MTU LUG Wiki - User contributions [en]

Docs/Maho

2026-03-28T22:08:33Z

Allennova: Added images

Maho holds a number of Graphical Processing Units (GPUs) and services either transcoding video or running Large Language Models (LLM's).

=== Hardware ===
Maho is a standalone Dell R730 server (2.5" drive bay variant)

Network daughter card has been swapped out for a Dell 165T0 Broadcom 57800S, a 2 port ethernet and 2 port SFP+ card.

2 GPU's are housed and used for compute workloads, a GTX 1060 6GB and a GTX 1070.

There are 3 open low profile PCIe slots.

=== Operating System ===
Mirrors runs Debian 13.

(Additional storage information)

=== Maintenance ===
[[File:*arr-library-import.png|thumb|Library import on Sonarr]]
New media should be added to <code>/salieri/jellyfin/import</code> and separated into each subfolder depending on media type.

Inside the *arr suite, <code>../import/(media type)</code> is mapped to <code>/downloads/(media type)</code> and can be found on the left hand bar under library import.

Select <code>/downloads/(media type)</code> depending on what *arr application you are using and the subfolder, and import all new media. If there is conflicting media, there may be an error importing, to which an admin needs to manually move the clashing media by hand over ssh.

The imported media is still living under <code>../imports</code> in the main file system; go back to *arr's main media page and look for <code>filters</code> on the right hand side. Some associated filters have been made (ex: <code>Downloads-Movies</code> for Radarr), select whichever filter fits the media you imported.

On the top function bar (same bar filters is in) select <code>Edit Movies</code>, <code>Select Series</code>, or however it is formatted for the *arr application. If filtered right, we should only see our newly imported media and not old media. If this is true click <code>Select All</code>, then edit at the very bottom of the page.
[[File:*arr-filters.png|thumb|Filters on the sidebar in Sonarr]]
Under <code>Root Folder</code>, select the base path that best fits the newly indexed media (<code>/movies</code> for our Radarr example) and finally move the media to the base <code>/salieri/jellyfin/media/(media type)</code> folder.

====*arr====
Updates to the *arr suite are simple and should be done under the podman user. First log into the podman user <code>sudo su podman</code> and go to the podman compose directory <code>cd /opt/podman/compose/arr/</code>, then run the following one liner to pull new images (if there are any) and force recreate the stack <code>podman-compose pull && podman-compose up -d --force-recreate</code>.

<code>-d</code> daemonize's this stack (run in the background)

<code>--force-recreate</code> forces containers to be recreated with the updated image in case podman has issues taking down containers.

Updating the stack should be done as the podman user as our containers are running rootless. Do not run the update commands as another user as said user will try to spin up the containers under its sub ID's.

===Services===

Services are based on this machine but may call remote machines (and therefore remote GPU's) for remote compute via rffmpeg (transcoding) or a OpenAI reverse proxy (LLM)

====Jellyfin====
Jellyfin is installed to its default location (location) and is reverse proxied via nginx. Media is located in <code>/salieri/jellyfin/media</code> with subfolders spanning into media types. Media inside this <code>../media</code> folder is managed/renamed by the *arr suite. <code>/salieri/jellyfin/imports</code> is a holding directory for unsorted media. *arr has access to these folders as <code>/download/(subfolder)</code> and can be sorted futher/moved into <code>../media</code>.

(add more jellyfin service detail)

====*arr====
The *arr suite is running inside docker containers on maho as a single host. The compose file can be found at <code>/opt/podman/compose/arr/docker-compose.yaml</code> and holds the *arr suite as a single service, allowing for one-liner updates/replaces.

(Detail about *arr setup and how to change settings)

====Language Models (SCRAPPED)====
Language and other models are to be hosted on the two GPU's and are than reverse proxied. A user on LUG's Sillytavern (or any front end where an API can be called on) can then select what model to prompt.

Koboldcpp is currently used to run .GGUF models on mixed CPU and GPU allowing for language models (LLM), embedding models (used for data vectorization), text-to-speech (TTS), speech to text, and image generation under one application.

Jellyfin - <nowiki>https://huskywatch.party/</nowiki>

Jellyseer - <nowiki>http://10.10.1.150:5055/</nowiki>

Sonarr - <nowiki>http://10.10.1.150:8989/</nowiki>

Radarr - <nowiki>http://10.10.1.150:7878/</nowiki>

Bazarr - <nowiki>http://10.10.1.150:6767/</nowiki>

Lidarr - <nowiki>http://10.10.1.150:8686/</nowiki>

Lazy librarian - <nowiki>http://10.10.1.150:5299/</nowiki>

mylar3 - <nowiki>http://10.10.1.150:8090/</nowiki>

File:*arr-filters.png

2026-03-28T22:07:40Z

Allennova:

Example Filters for *arr

File:*arr-library-import.png

2026-03-28T22:05:37Z

Allennova:

Shows library-import

Nanocon

2026-02-13T02:22:52Z

Allennova: Page creation. No structure was decided as I have no context of how it was ran and by whom.

Nanocon is/was a student ran convention first ran in the 70's, common clubs included HARO, LUG, (keep filling in...)

Docs

2026-02-10T02:43:43Z

Allennova: Updated services to include separate IRC headings for IRC server and IRC bouncer. Linked associated pages/stubs.

This page is the hub for LUG's documentation.

All of our documentation is intentionally public so that other orgs (or students) can replicate aspects of our infrastructure if they want. Everything sensitive (private keys, break-glass passwords, etc) should go in the LUG Bitwarden.

Topics should generally be broken out into individual articles and linked on this page, unless there's a very small amount of content.

== [[Docs/Infrastructure|Infrastructure]] ==
General infrastructure notes

=== [[Docs/Plans|Plans]] ===
Pending upgrades/maintenance to our infrastructure

=== Network ===

==== [[Docs/Cables|Cables]] ====
Physical cabling and "layer 1" network config.

==== [[Docs/Switches|Switches]] ====
Switch and layer 2 network configs (VLANs).

=== Servers ===

==== [[Docs/Leskinen|Leskinen]] ====

The primary storage server.

Currently has Shell home directory backups and media for maho.

==== [[Docs/Maho|Maho]] ====
The GPU compute server.

Currently hosts a [https://studio.blender.org/films/ Blender Open Studio Films] mirror via Jellyfin.

==== [[Docs/Mirrors|Mirrors]] ====
The Linux mirror server at mirrors.lug.mtu.edu

==== [[Docs/OPNsense|OPNsense]] (Lasanga/Ravioli) ====
Router/Firewall and layer 3+ network configs.

==== [[Docs/Proxmox Cluster|Proxmox Cluster]] ====
Our Proxmox cluster running the majority of our services

==== [[Docs/Shell|Shell]] ====
The shared multi-tenant server for LUG members/alums at [https://shell.lug.mtu.edu/ shell.lug.mtu.edu]

=== Services ===

==== BlueSky ====

==== [[Docs/IRC Server|IRC Server]] ====

==== [[IRC Bouncer]] ====

==== Website ====

==== Wiki ====

== Org Management ==

=== Wiki ===

==== Docs ====
How to create/manage pages in this category ("Docs").

==== Meeting Minutes ====
Notes are taken during the meetings.

There are no specific guidelines, but usually minutes are kept to a series of bullet points, with some elaboration in sub-bullets.

These notes can be written in whatever markup format is preferred, but must be converted to MediaWiki to be pasted onto the wiki. [https://pandoc.org/ Pandoc] can do this for the majority of formats (Markdown, Vimwiki, ODT, etc.)

=== Time-sensitive ===

* Email IT for new certs (example template to use, make sure to keep SubjectAltName, etc)
* Install-a-thons
* Shirt printing / stickers

=== Budget ===

* USG meetings
* Making presentable diagrams and representations of data

=== MTU Policies and Procedures ===
https://www.mtu.edu/umc/services/websites/requirements/

All (sub)domains need to be approved by UMC (University Marketing & Communication)

IT handles IP addressing and SSL certificates

USG handles funding and reimbursements

Docs

2026-01-30T02:51:18Z

Allennova: /* Maho */

This page is the hub for LUG's documentation.

All of our documentation is intentionally public so that other orgs (or students) can replicate aspects of our infrastructure if they want. Everything sensitive (private keys, break-glass passwords, etc) should go in the LUG Bitwarden.

Topics should generally be broken out into individual articles and linked on this page, unless there's a very small amount of content.

== [[Docs/Infrastructure|Infrastructure]] ==
General infrastructure notes

=== [[Docs/Plans|Plans]] ===
Pending upgrades/maintenance to our infrastructure

=== Network ===

==== [[Docs/Cables|Cables]] ====
Physical cabling and "layer 1" network config.

==== [[Docs/Switches|Switches]] ====
Switch and layer 2 network configs (VLANs).

=== Servers ===

==== [[Docs/Leskinen|Leskinen]] ====

The primary storage server.

Currently has Shell home directory backups and media for maho.

==== [[Docs/Maho|Maho]] ====
The GPU compute server.

Currently hosts a [https://studio.blender.org/films/ Blender Open Studio Films] mirror via Jellyfin.

==== [[Docs/Mirrors|Mirrors]] ====
The Linux mirror server at mirrors.lug.mtu.edu

==== [[Docs/OPNsense|OPNsense]] (Lasanga/Ravioli) ====
Router/Firewall and layer 3+ network configs.

==== [[Docs/Proxmox Cluster|Proxmox Cluster]] ====
Our Proxmox cluster running the majority of our services

==== [[Docs/Shell|Shell]] ====
The shared multi-tenant server for LUG members/alums at [https://shell.lug.mtu.edu/ shell.lug.mtu.edu]

=== Services ===

==== BlueSky ====

==== [[Docs/IRC|IRC]] ====

==== Website ====

==== Wiki ====

== Org Management ==

=== Wiki ===

==== Docs ====
How to create/manage pages in this category ("Docs").

==== Meeting Minutes ====
Notes are taken during the meetings.

There are no specific guidelines, but usually minutes are kept to a series of bullet points, with some elaboration in sub-bullets.

These notes can be written in whatever markup format is preferred, but must be converted to MediaWiki to be pasted onto the wiki. [https://pandoc.org/ Pandoc] can do this for the majority of formats (Markdown, Vimwiki, ODT, etc.)

=== Time-sensitive ===

* Email IT for new certs (example template to use, make sure to keep SubjectAltName, etc)
* Install-a-thons
* Shirt printing / stickers

=== Budget ===

* USG meetings
* Making presentable diagrams and representations of data

=== MTU Policies and Procedures ===
https://www.mtu.edu/umc/services/websites/requirements/

All (sub)domains need to be approved by UMC (University Marketing & Communication)

IT handles IP addressing and SSL certificates

USG handles funding and reimbursements

Docs/Maho

2026-01-30T02:50:34Z

Allennova: /* Language Models */

Maho holds a number of Graphical Processing Units (GPUs) and services either transcoding video or running Large Language Models (LLM's).

