Domains and ports

Domains and ports 
 Public DNS/TLS terminates on vps2 ( 187.52.126.150 / 100.64.0.16 ) as of
2026-11-05, which proxies over Tailscale to cbcore ( 100.64.0.3 ) and
 cbfarm ( 100.64.0.4 ). It replaced the old vps ( 203.57.114.42 /
 100.64.0.2 ); see [[vps2]]. Caddy on cbcore is the origin and binds each site to
the Tailscale IP only. Host config: /etc/caddy/Caddyfile . 
 Sites served locally on vps2 (no proxy hop): headscale.seabee.me → :8080 /
 /admin → :3000 , marketdata.seabee.me → /var/www/marketdata/public (PHP),
 strata360.com.au → /var/www/strata360 , app.strata360.com.au → 127.0.0.1:3009 ,
 demo.strata360.com.au → 127.0.0.1:3011 , vps.seabee.me and seabee.me →
 /var/www/{vps,seabee} . Mail ports (25/465/587/993/4190) are HAProxy on vps2 →
cbcore, still to be cut over. 
 Local Caddy sites (cbcore) 
 
 
 
 Port 
 Site 
 Root / upstream 
 
 
 
 
 8000 
 archive 
 /mnt/drives/10tb/10tb/web_servers/seabee-archive 
 
 
 8001 
 files 
 /mnt/drives/10tb/10tb/web_servers/conorbriggs-files 
 
 
 8002 
 phpma 
 /mnt/drives/10tb/10tb/web_servers/phpma 
 
 
 8003 
 home 
 /mnt/drives/10tb/10tb/web_servers/home 
 
 
 8006 
 cal (Baikal CalDAV/CardDAV) 
 .../cal/baikal/html 
 
 
 8007 
 marketdata 
 /mnt/drives/10tb/10tb/web_servers/marketdata 
 
 
 8008 
 pdb (BookStack) 
 .../pdb/bookstack/public 
 
 
 8009 
 tradingjournal 
 Docker 127.0.0.1:8090 
 
 
 8011 
 test 
 /mnt/drives/10tb/10tb/web_servers/test 
 
 
 
 Domains 
 conorbriggs.com.au 
 
 cloud.conorbriggs.com.au — Nextcloud + Collabora 
 git.conorbriggs.com.au — Forgejo 
 headscale.conorbriggs.com.au — Headscale + web UI 
 comfytax.com.au — comfytax Next.js app 
 
 seabee.me 
 
 mail.seabee.me — mailcow (serves itself on 100.64.0.3:8005 / :8443 ) 
 pdb.seabee.me — BookStack ("SeaBee's Personal DB") 
 tradingjournal.seabee.me — trading journal (redirect from .conorbriggs.com.au ) 
 Other subdomains: archive, files, git.farm, headscale, home, marketdata,
media, phpma, rss, temp, videos, vps 
 
 Network 
 
 Tailscale: cbcore 100.64.0.3 , VPS 100.64.0.2 . 
 CGNAT — no public inbound ports at home. VPS is the only public ingress. 
 LAN: 192.168.4.222/22 on enp10s0 , gateway 192.168.4.1 . 
 
 Verify before editing: grep -n "################" /etc/caddy/Caddyfile and
 docker ps --format '{{.Names}}\t{{.Ports}}' .