System:Network Architecture - Revision history

Josh: Updated documentation from markdown files

2026-05-16T14:04:33Z

Updated documentation from markdown files

Josh: Content added - troubleshooting guide: Network Architecture (15 sections)

2026-01-01T13:44:31Z

Content added - troubleshooting guide: Network Architecture (15 sections)

← Older revision		Revision as of 13:44, 1 January 2026
Line 1:		Line 1:
	~~= Network Architecture =~~

	This document describes the network architecture of the reverse proxy system.		This document describes the network architecture of the reverse proxy system.

Line 25:		Line 23:
	== Traffic Flow ==		== Traffic Flow ==

	= '''Client Request''': User accesses a subdomain (e.g., <code>wiki.jb-vpn.uk</code>) =		=== '''Client Request''': User accesses a subdomain (e.g., <code>wiki.jb-vpn.uk</code>) ===
	= '''DNS Resolution''': DNS resolves to VPS public IP (87.106.61.62) =		== '''DNS Resolution''': DNS resolves to VPS public IP (87.106.61.62) ==
	= '''Nginx Receives''': Nginx listens on ports 80 (HTTP) and 443 (HTTPS) =		== '''Nginx Receives''': Nginx listens on ports 80 (HTTP) and 443 (HTTPS) ==
	= '''SSL Termination''': If HTTPS, SSL is terminated at the VPS =		== '''SSL Termination''': If HTTPS, SSL is terminated at the VPS ==
	= '''Reverse Proxy''': Nginx forwards the request through the VPN tunnel to the Synology NAS =		== '''Reverse Proxy''': Nginx forwards the request through the VPN tunnel to the Synology NAS ==
	= '''Service Response''': Synology service responds back through the tunnel =		== '''Service Response''': Synology service responds back through the tunnel ==
	= '''Client Response''': Nginx sends the response back to the client =		== '''Client Response''': Nginx sends the response back to the client ==

	== Network Diagram ==		== Network Diagram ==

Josh: Minor update - troubleshooting guide: Network Architecture (8 sections)

2026-01-01T13:28:03Z

Minor update - troubleshooting guide: Network Architecture (8 sections)

← Older revision		Revision as of 13:28, 1 January 2026
Line 11:		Line 11:
	== Network Components ==		== Network Components ==

	'' '''VPS Public IP''': 87.106.61.62		* '''VPS Public IP''': 87.106.61.62
	'' '''VPN Network''': 10.8.0.0/24
	'' '''VPN Interface''': tun0 (10.8.0.1)		* '''VPN Network''': 10.8.0.0/24
	'' '''Synology NAS IP''': 10.8.0.2 (via VPN)
	'' '''Web Server''': Nginx (reverse proxy)		* '''VPN Interface''': tun0 (10.8.0.1)
	'' '''SSL Certificates''': Let's Encrypt (managed by Certbot)
			* '''Synology NAS IP''': 10.8.0.2 (via VPN)

			* '''Web Server''': Nginx (reverse proxy)

			* '''SSL Certificates''': Let's Encrypt (managed by Certbot)

	== Traffic Flow ==		== Traffic Flow ==
Line 69:		Line 74:
	=== Public Ports (VPS) ===		=== Public Ports (VPS) ===

	'' '''Port 80 (HTTP)''': Redirects to HTTPS		* '''Port 80 (HTTP)''': Redirects to HTTPS
	'' '''Port 443 (HTTPS)''': SSL/TLS encrypted traffic
	'' '''Port 22 (SSH)''': Server administration		* '''Port 443 (HTTPS)''': SSL/TLS encrypted traffic
	'' '''Port 1194 (UDP)''': OpenVPN server
			* '''Port 22 (SSH)''': Server administration

			* '''Port 1194 (UDP)''': OpenVPN server

	=== Internal Ports (Synology NAS via VPN) ===		=== Internal Ports (Synology NAS via VPN) ===

	'' '''Port 8080''': Wiki service		* '''Port 8080''': Wiki service
	'' '''Port 8081''': Werbs-Wiki service
	'' '''Port 5001''': Synology DSM		* '''Port 8081''': Werbs-Wiki service
	'' '''Port 32400''': Plex Media Server
	'' '''Port 22''': SSH (forwarded via iptables on port 22222)		* '''Port 5001''': Synology DSM