=== Hardware ===
Maho is a standalone Dell R730 server (2.5" drive bay variant)

Network daughter card has been swapped out for a Dell 165T0 Broadcom 57800S, a 2 port ethernet and 2 port SFP+ card.

2 GPU's are housed and used for compute workloads, a GTX 1060 6GB and a GTX 1070.

There are 3 open low profile PCIe slots.

=== Operating System ===
Mirrors runs Debian 13.

(Additional storage information)

=== Maintenance ===
New media should be added to <code>/salieri/jellyfin/import</code> and separated into each subfolder depending on media type.

Inside the *arr suite, <code>../import/(media type)</code> is mapped to <code>/downloads/(media type)</code> and can be found on the left hand bar under library import.

Select <code>/downloads/(media type)</code> depending on what *arr application you are using and the subfolder, and import all new media. If there is conflicting media, there may be an error importing, to which an admin needs to manually move the clashing media by hand over ssh.

The imported media is still living under <code>../imports</code> in the main file system; go back to *arr's main media page and look for <code>filters</code> on the right hand side. Some associated filters have been made (ex: <code>Downloads-Movies</code> for Radarr), select whichever filter fits the media you imported.

On the top function bar (same bar filters is in) select <code>Edit Movies</code>, <code>Select Series</code>, or however it is formatted for the *arr application. If filtered right, we should only see our newly imported media and not old media. If this is true click <code>Select All</code>, then edit at the very bottom of the page.

Under <code>Root Folder</code>, select the base path that best fits the newly indexed media (<code>/movies</code> for our Radarr example) and finally move the media to the base <code>/salieri/jellyfin/media/(media type)</code> folder.

====*arr====
Updates to the *arr suite are simple and should be done under the podman user. First log into the podman user <code>sudo su podman</code> and go to the podman compose directory <code>cd /opt/podman/compose/arr/</code>, then run the following one liner to pull new images (if there are any) and force recreate the stack <code>podman-compose pull && podman-compose up -d --force-recreate</code>.

<code>-d</code> daemonize's this stack (run in the background)

<code>--force-recreate</code> forces containers to be recreated with the updated image in case podman has issues taking down containers.

Updating the stack should be done as the podman user as our containers are running rootless. Do not run the update commands as another user as said user will try to spin up the containers under its sub ID's.

===Services===

Services are based on this machine but may call remote machines (and therefore remote GPU's) for remote compute via rffmpeg (transcoding) or a OpenAI reverse proxy (LLM)

====Jellyfin====
Jellyfin is installed to its default location (location) and is reverse proxied via nginx. Media is located in <code>/salieri/jellyfin/media</code> with subfolders spanning into media types. Media inside this <code>../media</code> folder is managed/renamed by the *arr suite. <code>/salieri/jellyfin/imports</code> is a holding directory for unsorted media. *arr has access to these folders as <code>/download/(subfolder)</code> and can be sorted futher/moved into <code>../media</code>.

(add more jellyfin service detail)

====*arr====
The *arr suite is running inside docker containers on maho as a single host. The compose file can be found at <code>/opt/podman/compose/arr/docker-compose.yaml</code> and holds the *arr suite as a single service, allowing for one-liner updates/replaces.

(Detail about *arr setup and how to change settings)

====Language Models (SCRAPPED)====
Language and other models are to be hosted on the two GPU's and are than reverse proxied. A user on LUG's Sillytavern (or any front end where an API can be called on) can then select what model to prompt.

Koboldcpp is currently used to run .GGUF models on mixed CPU and GPU allowing for language models (LLM), embedding models (used for data vectorization), text-to-speech (TTS), speech to text, and image generation under one application.

Docs/Switches

2026-01-04T20:15:14Z

Allennova: Got rid of k8s

[[Docs|~/Docs]]

'''For Layer 1 network details, see [[Docs/Cables]].'''

'''For Layer 3 network details, see [[Docs/OPNsense|Docs/OPNSense]].'''

== VLANs ==
{| class="wikitable"
!Network
!VLAN ID
|-
|Management
|1
|-
|LAN
|2
|-
|WAN
|640
|}

== Switch Ports ==
Clyde - Fiber switch:
{| class="wikitable"
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 640 (WAN)
|-
|1
|Shell
|
|Excluded
|Untagged
|Tagged
|-
|2
|Storage
|
|Excluded
|Untagged
|Tagged
|-
|3
|Mirrors
|
|Excluded
|Untagged
|Tagged
|-
|4
|Kurisu
|
|Excluded
|Untagged
|Tagged
|-
|5
|Okabe
|
|Excluded
|Untagged
|Tagged
|-
|6
|Daru
|
|Excluded
|Untagged
|Tagged
|-
|7
|Mayuri
|
|Excluded
|Untagged
|Tagged
|-
|8
|Luka
|
|Excluded
|Untagged
|Tagged
|-
|9
|Maho
|
|Excluded
|Untagged
|Tagged
|-
|10
|N/A
|
|Excluded
|Untagged
|Tagged
|-
|11
|ravioli
|ix1 (left SFP)
|Tagged
|Tagged
|Tagged
|-
|12
|lasagna
|
|Tagged
|Tagged
|Tagged
|-
|13
|Switch to Switch
|Port 51
|Tagged
|Tagged
|Tagged
|-
|14
|48 Port
|Port 52
|Tagged
|Tagged
|Tagged
|-
|15
|MTU Uplink
|MTU LAG 1
|Excluded
|Excluded
|Untagged
|-
|16
|MTU Uplink
|MTU LAG 2
|Excluded
|Excluded
|Untagged
|}
Bonnie - Ethernet switch:
{| class="wikitable"
|+
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 640 (WAN)
|-
|1
|
|
|Untagged
|Excluded
|Excluded
|-
|2
|
|
|Untagged
|Excluded
|Excluded
|-
|3
|
|
|Untagged
|Excluded
|Excluded
|-
|4
|
|
|Untagged
|Excluded
|Excluded
|-
|5
|
|Untagged
|Excluded
|Excluded
|-
|6
|
|
|Untagged
|Excluded
|Excluded
|-
|7
|
|
|Untagged
|Excluded
|Excluded
|-
|8
|
|
|Untagged
|Excluded
|Excluded
|-
|9
|
|
|Untagged
|Excluded
|Excluded
|-
|10
|
|
|Untagged
|Excluded
|Excluded
|-
|11
|
|
|Untagged
|Excluded
|Excluded
|-
|12
|
|
|Untagged
|Excluded
|Excluded
|-
|13
|
|
|Untagged
|Excluded
|Excluded
|-
|14
|
|
|Untagged
|Excluded
|Excluded
|-
|15
|
|
|Untagged
|Excluded
|Excluded
|-
|16
|
|
|Untagged
|Excluded
|Excluded
|-
|17
|
|
|Untagged
|Excluded
|Excluded
|-
|18
|
|
|Untagged
|Excluded
|Excluded
|-
|19
|
|
|Untagged
|Excluded
|Excluded
|-
|20
|
|
|Untagged
|Excluded
|Excluded
|-
|21
|
|
|Untagged
|Excluded
|Excluded
|-
|22
|
|
|Untagged
|Excluded
|Excluded
|-
|23
|
|
|Untagged
|Excluded
|Excluded
|-
|24
|
|
|Untagged
|Excluded
|Excluded
|-
|25
|
|
|Untagged
|Excluded
|Excluded
|-
|26
|
|
|Untagged
|Excluded
|Excluded
|-
|27
|
|
|Untagged
|Excluded
|Excluded
|-
|28
|
|
|Untagged
|Excluded
|Excluded
|-
|29
|
|
|Untagged
|Excluded
|Excluded
|-
|30
|
|
|Untagged
|Excluded
|Excluded
|-
|31
|
|
|Untagged
|Excluded
|Excluded
|-
|32
|
|
|Untagged
|Excluded
|Excluded
|-
|33
|
|
|Untagged
|Excluded
|Excluded
|-
|34
|
|
|Untagged
|Excluded
|Excluded
|-
|35
|
|
|Untagged
|Excluded
|Excluded
|-
|36
|
|
|Untagged
|Excluded
|Excluded
|-
|37
|
|
|Untagged
|Excluded
|Excluded
|-
|38
|
|
|Untagged
|Excluded
|Excluded
|-
|39
|
|
|Untagged
|Excluded
|Excluded
|-
|40
|
|
|Untagged
|Excluded
|Excluded
|-
|41
|
|
|Untagged
|Excluded
|Excluded
|-
|42
|
|
|Untagged
|Excluded
|Excluded
|-
|43
|
|
|Untagged
|Excluded
|Excluded
|-
|44
|
|
|Untagged
|Excluded
|Excluded
|-
|45
|
|
|Excluded
|Untagged
|Tagged
|-
|46
|
|
|Excluded
|Untagged
|Tagged
|-
|47
|
|
|Excluded
|Untagged
|Tagged
|-
|48
|
|
|Excluded
|Untagged
|Tagged
|-
|49
|
|
|Excluded
|Excluded
|Excluded
|-
|50
|
|
|Excluded
|Excluded
|Excluded
|-
|51
|Switch to Switch
|Fiber Switch 1 LAG
|Tagged
|Tagged
|Tagged
|-
|52
|Switch to Switch
|Fiber Switch 2 LAG
|Tagged
|Tagged
|Tagged
|}

=== WAN ===
Our WAN is a LAGG across two ports. The link needs '''LACP enabled''' ("Static mode" '''off''' in 1Gb Ubiquiti Switch) [https://www.reddit.com/r/Ubiquiti/comments/7xs70n/lag_dynamic_vs_static/duauolg/], and '''STP off'''.

IT configures their switches to automatically shut off ports if they detect STP advertisements.

Reference commands to make a Cisco switch satisfy the requirements:<syntaxhighlight lang="text">
(config-if)# spanning-tree bpdufilter enable
(config-if)# spanning-tree bpduguard disable
</syntaxhighlight>

Docs/Switches

2026-01-04T20:14:37Z

Allennova: /* Switch Ports */

[[Docs|~/Docs]]

'''For Layer 1 network details, see [[Docs/Cables]].'''

'''For Layer 3 network details, see [[Docs/OPNsense|Docs/OPNSense]].'''

