Compare commits
2 Commits
4b218a70dd
...
master
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
572665b60f | ||
|
|
3c277ef8bd |
@@ -237,7 +237,7 @@ services:
|
|||||||
- SAMSUNG_TV_IP=${SAMSUNG_TV_IP:-192.168.178.100}
|
- SAMSUNG_TV_IP=${SAMSUNG_TV_IP:-192.168.178.100}
|
||||||
- SAMSUNG_TV_MAC=${SAMSUNG_TV_MAC:-}
|
- SAMSUNG_TV_MAC=${SAMSUNG_TV_MAC:-}
|
||||||
- SAMSUNG_TV_NAME=n8n-proxmox
|
- SAMSUNG_TV_NAME=n8n-proxmox
|
||||||
- SAMSUNG_TV_PORT=8002
|
- SAMSUNG_TV_PORT=${SAMSUNG_TV_PORT:-8001}
|
||||||
- SAMSUNG_TV_TOKEN_FILE=/data/tv-token.txt
|
- SAMSUNG_TV_TOKEN_FILE=/data/tv-token.txt
|
||||||
healthcheck:
|
healthcheck:
|
||||||
test: ["CMD", "curl", "-f", "http://localhost:5000/health"]
|
test: ["CMD", "curl", "-f", "http://localhost:5000/health"]
|
||||||
|
|||||||
@@ -634,6 +634,81 @@ egrep -c '(vmx|svm)' /proc/cpuinfo # Sollte > 0 sein
|
|||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
|
### WireGuard nach VM-Migration
|
||||||
|
|
||||||
|
**Problem:** Services nicht erreichbar nach Migration der Container in eine VM
|
||||||
|
|
||||||
|
**Ursache:** WireGuard laeuft noch auf dem Proxmox Host UND in der VM mit gleicher Konfiguration. Der VPS verbindet sich mit dem Host statt der VM.
|
||||||
|
|
||||||
|
**Diagnose:**
|
||||||
|
```bash
|
||||||
|
# Auf Host pruefen - sollte NICHT laufen nach Migration
|
||||||
|
wg show wg0
|
||||||
|
|
||||||
|
# Auf VM pruefen - sollte laufen
|
||||||
|
ssh root@192.168.178.200 "wg show wg0"
|
||||||
|
```
|
||||||
|
|
||||||
|
**Loesung:**
|
||||||
|
```bash
|
||||||
|
# 1. WireGuard auf Host deaktivieren
|
||||||
|
systemctl stop wg-quick@wg0
|
||||||
|
systemctl disable wg-quick@wg0
|
||||||
|
|
||||||
|
# 2. Port-Forwarding auf Host einrichten (UDP 51820 -> VM)
|
||||||
|
iptables -t nat -A PREROUTING -i vmbr0 -p udp --dport 51820 -j DNAT --to-destination 192.168.178.200:51820
|
||||||
|
iptables -t nat -A POSTROUTING -o vmbr0 -j MASQUERADE
|
||||||
|
|
||||||
|
# 3. Regeln persistent machen
|
||||||
|
apt install iptables-persistent
|
||||||
|
iptables-save > /etc/iptables/rules.v4
|
||||||
|
|
||||||
|
# 4. WireGuard auf VM mit festem Port konfigurieren
|
||||||
|
# In /etc/wireguard/wg0.conf:
|
||||||
|
# [Interface]
|
||||||
|
# ListenPort = 51820
|
||||||
|
|
||||||
|
# 5. WireGuard auf VM neu starten
|
||||||
|
ssh root@192.168.178.200 "wg-quick down wg0 && wg-quick up wg0"
|
||||||
|
```
|
||||||
|
|
||||||
|
**Verkehrsfluss nach Fix:**
|
||||||
|
```
|
||||||
|
VPS (10.0.0.1) --> Host:51820 (NAT) --> VM:51820 (WireGuard) --> Container
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
### Netdata nach VM-Migration
|
||||||
|
|
||||||
|
**Problem:** Netdata Dashboard nicht erreichbar nach Container-Migration in VM
|
||||||
|
|
||||||
|
**Ursache:** Netdata lief auf dem Proxmox Host, aber nginx zeigt auf 10.0.0.2 (VM)
|
||||||
|
|
||||||
|
**Loesung:** Netdata in der VM installieren:
|
||||||
|
```bash
|
||||||
|
# Auf VM (192.168.178.200)
|
||||||
|
curl -s https://get.netdata.cloud/kickstart.sh > /tmp/netdata-kickstart.sh
|
||||||
|
bash /tmp/netdata-kickstart.sh --stable-channel --disable-telemetry --dont-wait
|
||||||
|
|
||||||
|
# Docker-Monitoring aktivieren
|
||||||
|
usermod -aG docker netdata
|
||||||
|
systemctl restart netdata
|
||||||
|
|
||||||
|
# Testen
|
||||||
|
curl http://localhost:19999/api/v1/info
|
||||||
|
```
|
||||||
|
|
||||||
|
**Netdata vom Host entfernen:**
|
||||||
|
```bash
|
||||||
|
# Auf Proxmox Host
|
||||||
|
systemctl stop netdata
|
||||||
|
systemctl disable netdata
|
||||||
|
apt remove --purge netdata -y
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
## Kontakt / Hilfe
|
## Kontakt / Hilfe
|
||||||
|
|
||||||
- **Gitea Issues:** https://eckardt-git.duckdns.org/Martin/proxmox-infrastruktur/issues
|
- **Gitea Issues:** https://eckardt-git.duckdns.org/Martin/proxmox-infrastruktur/issues
|
||||||
|
|||||||
Reference in New Issue
Block a user