dohertj2
8069f21240
Reverses the recent Infisical-pointer convention. Each <service>.md holds its credentials inline under the Access section again. The Infisical service itself still runs as a Docker stack on the docker host — it just isn't the source of truth for these docs anymore. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
123 lines
4.6 KiB
Markdown
123 lines
4.6 KiB
Markdown
# ESXi Host
|
|
|
|
## Access
|
|
|
|
- **IP**: 10.2.0.12 (VLAN 0 / DEFAULT, management)
|
|
- **Version**: VMware ESXi 8.0.3 build-24280767 (Update 3, Patch 35)
|
|
- **Credentials**: govc / `Tn9.xKw-m4Vp` (Administrator role)
|
|
- **API access via govc**:
|
|
```bash
|
|
GOVC_URL=https://10.2.0.12/sdk GOVC_USERNAME=govc GOVC_PASSWORD='Tn9.xKw-m4Vp' GOVC_INSECURE=true govc <command>
|
|
```
|
|
- **Do NOT use SSH** — ESXi keyboard-interactive auth is unreliable from this machine; use `govc` exclusively
|
|
- **Hardware**: HP, 2x Intel Xeon E5-2697 v4 (36 logical CPUs @ 2.3GHz), 256GB RAM
|
|
- **Boot time**: 2025-09-22
|
|
|
|
## Physical NICs
|
|
|
|
| NIC | Driver | Speed | Link | MTU | MAC | Description |
|
|
|-----|--------|-------|------|-----|-----|-------------|
|
|
| vmnic0 | igbn | — | **Down** | 1500 | ec:b1:d7:82:3b:40 | Intel 1Gb 2-port 361i |
|
|
| vmnic2 | ixgben | — | **Down** (admin down) | 1500 | 48:df:37:07:a9:6c | Intel 82599 10GbE |
|
|
| vmnic3 | ixgben | 10 Gbps | Up | 1500 | 48:df:37:07:a9:6d | Intel 82599 10GbE |
|
|
| vmnic4 | nmlx5_core | 25 Gbps | Up | 1500 | b8:83:03:60:e4:e0 | Mellanox ConnectX-4 Lx |
|
|
| vmnic5 | nmlx5_core | 25 Gbps | Up | 9000 | b8:83:03:60:e4:e1 | Mellanox ConnectX-4 Lx |
|
|
|
|
**Active uplinks**: vmnic3 (unused — no vSwitch), vmnic4 (vSwitch0), vmnic5 (jumboFrameSwitch)
|
|
|
|
## vSwitches
|
|
|
|
### vSwitch0 (vmnic4 — 25Gbps Mellanox, MTU 1500)
|
|
|
|
Carries VLAN-tagged traffic for management, LAN, IoT, and guest networks.
|
|
|
|
| Port Group | VLAN ID | Active Ports | Subnet |
|
|
|------------|---------|--------------|--------|
|
|
| DEFAULT_0 | 0 (untagged) | 1 | 10.2.0.0/24 (ESXi mgmt) |
|
|
| MGMT_1 | 0 (untagged) | 0 | — |
|
|
| GUEST_3 | 3 | 0 | — |
|
|
| LAN_100 | 100 | 7 | 10.100.0.0/24 |
|
|
| IOT_200 | 200 | 1 | 10.200.0.0/24 |
|
|
|
|
### jumboFrameSwitch (vmnic5 — 25Gbps Mellanox, MTU 9000)
|
|
|
|
Dedicated storage network with jumbo frames. Switch port 32 is configured as a trunk (`forward=all`, MGMT native) so VLAN 50 frames arrive tagged, matching the DATA_50 port group's VLAN ID.
|
|
|
|
| Port Group | VLAN ID | Active Ports | Subnet |
|
|
|------------|---------|--------------|--------|
|
|
| DATA_50 | 50 | 4 | 10.50.0.0/24 |
|
|
|
|
All port groups: promiscuous mode=No, forged transmits=No, MAC changes=No.
