Jump to content

Services:Current Services: Difference between revisions

From jb-vpn.uk Wiki
← Older edit
Content removed - troubleshooting guide: Current Services - Service Inventory (23 sections)
Updated documentation from markdown files
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
= Current Services - Service Inventory =
This document provides a detailed inventory of all services currently configured on the reverse proxy system.
This document provides a detailed inventory of all services currently configured on the reverse proxy system.


Line 9: Line 7:
| Service || Subdomain || Internal Port || Protocol || Status || SSL
| Service || Subdomain || Internal Port || Protocol || Status || SSL
|-
|-
| Wiki || wiki.jb-vpn.uk || 8080 || HTTP || Active || ✅
| Wiki || wiki.jb-vpn.uk || 8010 || HTTP || Active || ✅
|-
|-
| Werbs-Wiki || werbs-wiki.jb-vpn.uk || 8081 || HTTP || Active || ✅
| Werbs-Wiki || werbs-wiki.jb-vpn.uk || 8011 || HTTP || Active || ✅
|-
|-
| Synology DSM || dsm.jb-vpn.uk || 5001 || HTTPS || Active || ✅
| Synology DSM || dsm.jb-vpn.uk || 5001 || HTTPS || Active || ✅
Line 19: Line 17:
| VPS Default || vps.jb-vpn.uk || - || - || Active || ✅
| VPS Default || vps.jb-vpn.uk || - || - || Active || ✅
|}
|}
== Service Details ==
== Service Details ==


Line 28: Line 27:


'''Internal Configuration''':
'''Internal Configuration''':
* '''Target IP''': <code>10.8.0.2</code> (Synology NAS via VPN)
* '''Host''': VPS (Docker)
 
* '''Target''': <code>127.0.0.1:8010</code> (container <code>wiki-mediawiki</code>)


* '''Target Port''': <code>8080</code>
* '''Stack''': <code>/var/www/wiki.jb/</code>


* '''Protocol''': HTTP
* '''Protocol''': HTTP


'''Nginx Configuration''':
'''Reverse Proxy''':
* '''File''': <code>/etc/nginx/sites-available/wiki.jb-vpn.uk</code>
* '''Caddy''': <code>/etc/caddy/Caddyfile</code> (<code>wiki.jb-vpn.uk</code> → <code>127.0.0.1:8010</code>)
 
* '''Enabled''': <code>/etc/nginx/sites-enabled/wiki.jb-vpn.uk</code>
 
'''SSL Certificate''':
* '''Provider''': Let's Encrypt
 
* '''Certificate Path''': <code>/etc/letsencrypt/live/wiki.jb-vpn.uk/</code>
 
* '''Expiry Date''': 2026-02-01
 
* '''Status''': Valid (89 days remaining)


'''Traffic Flow''':
'''Traffic Flow''':
<pre>
<pre>
External Request → wiki.jb-vpn.uk:443 (HTTPS)  
External Request → wiki.jb-vpn.uk:443 (HTTPS)
   → Nginx Reverse Proxy (SSL Termination)
   → Caddy (SSL termination)
   → 10.8.0.2:8080 (HTTP on Synology NAS)
   → 127.0.0.1:8010 (MediaWiki Docker on VPS)
</pre>
</pre>
'''Configuration Details''':
* HTTP to HTTPS redirect: ✅ Enabled
* WebSocket support: ✅ Enabled
* Extended timeouts: ✅ 300 seconds
* Proxy headers: ✅ Full set configured
'''DNS Record''': <code>wiki.jb-vpn.uk</code> → <code>87.106.61.62</code>


'''Test Command''':
'''Test Command''':
<pre class="lang-bash">
<pre class="lang-bash">
curl -I https://wiki.jb-vpn.uk
curl -I https://wiki.jb-vpn.uk
= Or access directly: https://wiki.jb-vpn.uk/index.php?title=Main_Page =
</pre>
</pre>


Line 81: Line 59:


'''Internal Configuration''':
'''Internal Configuration''':
* '''Target IP''': <code>10.8.0.2</code> (Synology NAS via VPN)
* '''Host''': VPS (Docker)
 
* '''Target''': <code>127.0.0.1:8011</code> (container <code>wiki-werbs-mediawiki</code>)


* '''Target Port''': <code>8081</code>
* '''Stack''': <code>/var/www/wiki.jb/</code>


