Skip to main content

​
Traffic Flow

No ports are exposed to the internet. All inbound traffic goes through the Cloudflare tunnel.

​
DNS

Domain *.augustin.ai managed in Cloudflare. Each service gets a CNAME pointing to the tunnel.

​
Cloudflare Tunnel

cloudflared runs on i3 as a Docker container on the traefik network. It connects outbound to Cloudflare and forwards traffic to Traefik on port 8880.

​
Traefik

Single Traefik instance on i3. Listens on 8880 (HTTP) and 8443 (HTTPS), mapped from container ports 80 and 443.
  • i3 services — routed via Docker labels on the traefik Docker network
  • Pentium services — routed via traefik/dynamic/pentium-services.yaml, which forwards over LAN to 192.168.1.16:<port>
Pentium services routed through Traefik:
ServicePort
jellyfin8096
sonarr8989
radarr7878
bazarr6767
seerr5055
audiobookshelf13378
qbittorrent8085
prowlarr9696
calibre-web8083
chaptarr8789
The Traefik dashboard is at traefik.augustin.ai, protected by basic auth.

​
LAN

MachineIP
i3192.168.1.100
Pentium192.168.1.16
SSH between machines uses key-based auth with ~/.ssh/config aliases (ssh pentium from i3, ssh i3 from Pentium).