== VLANs ==
{| class="wikitable"
!Network
!VLAN ID
|-
|Management
|1
|-
|LAN
|2
|-
|kubernetes
|30
|-
|WAN
|640
|}

== Switch Ports ==
Clyde - Fiber switch:
{| class="wikitable"
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 640 (WAN)
|-
|1
|Shell
|
|Excluded
|Untagged
|Tagged
|-
|2
|Storage
|
|Excluded
|Untagged
|Tagged
|-
|3
|Mirrors
|
|Excluded
|Untagged
|Tagged
|-
|4
|Kurisu
|
|Excluded
|Untagged
|Tagged
|-
|5
|Okabe
|
|Excluded
|Untagged
|Tagged
|-
|6
|Daru
|
|Excluded
|Untagged
|Tagged
|-
|7
|Mayuri
|
|Excluded
|Untagged
|Tagged
|-
|8
|Luka
|
|Excluded
|Untagged
|Tagged
|-
|9
|Maho
|
|Excluded
|Untagged
|Tagged
|-
|10
|N/A
|
|Excluded
|Untagged
|Tagged
|-
|11
|ravioli
|ix1 (left SFP)
|Tagged
|Tagged
|Tagged
|-
|12
|lasagna
|
|Tagged
|Tagged
|Tagged
|-
|13
|Switch to Switch
|Port 51
|Tagged
|Tagged
|Tagged
|-
|14
|48 Port
|Port 52
|Tagged
|Tagged
|Tagged
|-
|15
|MTU Uplink
|MTU LAG 1
|Excluded
|Excluded
|Untagged
|-
|16
|MTU Uplink
|MTU LAG 2
|Excluded
|Excluded
|Untagged
|}
Bonnie - Ethernet switch:
{| class="wikitable"
|+
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 640 (WAN)
|-
|1
|
|
|Untagged
|Excluded
|Excluded
|-
|2
|
|
|Untagged
|Excluded
|Excluded
|-
|3
|
|
|Untagged
|Excluded
|Excluded
|-
|4
|
|
|Untagged
|Excluded
|Excluded
|-
|5
|
|Untagged
|Excluded
|Excluded
|-
|6
|
|
|Untagged
|Excluded
|Excluded
|-
|7
|
|
|Untagged
|Excluded
|Excluded
|-
|8
|
|
|Untagged
|Excluded
|Excluded
|-
|9
|
|
|Untagged
|Excluded
|Excluded
|-
|10
|
|
|Untagged
|Excluded
|Excluded
|-
|11
|
|
|Untagged
|Excluded
|Excluded
|-
|12
|
|
|Untagged
|Excluded
|Excluded
|-
|13
|
|
|Untagged
|Excluded
|Excluded
|-
|14
|
|
|Untagged
|Excluded
|Excluded
|-
|15
|
|
|Untagged
|Excluded
|Excluded
|-
|16
|
|
|Untagged
|Excluded
|Excluded
|-
|17
|
|
|Untagged
|Excluded
|Excluded
|-
|18
|
|
|Untagged
|Excluded
|Excluded
|-
|19
|
|
|Untagged
|Excluded
|Excluded
|-
|20
|
|
|Untagged
|Excluded
|Excluded
|-
|21
|
|
|Untagged
|Excluded
|Excluded
|-
|22
|
|
|Untagged
|Excluded
|Excluded
|-
|23
|
|
|Untagged
|Excluded
|Excluded
|-
|24
|
|
|Untagged
|Excluded
|Excluded
|-
|25
|
|
|Untagged
|Excluded
|Excluded
|-
|26
|
|
|Untagged
|Excluded
|Excluded
|-
|27
|
|
|Untagged
|Excluded
|Excluded
|-
|28
|
|
|Untagged
|Excluded
|Excluded
|-
|29
|
|
|Untagged
|Excluded
|Excluded
|-
|30
|
|
|Untagged
|Excluded
|Excluded
|-
|31
|
|
|Untagged
|Excluded
|Excluded
|-
|32
|
|
|Untagged
|Excluded
|Excluded
|-
|33
|
|
|Untagged
|Excluded
|Excluded
|-
|34
|
|
|Untagged
|Excluded
|Excluded
|-
|35
|
|
|Untagged
|Excluded
|Excluded
|-
|36
|
|
|Untagged
|Excluded
|Excluded
|-
|37
|
|
|Untagged
|Excluded
|Excluded
|-
|38
|
|
|Untagged
|Excluded
|Excluded
|-
|39
|
|
|Untagged
|Excluded
|Excluded
|-
|40
|
|
|Untagged
|Excluded
|Excluded
|-
|41
|
|
|Untagged
|Excluded
|Excluded
|-
|42
|
|
|Untagged
|Excluded
|Excluded
|-
|43
|
|
|Untagged
|Excluded
|Excluded
|-
|44
|
|
|Untagged
|Excluded
|Excluded
|-
|45
|
|
|Excluded
|Untagged
|Tagged
|-
|46
|
|
|Excluded
|Untagged
|Tagged
|-
|47
|
|
|Excluded
|Untagged
|Tagged
|-
|48
|
|
|Excluded
|Untagged
|Tagged
|-
|49
|
|
|Excluded
|Excluded
|Excluded
|-
|50
|
|
|Excluded
|Excluded
|Excluded
|-
|51
|Switch to Switch
|Fiber Switch 1 LAG
|Tagged
|Tagged
|Tagged
|-
|52
|Switch to Switch
|Fiber Switch 2 LAG
|Tagged
|Tagged
|Tagged
|}

=== WAN ===
Our WAN is a LAGG across two ports. The link needs '''LACP enabled''' ("Static mode" '''off''' in 1Gb Ubiquiti Switch) [https://www.reddit.com/r/Ubiquiti/comments/7xs70n/lag_dynamic_vs_static/duauolg/], and '''STP off'''.

IT configures their switches to automatically shut off ports if they detect STP advertisements.

Reference commands to make a Cisco switch satisfy the requirements:<syntaxhighlight lang="text">
(config-if)# spanning-tree bpdufilter enable
(config-if)# spanning-tree bpduguard disable
</syntaxhighlight>

Docs/Switches

2026-01-04T20:14:06Z

Allennova: /* Switch Ports */

[[Docs|~/Docs]]

'''For Layer 1 network details, see [[Docs/Cables]].'''

'''For Layer 3 network details, see [[Docs/OPNsense|Docs/OPNSense]].'''

== VLANs ==
{| class="wikitable"
!Network
!VLAN ID
|-
|Management
|1
|-
|LAN
|2
|-
|kubernetes
|30
|-
|WAN
|640
|}

== Switch Ports ==
Clyde - Fiber switch:
{| class="wikitable"
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 640 (WAN)
|-
|1
|Shell
|
|Excluded
|Untagged
|Tagged
|-
|2
|Storage
|
|Excluded
|Untagged
|Tagged
|-
|3
|Mirrors
|
|Excluded
|Untagged
|Tagged
|-
|4
|Kurisu
|
|Excluded
|Untagged
|Tagged
|-
|5
|Okabe
|
|Excluded
|Untagged
|Tagged
|-
|6
|Daru
|
|Excluded
|Untagged
|Tagged
|-
|7
|Mayuri
|
|Excluded
|Untagged
|Tagged
|-
|8
|Luka
|
|Excluded
|Untagged
|Tagged
|-
|9
|Watch
|
|Excluded
|Untagged
|Tagged
|-
|10
|N/A
|
|Excluded
|Untagged
|Tagged
|-
|11
|ravioli
|ix1 (left SFP)
|Tagged
|Tagged
|Tagged
|-
|12
|lasagna
|
|Tagged
|Tagged
|Tagged
|-
|13
|Switch to Switch
|Port 51
|Tagged
|Tagged
|Tagged
|-
|14
|48 Port
|Port 52
|Tagged
|Tagged
|Tagged
|-
|15
|MTU Uplink
|MTU LAG 1
|Excluded
|Excluded
|Untagged
|-
|16
|MTU Uplink
|MTU LAG 2
|Excluded
|Excluded
|Untagged
|}
Bonnie - Ethernet switch:
{| class="wikitable"
|+
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 640 (WAN)
|-
|1
|
|
|Untagged
|Excluded
|Excluded
|-
|2
|
|
|Untagged
|Excluded
|Excluded
|-
|3
|
|
|Untagged
|Excluded
|Excluded
|-
|4
|
|
|Untagged
|Excluded
|Excluded
|-
|5
|
|Untagged
|Excluded
|Excluded
|-
|6
|
|
|Untagged
|Excluded
|Excluded
|-
|7
|
|
|Untagged
|Excluded
|Excluded
|-
|8
|
|
|Untagged
|Excluded
|Excluded
|-
|9
|
|
|Untagged
|Excluded
|Excluded
|-
|10
|
|
|Untagged
|Excluded
|Excluded
|-
|11
|
|
|Untagged
|Excluded
|Excluded
|-
|12
|
|
|Untagged
|Excluded
|Excluded
|-
|13
|
|
|Untagged
|Excluded
|Excluded
|-
|14
|
|
|Untagged
|Excluded
|Excluded
|-
|15
|
|
|Untagged
|Excluded
|Excluded
|-
|16
|
|
|Untagged
|Excluded
|Excluded
|-
|17
|
|
|Untagged
|Excluded
|Excluded
|-
|18
|
|
|Untagged
|Excluded
|Excluded
|-
|19
|
|
|Untagged
|Excluded
|Excluded
|-
|20
|
|
|Untagged
|Excluded
|Excluded
|-
|21
|
|
|Untagged
|Excluded
|Excluded
|-
|22
|
|
|Untagged
|Excluded
|Excluded
|-
|23
|
|
|Untagged
|Excluded
|Excluded
|-
|24
|
|
|Untagged
|Excluded
|Excluded
|-
|25
|
|
|Untagged
|Excluded
|Excluded
|-
|26
|
|
|Untagged
|Excluded
|Excluded
|-
|27
|
|
|Untagged
|Excluded
|Excluded
|-
|28
|
|
|Untagged
|Excluded
|Excluded
|-
|29
|
|
|Untagged
|Excluded
|Excluded
|-
|30
|
|
|Untagged
|Excluded
|Excluded
|-
|31
|
|
|Untagged
|Excluded
|Excluded
|-
|32
|
|
|Untagged
|Excluded
|Excluded
|-
|33
|
|
|Untagged
|Excluded
|Excluded
|-
|34
|
|
|Untagged
|Excluded
|Excluded
|-
|35
|
|
|Untagged
|Excluded
|Excluded
|-
|36
|
|
|Untagged
|Excluded
|Excluded
|-
|37
|
|
|Untagged
|Excluded
|Excluded
|-
|38
|
|
|Untagged
|Excluded
|Excluded
|-
|39
|
|
|Untagged
|Excluded
|Excluded
|-
|40
|
|
|Untagged
|Excluded
|Excluded
|-
|41
|
|
|Untagged
|Excluded
|Excluded
|-
|42
|
|
|Untagged
|Excluded
|Excluded
|-
|43
|
|
|Untagged
|Excluded
|Excluded
|-
|44
|
|
|Untagged
|Excluded
|Excluded
|-
|45
|
|
|Excluded
|Untagged
|Tagged
|-
|46
|
|
|Excluded
|Untagged
|Tagged
|-
|47
|
|
|Excluded
|Untagged
|Tagged
|-
|48
|
|
|Excluded
|Untagged
|Tagged
|-
|49
|
|
|Excluded
|Excluded
|Excluded
|-
|50
|
|
|Excluded
|Excluded
|Excluded
|-
|51
|Switch to Switch
|Fiber Switch 1 LAG
|Tagged
|Tagged
|Tagged
|-
|52
|Switch to Switch
|Fiber Switch 2 LAG
|Tagged
|Tagged
|Tagged
|}

=== WAN ===
Our WAN is a LAGG across two ports. The link needs '''LACP enabled''' ("Static mode" '''off''' in 1Gb Ubiquiti Switch) [https://www.reddit.com/r/Ubiquiti/comments/7xs70n/lag_dynamic_vs_static/duauolg/], and '''STP off'''.

