reverse Proxy (SSL Termination)
→ 10.8.0.2:8080 (HTTP on Synology NAS)
</pre>

'''Configuration Details''':
'' HTTP to HTTPS redirect: ✅ Enabled
'' WebSocket support: ✅ Enabled
'' Extended timeouts: ✅ 300 seconds
'' Proxy headers: ✅ Full set configured

'''DNS Record''': <code>wiki.jb-vpn.uk</code> → <code>87.106.61.62</code>

'''Test Command''':
<pre class="lang-bash">
curl -I https://wiki.jb-vpn.uk
= Or access directly: https://wiki.jb-vpn.uk/index.php?title=Main_Page =
</pre>

----

=== 2. Werbs-Wiki Service ===

'''Subdomain''': <code>werbs-wiki.jb-vpn.uk</code>

'''Public Access''': <code>https://werbs-wiki.jb-vpn.uk</code>

'''Internal Configuration''':
'' '''Target IP''': <code>10.8.0.2</code> (Synology NAS via VPN)
'' '''Target Port''': <code>8081</code>
'' '''Protocol''': HTTP

'''Nginx Configuration''':
'' '''File''': <code>/etc/nginx/sites-available/werbs-wiki.jb-vpn.uk</code>
'' '''Enabled''': <code>/etc/nginx/sites-enabled/werbs-wiki.jb-vpn.uk</code>

'''SSL Certificate''':
'' '''Provider''': Let's Encrypt
'' '''Certificate Path''': <code>/etc/letsencrypt/live/werbs-wiki.jb-vpn.uk/</code>
'' '''Expiry Date''': 2026-02-01
'' '''Status''': Valid (89 days remaining)

'''Traffic Flow''':
<pre>
External Request → werbs-wiki.jb-vpn.uk:443 (HTTPS)
→ Nginx Reverse Proxy (SSL Termination)
→ 10.8.0.2:8081 (HTTP on Synology NAS)
</pre>

'''Configuration Details''':
'' HTTP to HTTPS redirect: ✅ Enabled
'' WebSocket support: ✅ Enabled
'' Extended timeouts: ✅ 300 seconds
'' Proxy headers: ✅ Full set configured

'''DNS Record''': <code>werbs-wiki.jb-vpn.uk</code> → <code>87.106.61.62</code>

'''Test Command''':
<pre class="lang-bash">
curl -I https://werbs-wiki.jb-vpn.uk
</pre>

----

=== 3. Synology DSM ===

'''Subdomain''': <code>dsm.jb-vpn.uk</code>

'''Public Access''': <code>https://dsm.jb-vpn.uk</code>

'''Internal Configuration''':
'' '''Target IP''': <code>10.8.0.2</code> (Synology NAS via VPN)
'' '''Target Port''': <code>5001</code>
'' '''Protocol''': HTTPS

'''Nginx Configuration''':
'' '''File''': <code>/etc/nginx/sites-available/dsm.jb-vpn.uk</code>
'' '''Enabled''': <code>/etc/nginx/sites-enabled/dsm.jb-vpn.uk</code>

'''SSL Certificate''':
'' '''Provider''': Let's Encrypt
'' '''Certificate Path''': <code>/etc/letsencrypt/live/vps.jb-vpn.uk/</code> (shared certificate)
'' '''Status''': Valid

'''Traffic Flow''':
<pre>
External Request → dsm.jb-vpn.uk:443 (HTTPS)
→ Nginx Reverse Proxy (SSL Termination)
→ 10.8.0.2:5001 (HTTPS on Synology NAS)
</pre>

'''Configuration Details''':
'' HTTP to HTTPS redirect: ✅ Enabled
'' WebSocket support: ✅ Enabled (for DSM WebSocket features)
'' Internal HTTPS: ✅ Passes through to Synology HTTPS

'''DNS Record''': <code>dsm.jb-vpn.uk</code> → <code>87.106.61.62</code>

'''Test Command''':
<pre class="lang-bash">
curl -I https://dsm.jb-vpn.uk
</pre>

----

=== 4. Plex Media Server ===

'''Subdomain''': <code>plex.jb-vpn.uk</code>

'''Public Access''': <code>https://plex.jb-vpn.uk</code>

'''Internal Configuration''':
'' '''Target IP''': <code>10.8.0.2</code> (Synology NAS via VPN)
'' '''Target Port''': <code>32400</code>
'' '''Protocol''': HTTP

'''Nginx Configuration''':
'' '''File''': <code>/etc/nginx/sites-available/plex.jb-vpn.uk</code>
'' '''Enabled''': <code>/etc/nginx/sites-enabled/plex.jb-vpn.uk</code>

'''SSL Certificate''':
'' '''Provider''': Let's Encrypt
'' '''Certificate Path''': <code>/etc/letsencrypt/live/vps.jb-vpn.uk/</code> (shared certificate)
'' '''Status''': Valid

'''Traffic Flow''':
<pre>
External Request → plex.jb-vpn.uk:443 (HTTPS)
→ Nginx Reverse Proxy (SSL Termination)
→ 10.8.0.2:32400 (HTTP on Synology NAS)
</pre>

