10 Commits

Author SHA1 Message Date
Martin Eckardt
572665b60f Move Netdata to VM, cleanup host
- Netdata now runs in VM 100 instead of Proxmox host
- Removed WireGuard config from host (only NAT forwarding remains)
- Added Netdata migration troubleshooting docs
- Docker monitoring enabled for Netdata

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-28 22:56:38 +01:00
Martin Eckardt
3c277ef8bd Add WireGuard VM migration troubleshooting
- Document WireGuard conflict when running on host AND VM
- Add NAT port-forwarding solution for VM migration
- Include iptables-persistent setup

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-28 22:52:50 +01:00
Martin Eckardt
4b218a70dd Add dual NVMe storage documentation and snapshot troubleshooting
- Updated architecture diagram with actual disk sizes (100GB/200GB)
- Added Storage section with NVMe layout and snapshot commands
- Added VM/Storage troubleshooting section:
  - Snapshot feature not available (Raw Device fix)
  - Storage overview and disk migration
  - Thin pool warnings explanation
- Updated changelog with storage optimization

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-28 21:46:50 +01:00
Martin Eckardt
64bcc0091a Migrate Docker containers to dedicated VM
Architecture changes:
- Created VM 100 "docker-services" (Debian 12 Cloud Image)
- 10GB RAM, 6 Cores, 50GB system disk
- Separate 100GB LVM data volume for service data
- WireGuard moved from host to VM (10.0.0.2)
- All containers migrated and running

Updated documentation to reflect new architecture

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-28 21:04:47 +01:00
Martin Eckardt
3f74077c3e Add VT-x/KVM troubleshooting and VM preparation docs
- Added VT-x BIOS requirement to INSTALL.md
- Added VT-x/KVM troubleshooting section with HP Z2 specific instructions
- Updated changelog: VT-x enabled, VM 100 prepared

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-28 20:22:27 +01:00
Martin Eckardt
0cada5aa45 Enable Basic Auth for Netdata monitoring
- Activated auth_basic in nginx config for eckardt-monitoring.duckdns.org
- htpasswd file at C:/nginx/conf/.htpasswd

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-28 18:27:16 +01:00
Martin Eckardt
b34bbbbe8c Add Netdata monitoring to infrastructure
- Added eckardt-monitoring.duckdns.org to nginx config
- Updated README with Netdata service entry
- Updated changelog

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-28 18:21:04 +01:00
Martin Eckardt
d300a85a3d Dokumentation: Git Push Authentifizierung mit API Token
🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-28 17:59:26 +01:00
Martin Eckardt
5607b338ba Security Hardening und Dokumentation
Aenderungen:
- nginx: http2 Direktive aktualisiert (deprecated Syntax)
- nginx: proxy_max_temp_file_size entfernt (Windows-inkompatibel)
- nginx: Rate Limiting aktiviert

Dokumentation:
- Stolperfallen und Lessons Learned hinzugefuegt
- Changelog aktualisiert mit allen Security-Massnahmen

Getestet:
- Alle Services erreichbar (Vaultwarden, Nextcloud, Gitea, Websites)
- nginx Config validiert
- Rate Limiting aktiv

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-28 17:56:31 +01:00
Martin Eckardt
364e058b8c Proxmox Infrastruktur - Vollstaendige Konfiguration
Enthaelt:
- Docker Compose mit allen Services (Nextcloud, Vaultwarden, n8n, etc.)
- nginx Reverse Proxy Konfiguration mit Rate Limiting
- WireGuard VPN Template
- Backup und Health-Check Scripts
- Deployment Script
- Ausfuehrliche Dokumentation und Troubleshooting Guide

Services:
- Isolierte Netzwerke pro Service
- Resource Limits (CPU/Memory)
- Health Checks
- Logging Konfiguration

Sicherheit:
- .env Template ohne Secrets
- Rate Limiting auf nginx
- TLS 1.2+ only
- Security Headers

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-28 17:12:43 +01:00