IT configures their switches to automatically shut off ports if they detect STP advertisements.

Reference commands to make a Cisco switch satisfy the requirements:<syntaxhighlight lang="text">
(config-if)# spanning-tree bpdufilter enable
(config-if)# spanning-tree bpduguard disable
</syntaxhighlight>

Docs/Switches

2026-01-04T20:10:39Z

Allennova: Updated switch ports as of 1/4/26

[[Docs|~/Docs]]

'''For Layer 1 network details, see [[Docs/Cables]].'''

'''For Layer 3 network details, see [[Docs/OPNsense|Docs/OPNSense]].'''

== VLANs ==
{| class="wikitable"
!Network
!VLAN ID
|-
|Management
|1
|-
|LAN
|2
|-
|kubernetes
|30
|-
|WAN
|640
|}

== Switch Ports ==
Clyde - Fiber switch:
{| class="wikitable"
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 640 (WAN)
|-
|1
|Shell
|
|Excluded
|Untagged
|Excluded
|-
|2
|Storage
|
|Excluded
|Untagged
|Excluded
|-
|3
|Mirrors
|
|Excluded
|Untagged
|Excluded
|-
|4
|Kurisu
|
|Excluded
|Untagged
|Excluded
|-
|5
|Okabe
|
|Excluded
|Untagged
|Excluded
|-
|6
|Daru
|
|Excluded
|Untagged
|Excluded
|-
|7
|Mayuri
|
|Excluded
|Untagged
|Excluded
|-
|8
|Luka
|
|Excluded
|Untagged
|Excluded
|-
|9
|Watch
|
|Excluded
|Untagged
|Excluded
|-
|10
|N/A
|
|Excluded
|Untagged
|Excluded
|-
|11
|ravioli
|ix1 (left SFP)
|Tagged
|Tagged
|Excluded
|-
|12
|lasagna
|
|Tagged
|Tagged
|Excluded
|-
|13
|48 Port
|Port 45
|Tagged
|Tagged
|Excluded
|-
|14
|48 Port
|Port 46
|Tagged
|Tagged
|Excluded
|-
|15
|48 Port
|Port 47
|Tagged
|Tagged
|Excluded
|-
|16
|48 Port
|Port 48
|Tagged
|Tagged
|Excluded
|}
Bonnie - Ethernet switch:
{| class="wikitable"
|+
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 640 (WAN)
|-
|1
|
|
|Untagged
|Excluded
|Excluded
|-
|2
|
|
|Untagged
|Excluded
|Excluded
|-
|3
|
|
|Untagged
|Excluded
|Excluded
|-
|4
|
|
|Untagged
|Excluded
|Excluded
|-
|5
|
|Untagged
|Excluded
|Excluded
|-
|6
|
|
|Untagged
|Excluded
|Excluded
|-
|7
|
|
|Untagged
|Excluded
|Excluded
|-
|8
|
|
|Untagged
|Excluded
|Excluded
|-
|9
|
|
|Untagged
|Excluded
|Excluded
|-
|10
|
|
|Untagged
|Excluded
|Excluded
|-
|11
|
|
|Untagged
|Excluded
|Excluded
|-
|12
|
|
|Untagged
|Excluded
|Excluded
|-
|13
|
|
|Untagged
|Excluded
|Excluded
|-
|14
|
|
|Untagged
|Excluded
|Excluded
|-
|15
|
|
|Untagged
|Excluded
|Excluded
|-
|16
|
|
|Untagged
|Excluded
|Excluded
|-
|17
|
|
|Untagged
|Excluded
|Excluded
|-
|18
|
|
|Untagged
|Excluded
|Excluded
|-
|19
|
|
|Untagged
|Excluded
|Excluded
|-
|20
|
|
|Untagged
|Excluded
|Excluded
|-
|21
|
|
|Untagged
|Excluded
|Excluded
|-
|22
|
|
|Untagged
|Excluded
|Excluded
|-
|23
|
|
|Untagged
|Excluded
|Excluded
|-
|24
|
|
|Untagged
|Excluded
|Excluded
|-
|25
|
|
|Untagged
|Excluded
|Excluded
|-
|26
|
|
|Untagged
|Excluded
|Excluded
|-
|27
|
|
|Untagged
|Excluded
|Excluded
|-
|28
|
|
|Untagged
|Excluded
|Excluded
|-
|29
|
|
|Untagged
|Excluded
|Excluded
|-
|30
|
|
|Untagged
|Excluded
|Excluded
|-
|31
|
|
|Untagged
|Excluded
|Excluded
|-
|32
|
|
|Untagged
|Excluded
|Excluded
|-
|33
|
|
|Untagged
|Excluded
|Excluded
|-
|34
|
|
|Untagged
|Excluded
|Excluded
|-
|35
|
|
|Untagged
|Excluded
|Excluded
|-
|36
|
|
|Untagged
|Excluded
|Excluded
|-
|37
|
|
|Untagged
|Excluded
|Excluded
|-
|38
|
|
|Untagged
|Excluded
|Excluded
|-
|39
|
|
|Untagged
|Excluded
|Excluded
|-
|40
|
|
|Untagged
|Excluded
|Excluded
|-
|41
|
|
|Untagged
|Excluded
|Excluded
|-
|42
|
|
|Untagged
|Excluded
|Excluded
|-
|43
|
|
|Untagged
|Excluded
|Excluded
|-
|44
|
|
|Untagged
|Excluded
|Excluded
|-
|45
|
|
|Excluded
|Untagged
|Tagged
|-
|46
|
|
|Excluded
|Untagged
|Tagged
|-
|47
|
|
|Excluded
|Untagged
|Tagged
|-
|48
|
|
|Excluded
|Untagged
|Tagged
|-
|49
|
|
|Excluded
|Excluded
|Excluded
|-
|50
|
|
|Excluded
|Excluded
|Excluded
|-
|51
|Switch to Switch
|Fiber Switch 1 LAG
|Tagged
|Tagged
|Tagged
|-
|52
|Switch to Switch
|Fiber Switch 2 LAG
|Tagged
|Tagged
|Tagged
|}

=== WAN ===
Our WAN is a LAGG across two ports. The link needs '''LACP enabled''' ("Static mode" '''off''' in 1Gb Ubiquiti Switch) [https://www.reddit.com/r/Ubiquiti/comments/7xs70n/lag_dynamic_vs_static/duauolg/], and '''STP off'''.

IT configures their switches to automatically shut off ports if they detect STP advertisements.

Reference commands to make a Cisco switch satisfy the requirements:<syntaxhighlight lang="text">
(config-if)# spanning-tree bpdufilter enable
(config-if)# spanning-tree bpduguard disable
</syntaxhighlight>

Docs/Maho

2026-01-04T19:55:51Z

Allennova: /* Language Models */

Maho holds a number of Graphical Processing Units (GPUs) and services either transcoding video or running Large Language Models (LLM's).

=== Hardware ===
Maho is a standalone Dell R730 server (2.5" drive bay variant)

Network daughter card has been swapped out for a Dell 165T0 Broadcom 57800S, a 2 port ethernet and 2 port SFP+ card.

2 GPU's are housed and used for compute workloads, a GTX 1060 6GB and a GTX 1070.

There are 3 open low profile PCIe slots.

=== Operating System ===
Mirrors runs Debian 13.

(Additional storage information)

=== Maintenance ===
New media should be added to <code>/salieri/jellyfin/import</code> and separated into each subfolder depending on media type.

Inside the *arr suite, <code>../import/(media type)</code> is mapped to <code>/downloads/(media type)</code> and can be found on the left hand bar under library import.

Select <code>/downloads/(media type)</code> depending on what *arr application you are using and the subfolder, and import all new media. If there is conflicting media, there may be an error importing, to which an admin needs to manually move the clashing media by hand over ssh.

The imported media is still living under <code>../imports</code> in the main file system; go back to *arr's main media page and look for <code>filters</code> on the right hand side. Some associated filters have been made (ex: <code>Downloads-Movies</code> for Radarr), select whichever filter fits the media you imported.

On the top function bar (same bar filters is in) select <code>Edit Movies</code>, <code>Select Series</code>, or however it is formatted for the *arr application. If filtered right, we should only see our newly imported media and not old media. If this is true click <code>Select All</code>, then edit at the very bottom of the page.

Under <code>Root Folder</code>, select the base path that best fits the newly indexed media (<code>/movies</code> for our Radarr example) and finally move the media to the base <code>/salieri/jellyfin/media/(media type)</code> folder.

====*arr====
Updates to the *arr suite are simple and should be done under the podman user. First log into the podman user <code>sudo su podman</code> and go to the podman compose directory <code>cd /opt/podman/compose/arr/</code>, then run the following one liner to pull new images (if there are any) and force recreate the stack <code>podman-compose pull && podman-compose up -d --force-recreate</code>.

<code>-d</code> daemonize's this stack (run in the background)

<code>--force-recreate</code> forces containers to be recreated with the updated image in case podman has issues taking down containers.

Updating the stack should be done as the podman user as our containers are running rootless. Do not run the update commands as another user as said user will try to spin up the containers under its sub ID's.

