blumeops/docs/reference/infrastructure/routing.md
Erich Blume 7983677da2 Fix wiki-links to use filename-based resolution
Quartz's "shortest" path mode resolves wiki-links by filename, not
frontmatter title. This fixes the broken links from the previous
title-based approach.

Changes:
- Rename zk duplicate files with -log suffix to avoid conflicts
- Rename reference/storage/postgresql.md to postgresql-storage.md
- Convert all wiki-links from [[Title]] to [[filename|Title]] format
- Rename doc-card-titles task to doc-filenames (checks filename uniqueness)
- Update pre-commit hook for renamed task

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-03 15:27:23 -08:00

65 lines
2.4 KiB
Markdown

---
title: Service Routing
tags:
- infrastructure
- network
---
# Service Routing
Services are accessible via two DNS domains with different reachability.
## DNS Domains
| Domain | Proxy | Reachable From |
|--------|-------|----------------|
| `*.ops.eblu.me` | Caddy on indri | k8s pods, docker containers, tailnet clients |
| `*.tail8d86e.ts.net` | Tailscale MagicDNS | Tailnet clients only |
**Use `*.ops.eblu.me`** for services that need pod-to-service communication.
## Caddy Services (`*.ops.eblu.me`)
DNS points to indri's Tailscale IP (100.98.163.89). TLS via Let's Encrypt (ACME DNS-01 with Gandi).
| Service | URL | Description |
|---------|-----|-------------|
| Homepage | https://go.ops.eblu.me | Service dashboard |
| [[forgejo|Forgejo]] | https://forge.ops.eblu.me | Git hosting (SSH: 2222) |
| [[zot|Zot]] | https://registry.ops.eblu.me | Container registry |
| [[grafana|Grafana]] | https://grafana.ops.eblu.me | Dashboards |
| [[argocd|ArgoCD]] | https://argocd.ops.eblu.me | GitOps CD |
| [[prometheus|Prometheus]] | https://prometheus.ops.eblu.me | Metrics |
| [[loki|Loki]] | https://loki.ops.eblu.me | Logs |
| [[miniflux|Miniflux]] | https://feed.ops.eblu.me | RSS reader |
| [[kiwix|Kiwix]] | https://kiwix.ops.eblu.me | Offline Wikipedia |
| [[transmission|Transmission]] | https://torrent.ops.eblu.me | BitTorrent |
| [[teslamate|TeslaMate]] | https://tesla.ops.eblu.me | Tesla logger |
| [[navidrome|Navidrome]] | https://dj.ops.eblu.me | Music streaming |
| [[jellyfin|Jellyfin]] | https://jellyfin.ops.eblu.me | Media server |
| [[postgresql|PostgreSQL]] | pg.ops.eblu.me:5432 | Database |
| [[sifaka|Sifaka]] | https://nas.ops.eblu.me | NAS dashboard |
## Tailscale-Only Services
| Service | URL | Description |
|---------|-----|-------------|
| Kubernetes | https://k8s.tail8d86e.ts.net | Minikube API |
## Port Map (Indri)
| Port | Service | Protocol | Binding | Notes |
|------|---------|----------|---------|-------|
| 443 | Caddy | HTTPS | 0.0.0.0 | Reverse proxy |
| 2222 | Caddy L4 | TCP | 0.0.0.0 | SSH proxy to Forgejo |
| 5432 | Caddy L4 | TCP | 0.0.0.0 | PostgreSQL proxy |
| 2200 | Forgejo SSH | TCP | localhost | Built-in SSH server |
| 3001 | Forgejo | HTTP | localhost | Web UI |
| 5050 | Zot | HTTP | localhost | Registry API |
| 8096 | Jellyfin | HTTP | localhost | Media server |
| 44491 | K8s API | HTTPS | 0.0.0.0 | Minikube API server |
## Related
- [[tailscale|Tailscale]] - ACL configuration
- [[indri|Indri]] - Where services run