'''Configuration Details''':
'' HTTP to HTTPS redirect: ✅ Enabled
'' Plex-specific headers: ✅ Configured
'' X-Plex-Client-Identifier
'' X-Plex-Device
'' X-Plex-Product
'' X-Plex-Version
'' X-Plex-Platform
'' X-Plex-Platform-Version
'' X-Plex-Device-Name
'' X-Plex-Provides
'' X-Plex-Token

'''DNS Record''': <code>plex.jb-vpn.uk</code> → <code>87.106.61.62</code>

'''Test Command''':
<pre class="lang-bash">
curl -I https://plex.jb-vpn.uk
</pre>

----

=== 5. VPS Default Web Directory ===

'''Subdomain''': <code>vps.jb-vpn.uk</code>

'''Public Access''': <code>https://vps.jb-vpn.uk</code>

'''Internal Configuration''':
'' '''Type''': Static files
'' '''Web Root''': <code>/var/www/html</code>
'' '''Protocol''': Direct file serving

'''Nginx Configuration''':
'' '''File''': <code>/etc/nginx/sites-available/vps.jb-vpn.uk</code>
'' '''Enabled''': <code>/etc/nginx/sites-enabled/vps.jb-vpn.uk</code>

'''SSL Certificate''':
'' '''Provider''': Let's Encrypt
'' '''Certificate Path''': <code>/etc/letsencrypt/live/vps.jb-vpn.uk/</code>
'' '''Status''': Valid

'''Traffic Flow''':
<pre>
External Request → vps.jb-vpn.uk:443 (HTTPS)
→ Nginx (SSL Termination)
→ /var/www/html (Local file serving)
</pre>

'''Configuration Details''':
'' HTTP to HTTPS redirect: ✅ Enabled
'' Static file serving: ✅ Enabled
'' Index files: <code>index.html</code>, <code>index.htm</code>, <code>index.nginx-debian.html</code>

'''DNS Record''': <code>vps.jb-vpn.uk</code> → <code>87.106.61.62</code>

'''Test Command''':
<pre class="lang-bash">
curl -I https://vps.jb-vpn.uk
</pre>

----

== Additional Services (Non-Web) ==

=== SSH Port Forwarding ===

SSH port forwarding is managed through a centralized configuration system. See [SSH Port Forwarding Management](index.md) for complete documentation.

'''Current Forwards''':
'' '''Synology NAS''': Port <code>22222</code> → <code>10.8.0.2:22</code>
'' Access: <code>ssh -p 22222 user@87.106.61.62</code>

'''Management''':
<pre class="lang-bash">
= List all SSH port forwards =
sudo ssh-forward list

= Add a new device =
sudo ssh-forward add <name> <external_port> <vpn_ip> [ssh_port]

= Remove a device =
sudo ssh-forward remove <name>
</pre>

'''Configuration File''': <code>/etc/ssh-port-forwards.conf</code>

'''Note''': This is a direct port forward via iptables, not handled by nginx.

----

== Service Status Monitoring ==

=== Check All Services ===

<pre class="lang-bash">
= Test all HTTPS services =
for domain in wiki.jb-vpn.uk werbs-wiki.jb-vpn.uk dsm.jb-vpn.uk plex.jb-vpn.uk vps.jb-vpn.uk; do
echo "Testing $domain..."
curl -I -s https://$domain | head -1
done
</pre>

=== Check SSL Certificates ===

<pre class="lang-bash">
certbot certificates
</pre>

=== Check Nginx Status ===

<pre class="lang-bash">
systemctl status nginx
</pre>

=== View Active Sites ===

<pre class="lang-bash">
ls -la /etc/nginx/sites-enabled/
</pre>

----

== Service Dependencies ==

=== Required for All Services ===

= '''OpenVPN Tunnel''': Must be active (tun0 interface up) =
= '''Synology NAS''': Must be connected to VPN (10.8.0.2 reachable) =
= '''Nginx Service''': Must be running =
= '''DNS Records''': Must point to VPS IP (87.106.61.62) =

=== Service-Specific Requirements ===

'' '''Wiki/Werbs-Wiki''': Services must be running on ports 8080/8081
'' '''DSM''': Synology DSM must be enabled
'' '''Plex''': Plex Media Server must be running
'' '''VPS Default''': No dependencies (local files only)

----

== Maintenance Schedule ==

=== Daily ===
'' Monitor nginx error logs
'' Check service availability

=== Weekly ===
'' Review access logs for anomalies
'' Verify SSL certificate status

=== Monthly ===
'' Backup nginx configurations
'' Review and update documentation
'' Check for service updates

=== Quarterly ===
'' Verify SSL certificate auto-renewal
'' Review firewall rules
* Update system packages

----

== Service Statistics ==

'''Total Services''': 5 web services + 1 SSH port forward

'''SSL Certificates''': 3 unique certificates (some shared)

'''Configuration Files''': 5 nginx site configurations

'''Internal Ports Used''': 8080, 8081, 5001, 32400, 22

----

[[Category:Documentation]]
[[Category:Documentation/Services]]

Services:Current Services - Revision history

Josh: Updated documentation from markdown files

Josh: Major update - troubleshooting guide: Current Services - Service Inventory (32 sections)

Josh: Content removed - troubleshooting guide: Current Services - Service Inventory (23 sections)

Josh: Added troubleshooting guide: Current Services - Service Inventory