diff --git a/CLAUDE.md b/CLAUDE.md index ccdb119..f3304b9 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -45,10 +45,10 @@ Hosts (see `ansible/inventory.yaml`): | Host | IP | Role | | --- | --- | --- | -| `minisforum` | `192.168.7.77` | K3s server, Traefik entrypoint, primary app node | -| `debian` | `192.168.7.183` | K3s agent, NFS storage (`/mnt/storage`), secondary Pi-hole | -| `mac-mini` | `192.168.7.96` | Standalone Docker host — Watch Party, Ollama (not in the K3s cluster) | -| `gpu-node` | `192.168.7.98` | K3s agent with NVIDIA GPU, tainted `spot=true:NoSchedule`, labeled `node-role: gpu`; runs Ollama directly on the host, not as a pod | +| `minisforum` | `10.10.40.53` | K3s server, Traefik entrypoint, primary app node | +| `debian` | `10.10.40.20` | K3s agent, NFS storage (`/mnt/storage`), secondary Pi-hole | +| `mac-mini` | `10.10.40.30` | Standalone Docker host — Watch Party, Ollama (not in the K3s cluster) | +| `gpu-node` | `10.10.40.12` | K3s agent with NVIDIA GPU, tainted `spot=true:NoSchedule`, labeled `node-role: gpu`; runs Ollama directly on the host, not as a pod | K3s's bundled Traefik and ingress controller are disabled — Traefik is installed and managed through Argo CD instead. Internal services live under diff --git a/README.md b/README.md index a0dd076..bdf1cac 100644 --- a/README.md +++ b/README.md @@ -8,10 +8,10 @@ in Kubernetes manifests plus Helm values. | Host | IP | Role | | --- | --- | --- | -| `minisforum` | `192.168.7.77` | K3s server, Traefik entrypoint, primary app node | -| `debian` / `nik-debian` | `192.168.7.183` | K3s agent, NFS storage, secondary Pi-hole | -| `mac-mini` | `192.168.7.96` | Standalone services such as Watch Party and Ollama | -| `gpu-node` / `nik-gpu` | `192.168.7.98` | K3s agent with NVIDIA GPU passthrough, spot-tainted; runs Ollama directly on the host | +| `minisforum` | `10.10.40.53` | K3s server, Traefik entrypoint, primary app node | +| `debian` / `nik-debian` | `10.10.40.20` | K3s agent, NFS storage, secondary Pi-hole | +| `mac-mini` | `10.10.40.30` | Standalone services such as Watch Party and Ollama | +| `gpu-node` / `nik-gpu` | `10.10.40.12` | K3s agent with NVIDIA GPU passthrough, spot-tainted; runs Ollama directly on the host | The cluster uses Traefik instead of the bundled K3s ingress controller. Internal services are published under `home.arpa` with certificates from an internal CA. @@ -219,7 +219,7 @@ state that must live on known disks: | `/home/nik/backups` on `debian` | NFS export for Gitea's backup CronJob (separate from `/mnt/storage`) | The Debian NFS server exports both `/mnt/storage` and `/home/nik/backups` to -`192.168.7.77`. +`10.10.40.53`. ## TLS and Trust diff --git a/ansible/README.md b/ansible/README.md index 9272fb9..e3b898c 100644 --- a/ansible/README.md +++ b/ansible/README.md @@ -10,10 +10,10 @@ cluster. | Group | Host | Purpose | | --- | --- | --- | -| `k3s_server` | `minisforum` | K3s server at `192.168.7.77` | -| `k3s_agents` | `debian` | K3s agent and NFS storage at `192.168.7.183` | -| `mac_mini` | `mac-mini` | Docker/Ollama host at `192.168.7.96` | -| `gpu_workstation` | `gpu-node` | K3s agent with NVIDIA GPU passthrough at `192.168.7.98` (spot-tainted) | +| `k3s_server` | `minisforum` | K3s server at `10.10.40.53` | +| `k3s_agents` | `debian` | K3s agent and NFS storage at `10.10.40.20` | +| `mac_mini` | `mac-mini` | Docker/Ollama host at `10.10.40.30` | +| `gpu_workstation` | `gpu-node` | K3s agent with NVIDIA GPU passthrough at `10.10.40.12` (spot-tainted) | All hosts use the `nik` user and the SSH key configured in `inventory.yaml`.