===Services===

Services are based on this machine but may call remote machines (and therefore remote GPU's) for remote compute via rffmpeg (transcoding) or a OpenAI reverse proxy (LLM)

====Jellyfin====
Jellyfin is installed to its default location (location) and is reverse proxied via nginx. Media is located in <code>/salieri/jellyfin/media</code> with subfolders spanning into media types. Media inside this <code>../media</code> folder is managed/renamed by the *arr suite. <code>/salieri/jellyfin/imports</code> is a holding directory for unsorted media. *arr has access to these folders as <code>/download/(subfolder)</code> and can be sorted futher/moved into <code>../media</code>.

(add more jellyfin service detail)

====*arr====
The *arr suite is running inside docker containers on maho as a single host. The compose file can be found at <code>/opt/podman/compose/arr/docker-compose.yaml</code> and holds the *arr suite as a single service, allowing for one-liner updates/replaces.

(Detail about *arr setup and how to change settings)

====Language Models====
Language and other models are to be hosted on the two GPU's and are than reverse proxied. A user on LUG's Sillytavern (or any front end where an API can be called on) can then select what model to prompt.

Koboldcpp is currently used to run .GGUF models on mixed CPU and GPU allowing for language models (LLM), embedding models (used for data vectorization), text-to-speech (TTS), speech to text, and image generation under one application.

Docs/Maho

2026-01-04T19:53:26Z

Allennova: /* Maintenance */

Maho holds a number of Graphical Processing Units (GPUs) and services either transcoding video or running Large Language Models (LLM's).

=== Hardware ===
Maho is a standalone Dell R730 server (2.5" drive bay variant)

Network daughter card has been swapped out for a Dell 165T0 Broadcom 57800S, a 2 port ethernet and 2 port SFP+ card.

2 GPU's are housed and used for compute workloads, a GTX 1060 6GB and a GTX 1070.

There are 3 open low profile PCIe slots.

=== Operating System ===
Mirrors runs Debian 13.

(Additional storage information)

=== Maintenance ===
New media should be added to <code>/salieri/jellyfin/import</code> and separated into each subfolder depending on media type.

Inside the *arr suite, <code>../import/(media type)</code> is mapped to <code>/downloads/(media type)</code> and can be found on the left hand bar under library import.

Select <code>/downloads/(media type)</code> depending on what *arr application you are using and the subfolder, and import all new media. If there is conflicting media, there may be an error importing, to which an admin needs to manually move the clashing media by hand over ssh.

The imported media is still living under <code>../imports</code> in the main file system; go back to *arr's main media page and look for <code>filters</code> on the right hand side. Some associated filters have been made (ex: <code>Downloads-Movies</code> for Radarr), select whichever filter fits the media you imported.

On the top function bar (same bar filters is in) select <code>Edit Movies</code>, <code>Select Series</code>, or however it is formatted for the *arr application. If filtered right, we should only see our newly imported media and not old media. If this is true click <code>Select All</code>, then edit at the very bottom of the page.

Under <code>Root Folder</code>, select the base path that best fits the newly indexed media (<code>/movies</code> for our Radarr example) and finally move the media to the base <code>/salieri/jellyfin/media/(media type)</code> folder.

====*arr====
Updates to the *arr suite are simple and should be done under the podman user. First log into the podman user <code>sudo su podman</code> and go to the podman compose directory <code>cd /opt/podman/compose/arr/</code>, then run the following one liner to pull new images (if there are any) and force recreate the stack <code>podman-compose pull && podman-compose up -d --force-recreate</code>.

<code>-d</code> daemonize's this stack (run in the background)

<code>--force-recreate</code> forces containers to be recreated with the updated image in case podman has issues taking down containers.

Updating the stack should be done as the podman user as our containers are running rootless. Do not run the update commands as another user as said user will try to spin up the containers under its sub ID's.

===Services===

Services are based on this machine but may call remote machines (and therefore remote GPU's) for remote compute via rffmpeg (transcoding) or a OpenAI reverse proxy (LLM)

====Jellyfin====
Jellyfin is installed to its default location (location) and is reverse proxied via nginx. Media is located in <code>/salieri/jellyfin/media</code> with subfolders spanning into media types. Media inside this <code>../media</code> folder is managed/renamed by the *arr suite. <code>/salieri/jellyfin/imports</code> is a holding directory for unsorted media. *arr has access to these folders as <code>/download/(subfolder)</code> and can be sorted futher/moved into <code>../media</code>.

(add more jellyfin service detail)

====*arr====
The *arr suite is running inside docker containers on maho as a single host. The compose file can be found at <code>/opt/podman/compose/arr/docker-compose.yaml</code> and holds the *arr suite as a single service, allowing for one-liner updates/replaces.

(Detail about *arr setup and how to change settings)

====Language Models====
Small language models are to be hosted on the two separate GPU's via docker to allow different models running behind the reverse proxy. A user on LUG's Sillytavern (or any front end where an API can be called on) can then select what model to prompt.

Koboldcpp is currently used to run .GGUF models on mixed CPU and GPU allowing for language models (LLM), embedding models (used for data vectorization), text-to-speech (TTS), speech to text, and image generation under one application.

Docs/Maho

2026-01-04T19:51:12Z

Allennova: Specified kobold as used backend

Maho holds a number of Graphical Processing Units (GPUs) and services either transcoding video or running Large Language Models (LLM's).

=== Hardware ===
Maho is a standalone Dell R730 server (2.5" drive bay variant)

Network daughter card has been swapped out for a Dell 165T0 Broadcom 57800S, a 2 port ethernet and 2 port SFP+ card.

2 GPU's are housed and used for compute workloads, a GTX 1060 6GB and a GTX 1070.

There are 3 open low profile PCIe slots.

=== Operating System ===
Mirrors runs Debian 13.

(Additional storage information)

=== Maintenance ===
Media is added to <code>/salieri/jellyfin/import</code> with sub folders for each media type.

Inside the *arr suite, <code>../import/</code> is mapped to <code>/downloads</code> and can be found on the left hand bar under library import.

Select <code>/downloads/(media type)</code> depending on what *arr application you are using and the media type, and import all new media. If there is conflicting media, there may be an error importing, to which an admin needs to manually move the clashing media by hand over ssh.

The imported media is still living under <code>../imports</code> in the main file system; go back to *arr's main media page and look for <code>filters</code> on the right hand side. Some associated filters have been made (ex: <code>Downloads-Movies</code> for Radarr), select whichever filter fits the media you imported.

On the top function bar (same bar filters is in) select <code>Edit Movies</code>, <code>Select Series</code>, or however it is formatted for the *arr application. If filtered right, we should only see our newly imported media and not old media. If this is true click <code>Select All</code>, then edit at the very bottom of the page.

Under <code>Root Folder</code>, select the base path that best fits the newly indexed media (<code>/movies</code> for our Radarr example) and finally move the media to the base <code>/salieri/jellyfin/media/(media type)</code> folder.

====*arr====
Updates to the *arr suite are simple and should be done under the podman user. First log into the podman user <code>sudo su podman</code> and go to the podman compose directory <code>cd /opt/podman/compose/arr/</code>, then run the following one liner to pull new images (if there are any) and force recreate the stack <code>podman-compose pull && podman-compose up -d --force-recreate</code>.

<code>-d</code> daemonize's this stack (run in the background)

<code>--force-recreate</code> forces containers to be recreated with the updated image in case podman has issues taking down containers.

Updating the stack should be done as the podman user as our containers are running rootless. Do not run the update commands as another user as said user will try to spin up the containers under its sub ID's.

===Services===

Services are based on this machine but may call remote machines (and therefore remote GPU's) for remote compute via rffmpeg (transcoding) or a OpenAI reverse proxy (LLM)

====Jellyfin====
Jellyfin is installed to its default location (location) and is reverse proxied via nginx. Media is located in <code>/salieri/jellyfin/media</code> with subfolders spanning into media types. Media inside this <code>../media</code> folder is managed/renamed by the *arr suite. <code>/salieri/jellyfin/imports</code> is a holding directory for unsorted media. *arr has access to these folders as <code>/download/(subfolder)</code> and can be sorted futher/moved into <code>../media</code>.

(add more jellyfin service detail)

====*arr====
The *arr suite is running inside docker containers on maho as a single host. The compose file can be found at <code>/opt/podman/compose/arr/docker-compose.yaml</code> and holds the *arr suite as a single service, allowing for one-liner updates/replaces.

(Detail about *arr setup and how to change settings)

====Language Models====
Small language models are to be hosted on the two separate GPU's via docker to allow different models running behind the reverse proxy. A user on LUG's Sillytavern (or any front end where an API can be called on) can then select what model to prompt.

Koboldcpp is currently used to run .GGUF models on mixed CPU and GPU allowing for language models (LLM), embedding models (used for data vectorization), text-to-speech (TTS), speech to text, and image generation under one application.

Docs/Maho

2026-01-04T19:43:37Z

Allennova: /* *arr */

Maho holds a number of Graphical Processing Units (GPUs) and services either transcoding video or running Large Language Models (LLM's).

=== Hardware ===
Maho is a standalone Dell R730 server (2.5" drive bay variant)

Network daughter card has been swapped out for a Dell 165T0 Broadcom 57800S, a 2 port ethernet and 2 port SFP+ card.

2 GPU's are housed and used for compute workloads, a GTX 1060 6GB and a GTX 1070.

There are 3 open low profile PCIe slots.

=== Operating System ===
Mirrors runs Debian 13.

(Additional storage information)

=== Maintenance ===
Media is added to <code>/salieri/jellyfin/import</code> with sub folders for each media type.

Inside the *arr suite, <code>../import/</code> is mapped to <code>/downloads</code> and can be found on the left hand bar under library import.

Select <code>/downloads/(media type)</code> depending on what *arr application you are using and the media type, and import all new media. If there is conflicting media, there may be an error importing, to which an admin needs to manually move the clashing media by hand over ssh.

The imported media is still living under <code>../imports</code> in the main file system; go back to *arr's main media page and look for <code>filters</code> on the right hand side. Some associated filters have been made (ex: <code>Downloads-Movies</code> for Radarr), select whichever filter fits the media you imported.

On the top function bar (same bar filters is in) select <code>Edit Movies</code>, <code>Select Series</code>, or however it is formatted for the *arr application. If filtered right, we should only see our newly imported media and not old media. If this is true click <code>Select All</code>, then edit at the very bottom of the page.

Under <code>Root Folder</code>, select the base path that best fits the newly indexed media (<code>/movies</code> for our Radarr example) and finally move the media to the base <code>/salieri/jellyfin/media/(media type)</code> folder.

====*arr====
Updates to the *arr suite are simple and should be done under the podman user. First log into the podman user <code>sudo su podman</code> and go to the podman compose directory <code>cd /opt/podman/compose/arr/</code>, then run the following one liner to pull new images (if there are any) and force recreate the stack <code>podman-compose pull && podman-compose up -d --force-recreate</code>.

