412friendly/side-hustle-in-48h
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

v2 topology: Neo dual-homed — Tailscale for SSH mgmt, NetBird for services; clarify service isolation

Browse Source
This commit is contained in:
jarvis
2026-05-30 00:58:03 -04:00
parent aa729590cf
commit c2833e72d2
3 changed files with 25 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
iron-legion-topology.mmd
View File

@@ -1,37 +1,39 @@
flowchart TB
subgraph TAILSCALE["🛡️ Tailscale Overlay — Tailscale Inc. (Admin/Management)"]
subgraph TAILSCALE["🛡️ TAILSCALE OVERLAY — Tailscale Inc. (Admin/Management)"]
direction TB
TSCOORD["Tailscale Coordination Server<br/>(proprietary SaaS)"]
TSART["🤖 Artemis (AI Foreman)<br/>100.100.97.18"]
TSM44["🔧 Mark44 (Ollama)<br/>100.75.26.83"]
TSM5["📚 Mark5 (Research)<br/>100.118.67.105"]
TSM7["⚡ MK7 Swarm Manager<br/>100.66.70.51"]
TSNEO["🖥️ Neo (SSH mgmt only)<br/>Tailscale IP — admin access"]
end
subgraph NETBIRD["🕊️ NetBird Overlay — WireTrustee SA (User-facing)"]
subgraph NETBIRD["🕊️ NETBIRD OVERLAY — WireTrustee SA (User-facing)"]
direction TB
NBCOORD["NetBird Coordination Server<br/>(cloud or self-hosted)"]
NBNEO["🖥️ Neo (Nebuchadnezzar)<br/>100.92.224.74"]
NBNEO["🖥️ Neo (Service host)<br/>NetBird IP — user access"]
NBNC["☁️ Nextcloud AIO"]
NBVW["🔐 Vaultwarden"]
NBDOCK["🐳 Dockhand"]
NBTRIL["📝 Trilium Notes"]
end
subgraph LAN["🏠 LAN Backbone — Beryl Router (OpenWrt)"]
subgraph LAN["🏠 LAN BACKBONE — Beryl Router (OpenWrt)"]
direction TB
BERYL["🌐 Beryl 7<br/>Gateway + DHCP<br/>192.168.0.0/18"]
MK7LAN["⚡ MK7<br/>Traefik | Technitium | Prometheus<br/>Beszel Hub | Portainer CE | Dozzle | Homepage<br/>192.168.7.7"]
WORKERS["🔩 MK33 / MK34 / MK39 / MK42<br/>Swarm Workers (G9 nodes)<br/>192.168.0.x"]
MK7LAN["⚡ MK7<br/>Traefik · Technitium · Prometheus<br/>Beszel Hub · Portainer CE · Dozzle · Homepage<br/>Node Exporter (global)<br/>192.168.7.7"]
WORKERS["🔩 MK33 · MK34 · MK39 · MK42<br/>Swarm Workers (G9 nodes)<br/>192.168.0.x"]
end
%% Tailscale connections
%% Tailscale mesh
TSCOORD ---|"admin mesh<br/>WireGuard tunnel"| TSART
TSCOORD ---|"admin mesh"| TSM44
TSCOORD ---|"admin mesh"| TSM5
TSCOORD ---|"admin mesh"| TSM7
TSCOORD ---|"admin mesh"| TSNEO
%% NetBird connections
%% NetBird mesh
NBCOORD ---|"user mesh<br/>WireGuard tunnel"| NBNEO
NBNEO ---|"Docker Compose"| NBNC
NBNEO ---|"Docker Compose"| NBVW
@@ -43,11 +45,19 @@ flowchart TB
BERYL -.->|"DHCP lease"| WORKERS
MK7LAN ---|"swarm overlay"| WORKERS
%% Cross-plane: management SSH from Tailscale to LAN
TSM7 --"SSH mgmt"--> MK7LAN
%% Cross-plane: management SSH from Tailscale to LAN nodes
TSART --"SSH mgmt"--> MK7LAN
TSART --"SSH mgmt"--> TSNEO
TSM7 --"SSH mgmt"--> MK7LAN
%% Neo dual-homed indicator
TSNEO -.->|"same physical host"| NBNEO
%% Isolation boundaries
NBNEO -.-x|"🔒 ISOLATED<br/>no route"| LAN
TSART -.-x|"🔒 ISOLATED<br/>no route"| NBNEO
TSM7 -.-x|"🔒 ISOLATED<br/>no route"| NBNEO
NBNEO -.-x|"🔒 INTENTIONAL ISOLATION<br/>services NOT on Tailscale"| LAN
NBNEO -.-x|"🔒 INTENTIONAL ISOLATION<br/>services NOT on Tailscale"| TAILSCALE
TSART -.-x|"🔒 no route"| NBNEO
TSM7 -.-x|"🔒 no route"| NBNEO
style TSNEO fill:#2d3748,stroke:#63b3ed,stroke-width:2px,stroke-dasharray: 5 5
style NBNEO fill:#2d3748,stroke:#f6ad55,stroke-width:2px,stroke-dasharray: 5 5