* '''Protocol''': HTTP
* '''Protocol''': HTTP


'''Nginx Configuration''':
'''Reverse Proxy''':
* '''File''': <code>/etc/nginx/sites-available/werbs-wiki.jb-vpn.uk</code>
* '''Caddy''': <code>/etc/caddy/Caddyfile</code> (<code>werbs-wiki.jb-vpn.uk</code> → <code>127.0.0.1:8011</code>)
 
* '''Enabled''': <code>/etc/nginx/sites-enabled/werbs-wiki.jb-vpn.uk</code>
 
'''SSL Certificate''':
* '''Provider''': Let's Encrypt
 
* '''Certificate Path''': <code>/etc/letsencrypt/live/werbs-wiki.jb-vpn.uk/</code>
 
* '''Expiry Date''': 2026-02-01
 
* '''Status''': Valid (89 days remaining)
 
'''Traffic Flow''':
<pre>
External Request → werbs-wiki.jb-vpn.uk:443 (HTTPS)
  → Nginx Reverse Proxy (SSL Termination)
  → 10.8.0.2:8081 (HTTP on Synology NAS)
</pre>
 
'''Configuration Details''':
* HTTP to HTTPS redirect: ✅ Enabled
 
* WebSocket support: ✅ Enabled
 
* Extended timeouts: ✅ 300 seconds
 
* Proxy headers: ✅ Full set configured
 
'''DNS Record''': <code>werbs-wiki.jb-vpn.uk</code> → <code>87.106.61.62</code>


'''Test Command''':
'''Test Command''':
Line 139: Line 90:
* '''Protocol''': HTTPS
* '''Protocol''': HTTPS


'''Nginx Configuration''':
'''Reverse Proxy''':
* '''File''': <code>/etc/nginx/sites-available/dsm.jb-vpn.uk</code>
* '''Caddy''': <code>/etc/caddy/Caddyfile</code> (<code>dsm.jb-vpn.uk</code> → <code>https://10.8.0.2:5001</code>)
 
* '''Enabled''': <code>/etc/nginx/sites-enabled/dsm.jb-vpn.uk</code>
 
'''SSL Certificate''':
* '''Provider''': Let's Encrypt
 
* '''Certificate Path''': <code>/etc/letsencrypt/live/vps.jb-vpn.uk/</code> (shared certificate)
 
* '''Status''': Valid


'''Traffic Flow''':
'''Traffic Flow''':
<pre>
<pre>
External Request → dsm.jb-vpn.uk:443 (HTTPS)  
External Request → dsm.jb-vpn.uk:443 (HTTPS)
   → Nginx Reverse Proxy (SSL Termination)
   → Caddy (SSL termination)
   → 10.8.0.2:5001 (HTTPS on Synology NAS)
   → 10.8.0.2:5001 (HTTPS on NAS via VPN)
</pre>
</pre>
'''Configuration Details''':
* HTTP to HTTPS redirect: ✅ Enabled
* WebSocket support: ✅ Enabled (for DSM WebSocket features)
* Internal HTTPS: ✅ Passes through to Synology HTTPS
'''DNS Record''': <code>dsm.jb-vpn.uk</code> → <code>87.106.61.62</code>


'''Test Command''':
'''Test Command''':
Line 181: Line 114:


'''Internal Configuration''':
'''Internal Configuration''':
* '''Target IP''': <code>10.8.0.2</code> (Synology NAS via VPN)
* '''Target IP''': <code>10.8.0.2</code> (Synology NAS via VPN, hostname <code>StrawberryNAS</code>)


* '''Target Port''': <code>32400</code>
* '''Target Port''': <code>32400</code>


* '''Protocol''': HTTP
* '''Protocol''': HTTP (TLS terminated by Caddy)


'''Nginx Configuration''':
'''Reverse Proxy''':
* '''File''': <code>/etc/nginx/sites-available/plex.jb-vpn.uk</code>
* '''Caddy''': <code>/etc/caddy/Caddyfile</code> (<code>plex.jb-vpn.uk</code> → <code>http://10.8.0.2:32400</code>)


* '''Enabled''': <code>/etc/nginx/sites-enabled/plex.jb-vpn.uk</code>
* '''Canonical repo copy''': <code>app.jb/docs/caddy/Caddyfile</code>
 
'''SSL Certificate''':
* '''Provider''': Let's Encrypt
 
* '''Certificate Path''': <code>/etc/letsencrypt/live/vps.jb-vpn.uk/</code> (shared certificate)
 