<code>-d</code> daemonize's this stack (run in the background)

<code>--force-recreate</code> forces containers to be recreated with the updated image in case podman has issues taking down containers.

Updating the stack should be done as the podman user as our containers are running rootless. Do not run the update commands as another user as said user will try to spin up the containers under its sub ID's.

===Services===

Services are based on this machine but may call remote machines (and therefore remote GPU's) for remote compute via rffmpeg (transcoding) or a OpenAI reverse proxy (LLM)

====Jellyfin====
Jellyfin is installed to its default location (location) and is reverse proxied via nginx. Media is located in <code>/salieri/jellyfin/media</code> with subfolders spanning into media types. Media inside this <code>../media</code> folder is managed/renamed by the *arr suite. <code>/salieri/jellyfin/imports</code> is a holding directory for unsorted media. *arr has access to these folders as <code>/download/(subfolder)</code> and can be sorted futher/moved into <code>../media</code>.

(add more jellyfin service detail)

====*arr====
The *arr suite is running inside docker containers on maho as a single host. The compose file can be found at <code>/opt/podman/compose/arr/docker-compose.yaml</code> and holds the *arr suite as a single service, allowing for one-liner updates/replaces.

(Detail about *arr setup and how to change settings)

====Language Models====
Small language models are to be hosted on the two separate GPU's via docker to allow different models running behind the reverse proxy. A user on LUG's Sillytavern (or any front end where an API can be called on) can then select what model to prompt.

(Allen thing)

Docs/Maho

2026-01-04T19:43:12Z

Allennova: /* *arr */

Maho holds a number of Graphical Processing Units (GPUs) and services either transcoding video or running Large Language Models (LLM's).

=== Hardware ===
Maho is a standalone Dell R730 server (2.5" drive bay variant)

Network daughter card has been swapped out for a Dell 165T0 Broadcom 57800S, a 2 port ethernet and 2 port SFP+ card.

2 GPU's are housed and used for compute workloads, a GTX 1060 6GB and a GTX 1070.

There are 3 open low profile PCIe slots.

=== Operating System ===
Mirrors runs Debian 13.

(Additional storage information)

=== Maintenance ===
Media is added to <code>/salieri/jellyfin/import</code> with sub folders for each media type.

Inside the *arr suite, <code>../import/</code> is mapped to <code>/downloads</code> and can be found on the left hand bar under library import.

Select <code>/downloads/(media type)</code> depending on what *arr application you are using and the media type, and import all new media. If there is conflicting media, there may be an error importing, to which an admin needs to manually move the clashing media by hand over ssh.

The imported media is still living under <code>../imports</code> in the main file system; go back to *arr's main media page and look for <code>filters</code> on the right hand side. Some associated filters have been made (ex: <code>Downloads-Movies</code> for Radarr), select whichever filter fits the media you imported.

On the top function bar (same bar filters is in) select <code>Edit Movies</code>, <code>Select Series</code>, or however it is formatted for the *arr application. If filtered right, we should only see our newly imported media and not old media. If this is true click <code>Select All</code>, then edit at the very bottom of the page.

Under <code>Root Folder</code>, select the base path that best fits the newly indexed media (<code>/movies</code> for our Radarr example) and finally move the media to the base <code>/salieri/jellyfin/media/(media type)</code> folder.

====*arr====
Updates to the *arr suite are simple and should be done under the podman user. First log into the podman user <code>sudo su podman</code> and go to the podman compose directory <code>cd /opt/podman/compose/arr/</code>, then run the following one liner to pull new images (if there are any) and force recreate the stack <code>podman-compose pull && podman-compose up -d --force-recreate</code>.

<code>-d</code> daemonize's this stack (run in the background)

<code>--force-recreate</code> forces containers to be recreated with the updated image in case podman has issues taking down containers.

Updating the stack should be done as the podman user as our containers are running rootless. Do not run the update commands as another user as your user will try to spin up the containers under its sub ID's.

===Services===

Services are based on this machine but may call remote machines (and therefore remote GPU's) for remote compute via rffmpeg (transcoding) or a OpenAI reverse proxy (LLM)

====Jellyfin====
Jellyfin is installed to its default location (location) and is reverse proxied via nginx. Media is located in <code>/salieri/jellyfin/media</code> with subfolders spanning into media types. Media inside this <code>../media</code> folder is managed/renamed by the *arr suite. <code>/salieri/jellyfin/imports</code> is a holding directory for unsorted media. *arr has access to these folders as <code>/download/(subfolder)</code> and can be sorted futher/moved into <code>../media</code>.

(add more jellyfin service detail)

====*arr====
The *arr suite is running inside docker containers on maho as a single host. The compose file can be found at <code>/opt/podman/compose/arr/docker-compose.yaml</code> and holds the *arr suite as a single service, allowing for one-liner updates/replaces.

(Detail about *arr setup and how to change settings)

====Language Models====
Small language models are to be hosted on the two separate GPU's via docker to allow different models running behind the reverse proxy. A user on LUG's Sillytavern (or any front end where an API can be called on) can then select what model to prompt.

(Allen thing)

Docs/Maho

2026-01-04T19:41:00Z

Allennova: How to import media rough draft

Maho holds a number of Graphical Processing Units (GPUs) and services either transcoding video or running Large Language Models (LLM's).

=== Hardware ===
Maho is a standalone Dell R730 server (2.5" drive bay variant)

Network daughter card has been swapped out for a Dell 165T0 Broadcom 57800S, a 2 port ethernet and 2 port SFP+ card.

2 GPU's are housed and used for compute workloads, a GTX 1060 6GB and a GTX 1070.

There are 3 open low profile PCIe slots.

=== Operating System ===
Mirrors runs Debian 13.

(Additional storage information)

=== Maintenance ===
Media is added to <code>/salieri/jellyfin/import</code> with sub folders for each media type.

Inside the *arr suite, <code>../import/</code> is mapped to <code>/downloads</code> and can be found on the left hand bar under library import.

Select <code>/downloads/(media type)</code> depending on what *arr application you are using and the media type, and import all new media. If there is conflicting media, there may be an error importing, to which an admin needs to manually move the clashing media by hand over ssh.

The imported media is still living under <code>../imports</code> in the main file system; go back to *arr's main media page and look for <code>filters</code> on the right hand side. Some associated filters have been made (ex: <code>Downloads-Movies</code> for Radarr), select whichever filter fits the media you imported.

On the top function bar (same bar filters is in) select <code>Edit Movies</code>, <code>Select Series</code>, or however it is formatted for the *arr application. If filtered right, we should only see our newly imported media and not old media. If this is true click <code>Select All</code>, then edit at the very bottom of the page.

Under <code>Root Folder</code>, select the base path that best fits the newly indexed media (<code>/movies</code> for our Radarr example) and finally move the media to the base <code>/salieri/jellyfin/media/(media type)</code> folder.

====*arr====
Updates to the *arr suite are simple and should be done under the podman user. First log into the podman user <code>sudo su podman</code> and go to the podman compose directory <code>cd /opt/podman/compose/arr/</code>, then run the following one liner to pull new images (if there are any) and force recreate the stack <code>podman-compose pull && podman-compose up -d --force-recreate</code>.

<code>-d</code> daemonize's this stack (run in the background)

<code>--force-recreate</code> forces containers to be recreated with the updated image in case podman has issues taking down containers.

===Services===

Services are based on this machine but may call remote machines (and therefore remote GPU's) for remote compute via rffmpeg (transcoding) or a OpenAI reverse proxy (LLM)

====Jellyfin====
Jellyfin is installed to its default location (location) and is reverse proxied via nginx. Media is located in <code>/salieri/jellyfin/media</code> with subfolders spanning into media types. Media inside this <code>../media</code> folder is managed/renamed by the *arr suite. <code>/salieri/jellyfin/imports</code> is a holding directory for unsorted media. *arr has access to these folders as <code>/download/(subfolder)</code> and can be sorted futher/moved into <code>../media</code>.

(add more jellyfin service detail)

====*arr====
The *arr suite is running inside docker containers on maho as a single host. The compose file can be found at <code>/opt/podman/compose/arr/docker-compose.yaml</code> and holds the *arr suite as a single service, allowing for one-liner updates/replaces.

(Detail about *arr setup and how to change settings)

====Language Models====
Small language models are to be hosted on the two separate GPU's via docker to allow different models running behind the reverse proxy. A user on LUG's Sillytavern (or any front end where an API can be called on) can then select what model to prompt.

(Allen thing)

Docs/Maho

2026-01-04T19:21:12Z

Allennova: /* Maintenance */

Docs/Maho

2026-01-04T19:21:00Z

Allennova: Added *arr updates

Docs/Maho

2025-12-31T17:29:07Z

Allennova: format

Docs/Maho

2025-12-31T17:27:18Z

Allennova: /* Hardware */

Members

2025-12-31T17:25:10Z

Allennova: Removed myself

== Officers ==
'''President''': [[User:D2wn|Noah Holland]]

'''Vice President:''' Lucas Jones

'''Treasurer''':

'''Secretary''': Dane Cucinelli

'''Server Administration Team''':

# August Staples
# Dane Cucinelli
# Lucas Jones
# Noah Holland

'''Faculty Advisor''': [https://www.mtu.edu/applied-computing/about/faculty/ac-faculty/arney/ Todd O. Arney (Applied Computing Department)]

== Alumni ==
[[User:Dark-Fx|Brian McPherson]] CS Major (2008)

[[User:rsmudge|Raphael Mudge]] CS Major (2004)

[http://www.dingostick.com Adam Shirey] CS Major (2004)

[[User:gzphreak|Dan Clark]] CS Major (2005)

[http://khanbo.com Mary Farmer] EE Major (2005)

[[User:spi|Steven Isaacson]] CS Major (2005)

[[User:base16|Justin TerAvest]] CS Major (2005)

[http://xobes.com Andy Zobro] ME Undergrad, Engineering Masters (2005)

[[User:Jon787|Jon DeVree]] CS Major (2006)

[[User:Sgowtham|S Gowtham]] Eng. Physics (Sometime in 2006)

[[User:Chong|Timothy Carmean]] CSY Major (2007)

[[User: Techieb0y|Peter Corbett]] CSY Major (2007)

[[User:Physcofish|Jon Klimowicz]] CS Major (December 2007)

[[User:Ox|Michael Senkow]] ME & STC Major (2009)

[[User:MJS|Matthew Senkow]] SocSci Major (2008)

[[User:Freshmen|Andrew Swartzendruber]] CpE Major (2008)

[[User:MrVoids|Andrew Miller]] CpE/EE Major (2008)

[[User:Adamjaskie|Adam Jaskie]] CS (2008)

Lenore Towne CS (????)

