Hetzner Cloud VM
89.167.54.62 · TS: 100.120.44.115 · Ubuntu 24.04 ARM64
Public Routes — Core & Tools
| Subdomain | Backend | Auth |
|---|
| auth | tinyauth:3000 | TOTP |
| status | uptime-kuma:3001 | public |
| vault | vaultwarden:80 | native+TOTP |
| docs | bookstack:80 | native |
| file | filebrowser:80 | native |
| ssh | sshwifty:8182 | tinyauth |
| flowise | flowise:3000 | native |
| n8n | n8n:5678 | native TOTP |
| grafana | grafana:3000 | native TOTP |
Public Routes — Apps & Media
| Subdomain | Backend | Auth |
|---|
| reapi | re-api:8000 | API key |
| vip / vehicle-intelligence-platform | vip:3106 | public |
| immich | 172.18.0.1:2283 | native |
| shop | ai-shopping-* | native |
| credit | creditfixit:8000 | public |
| read | substackvault-api:8000 (read-it-later/TTS/search · /api/ingest bearer-bypass) | tinyauth |
| games | romm:8080 | native |
| minio | minio:9000 | native |
| minio-console | minio:9001 | native |
| optimushq | 172.18.0.1:3001 | native |
| opencode | 172.18.0.1:4096 (systemd) | native pw · @tailnet |
| gru | 172.18.0.1:4444 (gru-ai.service) | open |
| voice | /srv/voice (static · ElevenLabs Convai → Claude). /api/* → voice-tools signed-url mint. | tinyauth |
| voice-tools | voice-tools:8000 (FastAPI · /tools/* webhooks, /health open; /public/* not routed here) | bearer |
| dahlia | /srv/dahlia (static · ElevenLabs UI) | public |
| dahlia-api | dahlia-bridge:8001 | public |
| claw-api | 187.124.88.49:18789 → OpenCLAW | public |
| env | /srv/env (static) | public |
| stremio | stremio:8080 (tsaridas web player + streaming server · iOS-friendly) | public |
Public Routes — Selkies WebRTC
| Subdomain | App | Auth |
|---|
| obsidian | obsidian:3000 | tinyauth |
| gimp | gimp:3000 | tinyauth |
| gfn | gfn:3000 | tinyauth |
Systemd Services (non-Docker)
| Subdomain | Process | Auth |
|---|
| catgen | Flask :5000 | tinyauth |
| fabric | SvelteKit :3033 | tinyauth |
| optimushq | Express :3001 | native |
| opencode | opencode web :4096 | native pw |
Tailnet-Only Routes (AdGuard split DNS)
| Subdomain | Backend | Host Port |
|---|
| dash | homepage:3000 | 100.120.44.115:3030 |
| portainer | portainer:9000 | 100.120.44.115:9900 |
| torrent | qbittorrent:8080 | 100.120.44.115:8088 |
| sync | couchdb:5984 | 100.120.44.115:5984 |
| loki | loki:3100 | 100.120.44.115:3100 |
| metube | metube:8081 | 100.120.44.115:8081 |
Infrastructure & Monitoring
| Container | Role |
|---|
| prometheus | metrics scrape + store |
| alertmanager | alert routing → Telegram |
| blackbox-exporter | HTTP/HTTPS endpoint probes |
| node-exporter | host metrics |
| cadvisor | container metrics |
| promtail | log shipper → Loki |
| adguard | DNS + split-horizon + ad-block |
| coturn | WebRTC TURN relay (Selkies) |
| watchtower | image auto-update |
| tinyauth | forward-auth TOTP gateway |
Databases & Storage
| Container | Used By |
|---|
| couchdb | Obsidian LiveSync (sync.*) |
| bookstack-db | BookStack (MySQL) |
| romm-db | RomM (MySQL) |
| immich_postgres | Immich |
| immich_redis | Immich cache |
| immich_machine_learning | Immich ML (face/CLIP) |
| ai-shopping-assistant-postgres-1 | Shopping Assistant |
| minio | S3 object storage |
App-Stack Sidecar Containers
| Container | Role |
|---|
| dahlia-bridge | FastAPI Telegram relay for dahlia agent (:8001) |
| voice-tools | FastAPI tool-server for the voice.* EL agent (:8000) |