* '''Status''': Valid


'''Traffic Flow''':
'''Traffic Flow''':
<pre>
<pre>
External Request → plex.jb-vpn.uk:443 (HTTPS)  
External Request → plex.jb-vpn.uk:443 (HTTPS)
   → Nginx Reverse Proxy (SSL Termination)
   → Caddy (SSL termination)
   → 10.8.0.2:32400 (HTTP on Synology NAS)
   → 10.8.0.2:32400 (HTTP on NAS via VPN)
</pre>
</pre>


Line 209: Line 135:
* HTTP to HTTPS redirect: ✅ Enabled
* HTTP to HTTPS redirect: ✅ Enabled


* Plex-specific headers: ✅ Configured
* WebSocket upgrade headers: ✅ Enabled (for playback)


  * X-Plex-Client-Identifier
* Forwarded headers: <code>Host</code>, <code>X-Real-IP</code>, <code>X-Forwarded-For</code>, <code>X-Forwarded-Proto</code>, <code>X-Forwarded-Host</code>, <code>X-Forwarded-Port</code>


  * X-Plex-Device
* Internal <code>Location</code> header rewrites: ✅ <code>10.8.0.2</code>, <code>192.168.1.21</code>, <code>strawberrynas</code> → <code>https://plex.jb-vpn.uk</code>


  * X-Plex-Product
* '''Do not''' use <code>header_up X-Plex-*</code> in Caddy — see [[Troubleshooting:Plex Troubleshooting|Troubleshooting:Plex Troubleshooting]]


  * X-Plex-Version
'''Synology Plex settings''' (Settings → Network):
* '''Custom server access URLs''': <code>https://plex.jb-vpn.uk:443</code> only (no VPN/LAN URLs)


  * X-Plex-Platform
* '''LAN Networks''': <code>192.168.1.0/255.255.255.0,10.8.0.0/255.255.255.0</code>


  * X-Plex-Platform-Version
* '''Remote Access "not available"''': Expected — remote access uses the reverse proxy, not port 32400 forwarding
 
  * X-Plex-Device-Name
 
  * X-Plex-Provides
 
  * X-Plex-Token


'''DNS Record''': <code>plex.jb-vpn.uk</code> → <code>87.106.61.62</code>
'''DNS Record''': <code>plex.jb-vpn.uk</code> → <code>87.106.61.62</code>


'''Test Command''':
'''Test Commands''':
<pre class="lang-bash">
<pre class="lang-bash">
curl -I https://plex.jb-vpn.uk
curl -s https://plex.jb-vpn.uk/identity
curl -I https://plex.jb-vpn.uk/web
ping -c 2 10.8.0.2
</pre>
</pre>


Line 249: Line 172:
* '''Web Root''': <code>/var/www/html</code>
* '''Web Root''': <code>/var/www/html</code>


* '''Protocol''': Direct file serving
'''Reverse Proxy''':
 
* '''Caddy''': <code>file_server</code> for <code>/var/www/html</code>
'''Nginx Configuration''':
* '''File''': <code>/etc/nginx/sites-available/vps.jb-vpn.uk</code>
 
* '''Enabled''': <code>/etc/nginx/sites-enabled/vps.jb-vpn.uk</code>
 
'''SSL Certificate''':
* '''Provider''': Let's Encrypt
 
* '''Certificate Path''': <code>/etc/letsencrypt/live/vps.jb-vpn.uk/</code>
 
* '''Status''': Valid
 
'''Traffic Flow''':
<pre>
External Request → vps.jb-vpn.uk:443 (HTTPS)
  → Nginx (SSL Termination)
  → /var/www/html (Local file serving)
</pre>
 
'''Configuration Details''':
* HTTP to HTTPS redirect: ✅ Enabled
 
* Static file serving: ✅ Enabled
 
* Index files: <code>index.html</code>, <code>index.htm</code>, <code>index.nginx-debian.html</code>
 
'''DNS Record''': <code>vps.jb-vpn.uk</code> → <code>87.106.61.62</code>


'''Test Command''':
'''Test Command''':
Line 289: Line 185:


=== SSH Port Forwarding ===
=== SSH Port Forwarding ===
SSH port forwarding is managed through a centralized configuration system. See [SSH Port Forwarding Management](index.md) for complete documentation.


