Revision as of 13:28, 1 January 2026

Current Services - Service Inventory

This document provides a detailed inventory of all services currently configured on the reverse proxy system.

Service Summary

Service	Subdomain	Internal Port	Protocol	Status	SSL
Wiki	wiki.jb-vpn.uk	8080	HTTP	Active	✅
Werbs-Wiki	werbs-wiki.jb-vpn.uk	8081	HTTP	Active	✅
Synology DSM	dsm.jb-vpn.uk	5001	HTTPS	Active	✅
Plex Media Server	plex.jb-vpn.uk	32400	HTTP	Active	✅
VPS Default	vps.jb-vpn.uk	-	-	Active	✅

Service Details

1. Wiki Service

Subdomain: wiki.jb-vpn.uk

Public Access: https://wiki.jb-vpn.uk

Internal Configuration:

Target IP: 10.8.0.2 (Synology NAS via VPN)

Target Port: 8080

Protocol: HTTP

Nginx Configuration:

File: /etc/nginx/sites-available/wiki.jb-vpn.uk

Enabled: /etc/nginx/sites-enabled/wiki.jb-vpn.uk

SSL Certificate:

Provider: Let's Encrypt

Certificate Path: /etc/letsencrypt/live/wiki.jb-vpn.uk/

Expiry Date: 2026-02-01

Status: Valid (89 days remaining)

Traffic Flow:

External Request → wiki.jb-vpn.uk:443 (HTTPS) 
  → Nginx Reverse Proxy (SSL Termination)
  → 10.8.0.2:8080 (HTTP on Synology NAS)

Configuration Details:

HTTP to HTTPS redirect: ✅ Enabled

WebSocket support: ✅ Enabled

Extended timeouts: ✅ 300 seconds

Proxy headers: ✅ Full set configured

DNS Record: wiki.jb-vpn.uk → 87.106.61.62

Test Command:

curl -I https://wiki.jb-vpn.uk
= Or access directly: https://wiki.jb-vpn.uk/index.php?title=Main_Page =

2. Werbs-Wiki Service

Subdomain: werbs-wiki.jb-vpn.uk

Public Access: https://werbs-wiki.jb-vpn.uk

Internal Configuration:

Target IP: 10.8.0.2 (Synology NAS via VPN)

Target Port: 8081

Protocol: HTTP

Nginx Configuration:

File: /etc/nginx/sites-available/werbs-wiki.jb-vpn.uk

Enabled: /etc/nginx/sites-enabled/werbs-wiki.jb-vpn.uk

SSL Certificate:

Provider: Let's Encrypt

Certificate Path: /etc/letsencrypt/live/werbs-wiki.jb-vpn.uk/

Expiry Date: 2026-02-01

Status: Valid (89 days remaining)

Traffic Flow:

External Request → werbs-wiki.jb-vpn.uk:443 (HTTPS) 
  → Nginx Reverse Proxy (SSL Termination)
  → 10.8.0.2:8081 (HTTP on Synology NAS)

Configuration Details:

HTTP to HTTPS redirect: ✅ Enabled

WebSocket support: ✅ Enabled

Extended timeouts: ✅ 300 seconds

Proxy headers: ✅ Full set configured

DNS Record: werbs-wiki.jb-vpn.uk → 87.106.61.62

Test Command:

curl -I https://werbs-wiki.jb-vpn.uk

3. Synology DSM

Subdomain: dsm.jb-vpn.uk

Public Access: https://dsm.jb-vpn.uk

Internal Configuration:

Target IP: 10.8.0.2 (Synology NAS via VPN)

Target Port: 5001

Protocol: HTTPS

Nginx Configuration:

File: /etc/nginx/sites-available/dsm.jb-vpn.uk

Enabled: /etc/nginx/sites-enabled/dsm.jb-vpn.uk

SSL Certificate:

Provider: Let's Encrypt

Certificate Path: /etc/letsencrypt/live/vps.jb-vpn.uk/ (shared certificate)

Status: Valid

Traffic Flow:

External Request → dsm.jb-vpn.uk:443 (HTTPS) 
  → Nginx Reverse Proxy (SSL Termination)
  → 10.8.0.2:5001 (HTTPS on Synology NAS)

Configuration Details:

HTTP to HTTPS redirect: ✅ Enabled

WebSocket support: ✅ Enabled (for DSM WebSocket features)

Internal HTTPS: ✅ Passes through to Synology HTTPS

DNS Record: dsm.jb-vpn.uk → 87.106.61.62

Test Command:

curl -I https://dsm.jb-vpn.uk

4. Plex Media Server

Subdomain: plex.jb-vpn.uk

Public Access: https://plex.jb-vpn.uk

Internal Configuration:

Target IP: 10.8.0.2 (Synology NAS via VPN)

Target Port: 32400

Protocol: HTTP

Nginx Configuration:

File: /etc/nginx/sites-available/plex.jb-vpn.uk

Enabled: /etc/nginx/sites-enabled/plex.jb-vpn.uk

SSL Certificate:

Provider: Let's Encrypt

Certificate Path: /etc/letsencrypt/live/vps.jb-vpn.uk/ (shared certificate)

Status: Valid

Traffic Flow:

External Request → plex.jb-vpn.uk:443 (HTTPS) 
  → Nginx Reverse Proxy (SSL Termination)
  → 10.8.0.2:32400 (HTTP on Synology NAS)

Configuration Details:

HTTP to HTTPS redirect: ✅ Enabled

Plex-specific headers: ✅ Configured

 * X-Plex-Client-Identifier

 * X-Plex-Device

 * X-Plex-Product

 * X-Plex-Version

 * X-Plex-Platform

 * X-Plex-Platform-Version

 * X-Plex-Device-Name

 * X-Plex-Provides

 * X-Plex-Token

DNS Record: plex.jb-vpn.uk → 87.106.61.62

Test Command:

curl -I https://plex.jb-vpn.uk

5. VPS Default Web Directory

Subdomain: vps.jb-vpn.uk

Public Access: https://vps.jb-vpn.uk

Internal Configuration:

Type: Static files

Web Root: /var/www/html

Protocol: Direct file serving

Nginx Configuration:

File: /etc/nginx/sites-available/vps.jb-vpn.uk

Enabled: /etc/nginx/sites-enabled/vps.jb-vpn.uk

SSL Certificate:

Provider: Let's Encrypt

Certificate Path: /etc/letsencrypt/live/vps.jb-vpn.uk/

Status: Valid

Traffic Flow:

External Request → vps.jb-vpn.uk:443 (HTTPS) 
  → Nginx (SSL Termination)
  → /var/www/html (Local file serving)

Configuration Details:

HTTP to HTTPS redirect: ✅ Enabled

Static file serving: ✅ Enabled

Index files: index.html, index.htm, index.nginx-debian.html

DNS Record: vps.jb-vpn.uk → 87.106.61.62

Test Command:

curl -I https://vps.jb-vpn.uk

Additional Services (Non-Web)

SSH Port Forwarding

SSH port forwarding is managed through a centralized configuration system. See [SSH Port Forwarding Management](index.md) for complete documentation.

Current Forwards:

Synology NAS: Port 22222 → 10.8.0.2:22

 * Access: ssh -p 22222 user@87.106.61.62

Management:

= List all SSH port forwards =
sudo ssh-forward list

= Add a new device =
sudo ssh-forward add <name> <external_port> <vpn_ip> [ssh_port]

= Remove a device =
sudo ssh-forward remove <name>

Configuration File: /etc/ssh-port-forwards.conf

Note: This is a direct port forward via iptables, not handled by nginx.

Service Status Monitoring

Check All Services

= Test all HTTPS services =
for domain in wiki.jb-vpn.uk werbs-wiki.jb-vpn.uk dsm.jb-vpn.uk plex.jb-vpn.uk vps.jb-vpn.uk; do
    echo "Testing $domain..."
    curl -I -s https://$domain | head -1
done

Check SSL Certificates

certbot certificates

Check Nginx Status

systemctl status nginx

View Active Sites

ls -la /etc/nginx/sites-enabled/

Service Dependencies

Required for All Services

OpenVPN Tunnel: Must be active (tun0 interface up)

Synology NAS: Must be connected to VPN (10.8.0.2 reachable)

Nginx Service: Must be running

DNS Records: Must point to VPS IP (87.106.61.62)

Service-Specific Requirements

Wiki/Werbs-Wiki: Services must be running on ports 8080/8081

DSM: Synology DSM must be enabled

Plex: Plex Media Server must be running

VPS Default: No dependencies (local files only)

Maintenance Schedule

Daily

Monitor nginx error logs

Check service availability

Weekly

Review access logs for anomalies

Verify SSL certificate status

Monthly

Backup nginx configurations

Review and update documentation

Check for service updates

Quarterly

Verify SSL certificate auto-renewal

Review firewall rules

Update system packages

Service Statistics

Total Services: 5 web services + 1 SSH port forward

SSL Certificates: 3 unique certificates (some shared)

Configuration Files: 5 nginx site configurations

Internal Ports Used: 8080, 8081, 5001, 32400, 22