wheatley/infrastructure
1
0
Fork 0
Code Issues 1 Pull requests 2 Projects Releases Packages Wiki Activity Actions
infrastructure/NETWORK.md

1.7 KiB
Raw Permalink Blame History

Infrastructure Overview – Wheatley

This document describes the network and infrastructure architecture of the Wheatley environment. Its purpose is to clearly document connectivity, routing, and responsibilities per site, enabling predictable operations, troubleshooting, and future expansion.

Overview

The infrastructure consists of three primary sites:

Site Role Subnet
Hobbyrack Central hub, homelab, workloads 10.13.37.0/24
MAPPS Externally managed platform services 10.7.65.192/26
Home Client network 192.168.1.0/24

Connectivity between sites is provided via IPSec and WireGuard, with Hobbyrack acting as the central routing and transit hub.

Network Diagram

flowchart LR
    %% Hobbyrack
    subgraph HR["Hobbyrack"]
        HR_OPN["OPNsense Gateway
10.13.37.1"]
        HR_LAN["10.13.37.0/24"]
        HR_CLUSTER["k8s-wheatley
(Servarr stack)"]
        HR_OPN --- HR_LAN
        HR_LAN --- HR_CLUSTER
    end

    %% Managed Apps
    subgraph MA["Forti – Managed"]
        MA_GW["Gateway
10.7.65.193"]
        MA_LAN["10.7.65.192/26"]
        MA_CLUSTER["MAPPS Cluster
(Mimir, Loki, Vault)"]
        MA_CLUSTER2["k8s-peterg
(ArgoCD)"]
        MA_GW --- MA_LAN
        MA_LAN --- MA_CLUSTER
        MA_LAN --- MA_CLUSTER2
    end

    %% Home
    subgraph TH["Home"]
        TH_GW["UniFi Gateway
192.168.1.1"]
        TH_LAN["192.168.1.0/24"]
        TH_CLIENTS["Clients"]
        TH_GW --- TH_LAN
        TH_LAN --- TH_CLIENTS
    end

    %% Tunnels
    HR_OPN <==>|"IPSec
10.13.37.0/24 ↔ 10.7.65.192/26"| MA_GW
    HR_OPN <==>|"WireGuard Hub
10.167.84.0/24"| TH_GW