Jeff Tyson CS (2008)

John Pastore Math (1901)

[[User: Tokyo-18|A'Lisa Krawciw]] CpE/EE Major (2010)

[[User:blcrowle|Brandon Crowley]] CS Major (2011)

[[User:agmeyer|Andrew Meyer]] CpE/EE Major (2012)

Alex Klinkhamer

Beth Russart

Steven Vormwald

Jesse Wisniewski EE Major (2011?)(fall 2000->spring2002, fall2009+)

Alicia Gervais

Nate Scowcroft

William Cody Laeder

Nick Trierweiler

Peter Marheine (CpE 2013)

[[User:Bane|Dan Williams]]

[[User:Dwfreed|Doug Freed]] (CpE 2015)

[[User:Thirtysixway |Josh Knight]] (CNSA Major, EE Minor 2014) President '12/'13

Kaleb Elwert (CS Major 2014) President '13/'14

[[User:Jfledvin|Jared Ledvina]] CNSA Major(2015) President '14/'15

Brandon Ingalls (????) President '15

Kory Wegmeyer (????) Vice President '15

Evan Hauck (????) Secretary '15

Brendan Kerrigan (????) Treasurer '15

Christopher Sengstack (????) Public Relations '15

Stephen Radachy (????) Server Admin '15

Christopher Sengstack (????) Server Admin '15

Daniel Knudsen (????) Server Admin '15

Steven Whitaker (????) President '21/'22

David Hochstetler (????) Vice President '22/'23

== Past Members ==
[[User:Rachel|Rachel Pierce]] (2004-2005) transferred to [http://www.stolaf.edu/ St. Olaf]

Docs

2025-12-26T08:07:40Z

Allennova: /* Shell */

This page is the hub for LUG's documentation.

All of our documentation is intentionally public so that other orgs (or students) can replicate aspects of our infrastructure if they want. Everything sensitive (private keys, break-glass passwords, etc) should go in the LUG Bitwarden.

Topics should generally be broken out into individual articles and linked on this page, unless there's a very small amount of content.

== [[Docs/Infrastructure|Infrastructure]] ==
General infrastructure notes

=== [[Docs/Plans|Plans]] ===
Pending upgrades/maintenance to our infrastructure

=== Network ===

==== [[Docs/Cables|Cables]] ====
Physical cabling and "layer 1" network config.

==== [[Docs/Switches|Switches]] ====
Switch and layer 2 network configs (VLANs).

=== Servers ===

==== [[Docs/Leskinen|Leskinen]] ====

The primary storage server.

Currently has Shell home directory backups and media for maho.

==== [[Docs/Maho|Maho]] ====
The GPU compute server.

Currently hosts a [https://studio.blender.org/films/ Blender Open Studio Films] mirror via Jellyfin and Local LLM host for members to experiment with.

==== [[Docs/Mirrors|Mirrors]] ====
The Linux mirror server at mirrors.lug.mtu.edu

==== [[Docs/OPNsense|OPNsense]] (Lasanga/Ravioli) ====
Router/Firewall and layer 3+ network configs.

==== [[Docs/Proxmox Cluster|Proxmox Cluster]] ====
Our Proxmox cluster running the majority of our services

==== [[Docs/Shell|Shell]] ====
The shared multi-tenant server for LUG members/alums at [https://shell.lug.mtu.edu/ shell.lug.mtu.edu]

=== Services ===

==== BlueSky ====

==== [[Docs/IRC|IRC]] ====

==== Website ====

==== Wiki ====

== Org Management ==

=== Wiki ===

==== Docs ====
How to create/manage pages in this category ("Docs").

==== Meeting Minutes ====
<insert process/methodology for making/formatting meeting minutes (e.g. wiki page guidelines)>

=== Time-sensitive ===

* Email IT for new certs (example template to use, make sure to keep SubjectAltName, etc)
* Install-a-thons
* Shirt printing / stickers

=== Budget ===

* USG meetings
* Making presentable diagrams and representations of data

=== MTU Policies and Procedures ===
https://www.mtu.edu/umc/services/websites/requirements/

All (sub)domains need to be approved by UMC (University Marketing & Communication)

IT handles IP addressing and SSL certificates

USG handles funding and reimbursements

Docs/Maho

2025-11-15T19:33:25Z

Allennova:

Docs/Maho

2025-11-15T19:31:30Z

Allennova: /* Services */

Docs/Maho

2025-11-15T19:14:50Z

Allennova:

Docs/Maho

2025-11-15T19:13:06Z

Allennova: /* Operating System */

Docs/Maho

2025-11-15T19:11:52Z

Allennova: /* Hardware */

Docs/Maho

2025-11-15T19:03:46Z

Allennova: 0.1 Headers and structure

Maho holds a number of Graphical Processing Units (GPUs) and services either transcoding video or running Large Language Models (LLM's).

=== Hardware ===

=== Operating System ===

=== Storage ===

=== Maintenance ===

=== Services ===

==== Jellyfin ====

==== Language Models ====

Docs/Switches

2025-09-29T21:41:11Z

Allennova: /* VLANs */

[[Docs|~/Docs]]

'''For Layer 1 network details, see [[Docs/Cables]].'''

'''For Layer 3 network details, see [[Docs/OPNsense|Docs/OPNSense]].'''

== VLANs ==
{| class="wikitable"
!Network
!VLAN ID
|-
|Management
|1
|-
|LAN
|2
|-
|kubernetes
|30
|-
|WAN
|640
|}

== Switch Ports ==
Fiber switch:
{| class="wikitable"
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 30 (???)
!VLAN 640 (WAN)
|-
|1
|Shell
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|2
|Storage
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|3
|Mirrors
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|4
|Kurisu
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|5
|Okabe
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|6
|Daru
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|7
|Mayuri
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|8
|Luka
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|9
|Watch
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|10
|N/A
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|11
|ravioli
|ix1 (left SFP)
|Tagged
|Tagged
|Excluded
|Excluded
|-
|12
|lasagna
|
|Tagged
|Tagged
|Excluded
|Excluded
|-
|13
|48 Port
|Port 45
|Tagged
|Tagged
|Excluded
|Excluded
|-
|14
|48 Port
|Port 46
|Tagged
|Tagged
|Excluded
|Excluded
|-
|15
|48 Port
|Port 47
|Tagged
|Tagged
|Excluded
|Excluded
|-
|16
|48 Port
|Port 48
|Tagged
|Tagged
|Excluded
|Excluded
|}
Ethernet switch:
{| class="wikitable"
|+
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 30 (???)
!VLAN 640 (WAN)
|-
|1
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|2
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|3
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|4
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|5
|Lasagna
|bge0
|Excluded
|Excluded
|Excluded
|Untagged
|-
|6
|Mirrors
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|7
|Shell
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|8
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|9
|Ravioli?
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|10
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|11
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|12
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|13
|Lasagna
|igb3
|Untagged
|Tagged
|Tagged
|Excluded
|-
|14
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|15
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|16
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|17
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|18
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|19
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|20
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|21
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|22
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|23
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|24
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|25
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|26
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|27
|Shell
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|28
|Storage
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|29
|Kurisu
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|30
|Okabe
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|31
|Daru
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|32
|Luka
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|33
|Mayuri
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|34
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|35
|
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|36
|
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|37
|
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|38
|
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|39
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|40
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|41
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|42
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|43
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|44
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|45
|12 port
|Port 13
|Untagged
|Tagged
|Tagged
|Excluded
|-
|46
|12 port
|Port 14
|Untagged
|Tagged
|Tagged
|Excluded
|-
|47
|12 port
|Port 15
|Untagged
|Tagged
|Tagged
|Excluded
|-
|48
|12 port
|Port 16
|Untagged
|Tagged
|Tagged
|Excluded
|-
|49
|
|
|Excluded
|Excluded
|Excluded
|Excluded
|-
|50
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|51
|MTU UP 1
|MTU
|Excluded
|Excluded
|Excluded
|Tagged
|-
|52
|MTU UP 2
|MTU
|Excluded
|Excluded
|Excluded
|Tagged
|}

=== WAN ===
Our WAN is a LAGG across two ports. The link needs '''LACP enabled''' ("Static mode" '''off''' in 1Gb Ubiquiti Switch) [https://www.reddit.com/r/Ubiquiti/comments/7xs70n/lag_dynamic_vs_static/duauolg/], and '''STP off'''.

IT configures their switches to automatically shut off ports if they detect STP advertisements.

Reference commands to make a Cisco switch satisfy the requirements:<syntaxhighlight lang="text">
(config-if)# spanning-tree bpdufilter enable
(config-if)# spanning-tree bpduguard disable
</syntaxhighlight>

Docs/Switches

2025-09-29T21:40:46Z

Allennova: /* Switch Ports */

[[Docs|~/Docs]]

'''For Layer 1 network details, see [[Docs/Cables]].'''

'''For Layer 3 network details, see [[Docs/OPNsense|Docs/OPNSense]].'''

== VLANs ==
{| class="wikitable"
!Network
!VLAN ID
|-
|Management
|1
|-
|LAN
|2
|-
|????
|30
|-
|WAN
|640
|}