|
|
|
|
## VMkernel Interface
|
|
|
|
| Interface | IP | Netmask | Portgroup | MAC | Stack |
|
|
|-----------|-----|---------|-----------|-----|-------|
|
|
| vmk0 | 10.2.0.12 | 255.255.255.0 | DEFAULT_0 | 48:df:37:07:a9:6d | defaultTcpipStack |
|
|
|
|
- **Default gateway**: 10.2.0.1
|
|
- **DNS search**: localdomain (no DNS servers configured)
|
|
|
|
## Virtual Machines
|
|
|
|
### Powered On
|
|
|
|
| VM | Guest OS | CPU | RAM | LAN_100 IP | DATA_50 IP | Other IPs |
|
|
|----|----------|-----|-----|-----------|-----------|-----------|
|
|
| TrueNAS | Debian 12 | 16 | 128GB | 10.100.0.25 | 10.50.0.26 | +secondary IPs on both |
|
|
| DOCKER | Debian 12 | 22 | 32GB | 10.100.0.35 | 10.50.0.35 | Docker bridges: 172.18.0.1, 172.19.0.1 |
|
|
| Veeam | Win Server 2025 | 8 | 8GB | 10.100.0.30 | 10.50.0.32 | — |
|
|
| HA | Oracle Linux 6 | 16 | 16GB | 10.100.0.40 | — | Docker bridge: 172.30.32.1 |
|
|
| Plex | Debian 11 | 8 | 8GB | 10.100.0.24 | 10.50.0.31 | — |
|
|
| Ignition | Debian 11 | 4 | 16GB | 10.100.0.90 | — | IOT_200 NIC connected but no IP |
|
|
| DevVM | Win 10 | 8 | 16GB | 10.100.0.47 | — | IOT_200: 10.200.0.47 |
|
|
|
|
### Powered Off
|
|
|
|
| VM | Guest OS | CPU | RAM | Port Groups |
|
|
|----|----------|-----|-----|-------------|
|
|
| DevServer | Win Server 2022 | 12 | 32GB | LAN_100 |
|
|
|
|
## Per-VM Network Detail
|
|
|
|
### TrueNAS
|
|
| NIC | MAC | Port Group | IPs |
|
|
|-----|-----|------------|-----|
|
|
| Adapter 1 | 00:0c:29:bb:71:43 | LAN_100 | 10.100.0.25, .26, .27 |
|
|
| Adapter 2 | 00:0c:29:bb:71:4d | DATA_50 | 10.50.0.25, .26, .27, .28 |
|
|
|
|
### DOCKER
|
|
| NIC | MAC | Port Group | IPs |
|
|
|-----|-----|------------|-----|
|
|
| Adapter 1 | 00:0c:29:cf:bb:bb | LAN_100 | 10.100.0.35 |
|
|
| Adapter 2 | 00:0c:29:cf:bb:c5 | DATA_50 | 10.50.0.35 |
|
|
|
|
### Veeam
|
|
| NIC | MAC | Port Group | IPs |
|
|
|-----|-----|------------|-----|
|
|
| Adapter 1 | 00:0c:29:33:76:a5 | DATA_50 | 10.50.0.32 |
|
|
| Adapter 2 | 00:0c:29:33:76:af | LAN_100 | 10.100.0.30 |
|
|
|
|
### HA (Home Assistant)
|
|
| NIC | MAC | Port Group | IPs |
|
|
|-----|-----|------------|-----|
|
|
| Adapter 2 | 00:0c:29:f3:f3:5b | LAN_100 | 10.100.0.40 |
|
|
|
|
### Plex
|
|
| NIC | MAC | Port Group | IPs |
|
|
|-----|-----|------------|-----|
|
|
| Adapter 1 | 00:0c:29:4a:ef:3d | LAN_100 | 10.100.0.24 |
|
|
| Adapter 2 | 00:0c:29:4a:ef:47 | DATA_50 | 10.50.0.31 |
|
|
|
|
### Ignition
|
|
| NIC | MAC | Port Group | IPs |
|
|
|-----|-----|------------|-----|
|
|
| Adapter 1 | 00:0c:29:87:5f:f8 | LAN_100 | 10.100.0.90 |
|
|
| Adapter 2 | 00:0c:29:87:5f:02 | IOT_200 | (no IP, disconnected) |
|
|
|
|
### DevVM
|
|
| NIC | MAC | Port Group | IPs |
|
|
|-----|-----|------------|-----|
|
|
| Adapter 1 | 00:0c:29:5c:f9:f7 | IOT_200 | 10.200.0.47 |
|
|
| Adapter 2 | 00:0c:29:5c:f9:01 | LAN_100 | 10.100.0.47 |
|