# Domains and ports

# Domains and ports

Public DNS/TLS terminates on **vps2** (`187.52.126.150` / `100.64.0.16`) as of
2026-11-05, which proxies over Tailscale to **cbcore** (`100.64.0.3`) and
**cbfarm** (`100.64.0.4`). It replaced the old **vps** (`203.57.114.42` /
`100.64.0.2`); see [[vps2]]. Caddy on cbcore is the origin and binds each site to
the Tailscale IP only. Host config: `/etc/caddy/Caddyfile`.

Sites served locally on vps2 (no proxy hop): `headscale.seabee.me` → `:8080` /
`/admin` → `:3000`, `marketdata.seabee.me` → `/var/www/marketdata/public` (PHP),
`strata360.com.au` → `/var/www/strata360`, `app.strata360.com.au` → `127.0.0.1:3009`,
`demo.strata360.com.au` → `127.0.0.1:3011`, `vps.seabee.me` and `seabee.me` →
`/var/www/{vps,seabee}`. Mail ports (25/465/587/993/4190) are HAProxy on vps2 →
cbcore, still to be cut over.

## Local Caddy sites (cbcore)

| Port | Site | Root / upstream |
|---|---|---|
| 8000 | archive | `/mnt/drives/10tb/10tb/web_servers/seabee-archive` |
| 8001 | files | `/mnt/drives/10tb/10tb/web_servers/conorbriggs-files` |
| 8002 | phpma | `/mnt/drives/10tb/10tb/web_servers/phpma` |
| 8003 | home | `/mnt/drives/10tb/10tb/web_servers/home` |
| 8006 | cal (Baikal CalDAV/CardDAV) | `.../cal/baikal/html` |
| 8007 | marketdata | `/mnt/drives/10tb/10tb/web_servers/marketdata` |
| 8008 | **pdb (BookStack)** | `.../pdb/bookstack/public` |
| 8009 | tradingjournal | Docker `127.0.0.1:8090` |
| 8011 | test | `/mnt/drives/10tb/10tb/web_servers/test` |

## Domains

`conorbriggs.com.au`
- `cloud.conorbriggs.com.au` — Nextcloud + Collabora
- `git.conorbriggs.com.au` — Forgejo
- `headscale.conorbriggs.com.au` — Headscale + web UI
- `comfytax.com.au` — comfytax Next.js app

`seabee.me`
- `mail.seabee.me` — mailcow (serves itself on `100.64.0.3:8005` / `:8443`)
- `pdb.seabee.me` — BookStack ("SeaBee's Personal DB")
- `tradingjournal.seabee.me` — trading journal (redirect from `.conorbriggs.com.au`)
- Other subdomains: archive, files, git.farm, headscale, home, marketdata,
  media, phpma, rss, temp, videos, vps

## Network

- Tailscale: cbcore `100.64.0.3`, VPS `100.64.0.2`.
- CGNAT — **no public inbound ports** at home. VPS is the only public ingress.
- LAN: `192.168.4.222/22` on `enp10s0`, gateway `192.168.4.1`.

Verify before editing: `grep -n "################" /etc/caddy/Caddyfile` and
`docker ps --format '{{.Names}}\t{{.Ports}}'`.