== Switch Ports ==
Fiber switch:
{| class="wikitable"
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 30 (???)
!VLAN 640 (WAN)
|-
|1
|Shell
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|2
|Storage
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|3
|Mirrors
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|4
|Kurisu
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|5
|Okabe
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|6
|Daru
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|7
|Mayuri
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|8
|Luka
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|9
|Watch
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|10
|N/A
|
|Excluded
|Untagged
|Excluded
|Excluded
|-
|11
|ravioli
|ix1 (left SFP)
|Tagged
|Tagged
|Excluded
|Excluded
|-
|12
|lasagna
|
|Tagged
|Tagged
|Excluded
|Excluded
|-
|13
|48 Port
|Port 45
|Tagged
|Tagged
|Excluded
|Excluded
|-
|14
|48 Port
|Port 46
|Tagged
|Tagged
|Excluded
|Excluded
|-
|15
|48 Port
|Port 47
|Tagged
|Tagged
|Excluded
|Excluded
|-
|16
|48 Port
|Port 48
|Tagged
|Tagged
|Excluded
|Excluded
|}
Ethernet switch:
{| class="wikitable"
|+
!Switch port
!Client
!Client port
!VLAN 1 (Mgmt.)
!VLAN 2 (LAN)
!VLAN 30 (???)
!VLAN 640 (WAN)
|-
|1
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|2
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|3
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|4
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|5
|Lasagna
|bge0
|Excluded
|Excluded
|Excluded
|Untagged
|-
|6
|Mirrors
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|7
|Shell
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|8
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|9
|Ravioli?
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|10
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|11
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|12
|
|
|Excluded
|Excluded
|Excluded
|Untagged
|-
|13
|Lasagna
|igb3
|Untagged
|Tagged
|Tagged
|Excluded
|-
|14
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|15
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|16
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|17
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|18
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|19
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|20
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|21
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|22
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|23
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|24
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|25
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|26
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|27
|Shell
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|28
|Storage
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|29
|Kurisu
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|30
|Okabe
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|31
|Daru
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|32
|Luka
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|33
|Mayuri
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|34
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|35
|
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|36
|
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|37
|
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|38
|
|
|Excluded
|Untagged
|Tagged
|Tagged
|-
|39
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|40
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|41
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|42
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|43
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|44
|
|
|Excluded
|Untagged
|Tagged
|Excluded
|-
|45
|12 port
|Port 13
|Untagged
|Tagged
|Tagged
|Excluded
|-
|46
|12 port
|Port 14
|Untagged
|Tagged
|Tagged
|Excluded
|-
|47
|12 port
|Port 15
|Untagged
|Tagged
|Tagged
|Excluded
|-
|48
|12 port
|Port 16
|Untagged
|Tagged
|Tagged
|Excluded
|-
|49
|
|
|Excluded
|Excluded
|Excluded
|Excluded
|-
|50
|
|
|Untagged
|Excluded
|Excluded
|Excluded
|-
|51
|MTU UP 1
|MTU
|Excluded
|Excluded
|Excluded
|Tagged
|-
|52
|MTU UP 2
|MTU
|Excluded
|Excluded
|Excluded
|Tagged
|}

=== WAN ===
Our WAN is a LAGG across two ports. The link needs '''LACP enabled''' ("Static mode" '''off''' in 1Gb Ubiquiti Switch) [https://www.reddit.com/r/Ubiquiti/comments/7xs70n/lag_dynamic_vs_static/duauolg/], and '''STP off'''.

IT configures their switches to automatically shut off ports if they detect STP advertisements.

Reference commands to make a Cisco switch satisfy the requirements:<syntaxhighlight lang="text">
(config-if)# spanning-tree bpdufilter enable
(config-if)# spanning-tree bpduguard disable
</syntaxhighlight>

Docs/Switches

2025-09-29T21:25:46Z

Allennova: /* Switch Ports */

Large language models

2024-07-29T01:12:59Z

Allennova: Initial page, bad outline but im claiming the page.

Large language models can be used to generate text from a simple prompt. This can be expanded to system prompts and instructions to make a model generate followup text endlessly no matter the situation.

Docker

2024-07-28T23:05:10Z

Allennova: Added NAS stuff, cleanup.

Docker is a container solution for any operating system. Docker containers can run as a user, allowing for rootful and rootless containers, allowing for more security.

== Concepts: ==
Images - A built software on top of a slim operating system, made into a prebuilt image ready for download

Containers - running images configured with system storage volumes, environment variables, tags and an image (with an optional version)

Volumes - internal storage passed through from host machine files and folders.

Environment variables - static settings for the container.

== Installation ==
Debian 12 install:<syntaxhighlight lang="bash" line="1">
sudo apt-get update && sudo apt-get upgrade && sudo apt-get dist-upgrade
sudo apt-get install docker docker-compose
sudo systemctl enable docker
sudo systemctl start docker
</syntaxhighlight>Fully update the system, install docker and docker compose and enable related services.

== Common Docker Commands: ==
Keep in mind what permission level you are running containers in. Rootful containers will need sudo level permissions.<syntaxhighlight lang="bash">
docker --help
</syntaxhighlight>Lists docker's commands and syntax.<syntaxhighlight lang="bash">
docker container --help
docker container ls
docker container ls -a
</syntaxhighlight>Specifies we are working with containers, --help lists every action. ls lists all containers the user is running. -a lists all containers for the user.<syntaxhighlight lang="bash">
docker container stop (container_name)
docker container restart (container_name)
docker container kill (container_name)
docker container logs (container_name)
docker container rm -f (container_name)
</syntaxhighlight>Stop, restart, and kill a container. Logs prints the logs in terminal. rm deletes the container from docker, -f force removing.

== Docker Compose: ==
Compose simplifies docker down to files instead of commands, allows for full stacks to be built in a single file. Docker can then pull all images specified and build the container accordingly with one command.

Regular docker command:<syntaxhighlight lang="bash" line="1" start="0">
sudo docker run -d -p 8000:8000 -p 9443:9443 --name portainer --restart=always -v /var/run/docker.sock:/var/run/docker.sock -v portainer_data:/data portainer/portainer-ce:latest
</syntaxhighlight>Sudo is ran as the Portainer container is privileged as it binds to docker.sock . -d runs the container in the background, -p specifies a port, --restart defines the restart policy, see above. -v defines a volume, can also define a file to be passed in. The image is defined at the end.

Create a folder for Portainer to live in ~/Portainer and create docker-compose.yaml:<syntaxhighlight lang="bash">
mkdir Portainer
cd Portainer
touch docker-compose.yaml
nano docker-compose.yaml
</syntaxhighlight><syntaxhighlight lang="yaml" line="1">
services:
portainer:
image: portainer/portainer-ce:latest
container_name: portainer
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /Path/To/portainer_data:/data
ports:
- 8000:8000
- 9443:9443
restart: always
</syntaxhighlight>Pull the listed images from docker's repositories and run the services listed: <syntaxhighlight lang="bash">
sudo docker-compose pull
sudo docker-compose up -d
</syntaxhighlight>Sudo is used here as Portainer binds to docker.sock. -d runs the compose container(s) in the background.

== Common NAS stack inside docker example ==
Docker compose will be used, all containers (that are separate services, databases and libraries excluded) will be in separate docker-compose.yaml files.

Docker will expose host ports listed to all interfaces by default, you can bind via the following:<syntaxhighlight lang="bash">
-p 127.0.0.1:80:80
</syntaxhighlight><syntaxhighlight lang="yaml">
ports:
- 127.0.0.1:80:80
</syntaxhighlight>We will be installing the following:

[https://github.com/qdm12/gluetun Gluetun] - VPN client. Supports providers, openvpn, wireguard, DNS over TLS, etc.

[https://deluge-torrent.org/ Deluge] - Torrent client, subsitiute with any.

[https://sonarr.tv/ Sonarr] - TV/Anime organizer. Sorts, requests, renames and tells plex when media is imported.

[https://radarr.video/ Radarr] - Movie organizer. Sorts, requests, renames and tells plex when media is imported.

[https://prowlarr.com/ Prowlarr] - One stop shop for indexers. *arr requests torrents from this. (Alternitive: [https://github.com/Jackett/Jackett Jackett])

[https://www.plex.tv/ Plex] - Serve the media we grab.

Every service will be in its own docker-compose.yaml file, and in its own folder. All docker folders will be contained in /opt/.<syntaxhighlight lang="bash">
sudo apt-get update && sudo apt-get upgrade && sudo apt-get dist-upgrade
sudo apt-get install docker docker-compose
sudo systemctl start docker && sudo systemctl enable docker
sudo mkdir /opt/docker
cd /opt/docker
sudo mkdir gluetun deluge sonarr radarr prowlarr plex
</syntaxhighlight>Update the system, install and enable docker/docker compose, create a docker folder in opt and subfolders for every service.

== Plex ==
https://github.com/plexinc/pms-docker

Plex's official docker page does not have compose files, so ill hand convert the host networking command:<syntaxhighlight lang="bash">
docker run -d --name plex --network=host -e TZ="<timezone>" -e PLEX_CLAIM="<claimToken>" -v <path/to/plex/database>:/config -v <path/to/transcode/temp>:/transcode -v <path/to/media>:/data plexinc/pms-docker
</syntaxhighlight><syntaxhighlight lang="yaml">
services:
plex:
image: plexinc/pms-docker
container_name: plex
network_mode: host
environment:
- TZ=America/Detroit
- PLEX_CLAIM="<claimToken>"
volumes:
~/database:/config
~/temp:/transcode
:/media:/data
restart: unless-stopped
</syntaxhighlight>

== Gluetun ==

== Deluge ==

== Prowlarr ==

== Sonarr ==

== Radarr ==

Docker

2024-07-28T20:43:47Z

Allennova: Updates

Docker

2024-07-28T04:58:49Z

Allennova: Reworked page for more legible scribbles then before.

Docker

2024-07-28T04:19:45Z

Allennova:

Docker is a container solution for any operating system. Docker containers can run as a user, allowing for rootful and rootless containers, allowing for more security.

Concepts:
Images - A built software on top of a slim operating system, made into a prebuilt image ready for download

Containers - running images configured with system storage volumes, environment variables, tags and an image (with an optional version)

Volumes - internal storage passed through from host machine files and folders.

Environment variables - static settings for the container.

Debian 12 installation:

sudo apt-get update

sudo apt-get install docker docker-compose

Common Docker Commands:

Keep in mind what permission level you are running containers in. Rootful containers will need sudo level permissions.

docker container --help

docker container ls

docker container kill

docker container logs

Docker Compose:

simplifies docker down to files instead of commands, allows for full stacks to be built in a single file. Docker can then pull all images specified and build the container accordingly with one command.

regular docker command:

'''docker run -d -p 8000:8000 -p 9443:9443 --name portainer --restart=always -v /var/run/docker.sock:/var/run/docker.sock -v portainer_data:/data portainer/portainer-ce:latest'''

docker compose:

Docker

2024-07-27T23:13:32Z

Allennova: Created page with "Docker is a container solution for any operating system. Docker containers can run as a user, allowing for rootful and rootless containers, allowing for more security. Concepts: Images - A built software on top of a slim operating system, made into a prebuilt image ready for download Containers - running images configured with system storage volumes, environment variables, tags and an image (with an optional version) Volumes - Environment variables - Debian 12 in..."

Docker is a container solution for any operating system. Docker containers can run as a user, allowing for rootful and rootless containers, allowing for more security.

Concepts:
Images - A built software on top of a slim operating system, made into a prebuilt image ready for download

Containers - running images configured with system storage volumes, environment variables, tags and an image (with an optional version)

Volumes -

Environment variables -

Debian 12 installation:

sudo apt-get update

sudo apt-get install docker docker-compose

Common Docker Commands:

Keep in mind what permission level you are running containers in. Rootful containers will need sudo level permissions.

docker container --help

docker container ls

docker container kill

docker container logs

Docker Compose:

simplifies docker down to files instead of commands, allows for full stacks to be built in a single file. Docker can then pull all images specified and build the container accordingly with one command.