'''Current Forwards''':
'''Current Forwards''':
Line 299: Line 193:
'''Management''':
'''Management''':
<pre class="lang-bash">
<pre class="lang-bash">
= List all SSH port forwards =
sudo /usr/local/bin/ssh-port-forward-manager.sh list
sudo ssh-forward list
 
= Add a new device =
sudo ssh-forward add <name> <external_port> <vpn_ip> [ssh_port]
 
= Remove a device =
sudo ssh-forward remove <name>
</pre>
</pre>


'''Configuration File''': <code>/etc/ssh-port-forwards.conf</code>
'''Configuration File''': <code>/etc/ssh-port-forwards.conf</code>
'''Note''': This is a direct port forward via iptables, not handled by nginx.


----
----


== Service Status Monitoring ==
== Service Status Monitoring ==
=== Check All Services ===


<pre class="lang-bash">
<pre class="lang-bash">
= Test all HTTPS services =
# Test all HTTPS services
for domain in wiki.jb-vpn.uk werbs-wiki.jb-vpn.uk dsm.jb-vpn.uk plex.jb-vpn.uk vps.jb-vpn.uk; do
for domain in wiki.jb-vpn.uk werbs-wiki.jb-vpn.uk dsm.jb-vpn.uk plex.jb-vpn.uk vps.jb-vpn.uk; do
     echo "Testing $domain..."
     echo "Testing $domain..."
     curl -I -s https://$domain | head -1
     curl -I -s "https://$domain" | head -1
done
done
</pre>
=== Check SSL Certificates ===
<pre class="lang-bash">
certbot certificates
</pre>


=== Check Nginx Status ===
# Caddy
systemctl status caddy
caddy validate --config /etc/caddy/Caddyfile


<pre class="lang-bash">
# VPN (required for DSM/Plex)
systemctl status nginx
cat /var/log/openvpn-status.log
ping -c 2 10.8.0.2
</pre>
</pre>


=== View Active Sites ===
== Related Documentation ==


<pre class="lang-bash">
* [[Troubleshooting:Plex Troubleshooting|Troubleshooting:Plex Troubleshooting]]
ls -la /etc/nginx/sites-enabled/
</pre>


----
* [[Troubleshooting:Service Troubleshooting|Troubleshooting:Service Troubleshooting]]


== Service Dependencies ==
* [[Documentation:Integration|OpenVPN:Integration]]


=== Required for All Services ===
= '''OpenVPN Tunnel''': Must be active (tun0 interface up) =
= '''Synology NAS''': Must be connected to VPN (10.8.0.2 reachable) =
= '''Nginx Service''': Must be running =
= '''DNS Records''': Must point to VPS IP (87.106.61.62) =
=== Service-Specific Requirements ===
* '''Wiki/Werbs-Wiki''': Services must be running on ports 8080/8081
* '''DSM''': Synology DSM must be enabled
* '''Plex''': Plex Media Server must be running
* '''VPS Default''': No dependencies (local files only)
----
== Maintenance Schedule ==
=== Daily ===
* Monitor nginx error logs
* Check service availability
=== Weekly ===
* Review access logs for anomalies
* Verify SSL certificate status
=== Monthly ===
* Backup nginx configurations
* Review and update documentation
* Check for service updates
=== Quarterly ===
* Verify SSL certificate auto-renewal
* Review firewall rules
* Update system packages
----
== Service Statistics ==
'''Total Services''': 5 web services + 1 SSH port forward
'''SSL Certificates''': 3 unique certificates (some shared)
'''Configuration Files''': 5 nginx site configurations
'''Internal Ports Used''': 8080, 8081, 5001, 32400, 22
----


[[Category:Documentation]]
[[Category:Documentation]]
[[Category:Documentation/Services]]
[[Category:Documentation/Services]]

Latest revision as of 10:44, 7 July 2026

This document provides a detailed inventory of all services currently configured on the reverse proxy system.

Service Summary

[edit]
Service Subdomain Internal Port Protocol Status SSL
Wiki wiki.jb-vpn.uk 8010 HTTP Active ✅
Werbs-Wiki werbs-wiki.jb-vpn.uk 8011 HTTP Active ✅
Synology DSM dsm.jb-vpn.uk 5001 HTTPS Active ✅
Plex Media Server plex.jb-vpn.uk 32400 HTTP Active ✅
VPS Default vps.jb-vpn.uk - - Active ✅

Service Details

[edit]

1. Wiki Service

[edit]

Subdomain: wiki.jb-vpn.uk

Public Access: https://wiki.jb-vpn.uk

Internal Configuration:

  • Host: VPS (Docker)
  • Target: 127.0.0.1:8010 (container wiki-mediawiki)
  • Stack: /var/www/wiki.jb/
  • Protocol: HTTP

Reverse Proxy:

  • Caddy: /etc/caddy/Caddyfile (wiki.jb-vpn.uk → 127.0.0.1:8010)

Traffic Flow: 

External Request → wiki.jb-vpn.uk:443 (HTTPS)
  → Caddy (SSL termination)
  → 127.0.0.1:8010 (MediaWiki Docker on VPS)

Test Command: 

curl -I https://wiki.jb-vpn.uk

2. Werbs-Wiki Service

[edit]

Subdomain: werbs-wiki.jb-vpn.uk

Public Access: https://werbs-wiki.jb-vpn.uk

Internal Configuration:

  • Host: VPS (Docker)
  • Target: 127.0.0.1:8011 (container wiki-werbs-mediawiki)
  • Stack: /var/www/wiki.jb/
  • Protocol: HTTP

Reverse Proxy:

  • Caddy: /etc/caddy/Caddyfile (werbs-wiki.jb-vpn.uk → 127.0.0.1:8011)

Test Command: 

curl -I https://werbs-wiki.jb-vpn.uk

3. Synology DSM

[edit]

Subdomain: dsm.jb-vpn.uk

Public Access: https://dsm.jb-vpn.uk

Internal Configuration:

  • Target IP: 10.8.0.2 (Synology NAS via VPN)
  • Target Port: 5001
  • Protocol: HTTPS

Reverse Proxy:

Traffic Flow: 

External Request → dsm.jb-vpn.uk:443 (HTTPS)
  → Caddy (SSL termination)
  → 10.8.0.2:5001 (HTTPS on NAS via VPN)

Test Command: 

curl -I https://dsm.jb-vpn.uk

4. Plex Media Server

[edit]

Subdomain: plex.jb-vpn.uk

Public Access: https://plex.jb-vpn.uk

Internal Configuration:

  • Target IP: 10.8.0.2 (Synology NAS via VPN, hostname StrawberryNAS)
  • Target Port: 32400
  • Protocol: HTTP (TLS terminated by Caddy)

Reverse Proxy:

  • Canonical repo copy: app.jb/docs/caddy/Caddyfile

Traffic Flow: 

External Request → plex.jb-vpn.uk:443 (HTTPS)
  → Caddy (SSL termination)
  → 10.8.0.2:32400 (HTTP on NAS via VPN)

Configuration Details:

  • HTTP to HTTPS redirect: ✅ Enabled
  • WebSocket upgrade headers: ✅ Enabled (for playback)
  • Forwarded headers: Host, X-Real-IP, X-Forwarded-For, X-Forwarded-Proto, X-Forwarded-Host, X-Forwarded-Port

Synology Plex settings (Settings → Network):

  • LAN Networks: 192.168.1.0/255.255.255.0,10.8.0.0/255.255.255.0
  • Remote Access "not available": Expected — remote access uses the reverse proxy, not port 32400 forwarding

DNS Record: plex.jb-vpn.uk → 87.106.61.62

Test Commands: 

curl -s https://plex.jb-vpn.uk/identity
curl -I https://plex.jb-vpn.uk/web
ping -c 2 10.8.0.2

5. VPS Default Web Directory

[edit]

Subdomain: vps.jb-vpn.uk

Public Access: https://vps.jb-vpn.uk

Internal Configuration:

  • Type: Static files
  • Web Root: /var/www/html

Reverse Proxy:

  • Caddy: file_server for /var/www/html

Test Command: 

curl -I https://vps.jb-vpn.uk

Additional Services (Non-Web)

[edit]

SSH Port Forwarding

[edit]

Current Forwards:

  • Synology NAS: Port 22222 → 10.8.0.2:22
 * Access: ssh -p 22222 user@87.106.61.62

Management: 

sudo /usr/local/bin/ssh-port-forward-manager.sh list

Configuration File: /etc/ssh-port-forwards.conf

Service Status Monitoring

[edit]
# Test all HTTPS services
for domain in wiki.jb-vpn.uk werbs-wiki.jb-vpn.uk dsm.jb-vpn.uk plex.jb-vpn.uk vps.jb-vpn.uk; do
    echo "Testing $domain..."
    curl -I -s "https://$domain" | head -1
done

# Caddy
systemctl status caddy
caddy validate --config /etc/caddy/Caddyfile

# VPN (required for DSM/Plex)
cat /var/log/openvpn-status.log
ping -c 2 10.8.0.2
[edit]
Retrieved from "https://wiki.jb-vpn.uk/index.php?title=Services:Current_Services&oldid=266"