			* '''Port 32400''': Plex Media Server

			* '''Port 22''': SSH (forwarded via iptables on port 22222)

	== Related Documentation ==		== Related Documentation ==

	'' [Key Components](components.md) - Detailed component information		* [Key Components](components.md) - Detailed component information
	'' [OpenVPN Server](index.md) - VPN configuration
	'' [[Documentation:Index\|Troubleshooting]] - Network troubleshooting		* [OpenVPN Server](index.md) - VPN configuration

			* [[Documentation:Index\|Troubleshooting]] - Network troubleshooting

	[[Category:Documentation]]		[[Category:Documentation]]
	[[Category:Documentation/System]]		[[Category:Documentation/System]]

Josh: Added troubleshooting guide: Network Architecture

2026-01-01T13:15:48Z

Added troubleshooting guide: Network Architecture

New page

= Network Architecture =

This document describes the network architecture of the reverse proxy system.

== Network Topology ==

<pre>
Internet → VPS (87.106.61.62) → OpenVPN Tunnel (tun0) → Synology NAS (10.8.0.2)
</pre>

== Network Components ==

'' '''VPS Public IP''': 87.106.61.62
'' '''VPN Network''': 10.8.0.0/24
'' '''VPN Interface''': tun0 (10.8.0.1)
'' '''Synology NAS IP''': 10.8.0.2 (via VPN)
'' '''Web Server''': Nginx (reverse proxy)
'' '''SSL Certificates''': Let's Encrypt (managed by Certbot)

== Traffic Flow ==

= '''Client Request''': User accesses a subdomain (e.g., <code>wiki.jb-vpn.uk</code>) =
= '''DNS Resolution''': DNS resolves to VPS public IP (87.106.61.62) =
= '''Nginx Receives''': Nginx listens on ports 80 (HTTP) and 443 (HTTPS) =
= '''SSL Termination''': If HTTPS, SSL is terminated at the VPS =
= '''Reverse Proxy''': Nginx forwards the request through the VPN tunnel to the Synology NAS =
= '''Service Response''': Synology service responds back through the tunnel =
= '''Client Response''': Nginx sends the response back to the client =

== Network Diagram ==

<pre>
┌─────────────┐
│ Client │
│ (Browser) │
└──────┬──────┘
│ HTTPS (443)
│
▼
┌─────────────────────────────────────┐
│ VPS (87.106.61.62) │
│ ┌───────────────────────────────┐ │
│ │ Nginx (Reverse Proxy) │ │
│ │ - SSL Termination │ │
│ │ - Request Routing │ │
│ │ - Header Rewriting │ │
│ └───────────┬───────────────────┘ │
│ │ │
│ │ OpenVPN Tunnel │
│ │ (tun0: 10.8.0.1) │
└──────────────┼───────────────────────┘
│
│ HTTP (Internal)
▼
┌─────────────────────────────────────┐
│ Synology NAS (10.8.0.2) │
│ ┌───────────────────────────────┐ │
│ │ Internal Services │ │
│ │ - Port 8080 (Wiki) │ │
│ │ - Port 8081 (Werbs-Wiki) │ │
│ │ - Port 5001 (DSM) │ │
│ │ - Port 32400 (Plex) │ │
│ └───────────────────────────────┘ │
└─────────────────────────────────────┘
</pre>

== Network Ports ==

=== Public Ports (VPS) ===

'' '''Port 80 (HTTP)''': Redirects to HTTPS
'' '''Port 443 (HTTPS)''': SSL/TLS encrypted traffic
'' '''Port 22 (SSH)''': Server administration
'' '''Port 1194 (UDP)''': OpenVPN server

=== Internal Ports (Synology NAS via VPN) ===

'' '''Port 8080''': Wiki service
'' '''Port 8081''': Werbs-Wiki service
'' '''Port 5001''': Synology DSM
'' '''Port 32400''': Plex Media Server
'' '''Port 22''': SSH (forwarded via iptables on port 22222)

== Related Documentation ==

'' [Key Components](components.md) - Detailed component information
'' [OpenVPN Server](index.md) - VPN configuration
'' [[Documentation:Index|Troubleshooting]] - Network troubleshooting

[[Category:Documentation]]
[[Category:Documentation/System]]