Files

kavren 7e4ff79a11 docs: Add IP migration plan, fix gateways and static IPs

- Created IP-MIGRATION-PLAN.md with new allocation scheme
- Fixed all LXC gateways from 10.4.2.254 (Asus) to 10.4.2.1 (OPNsense)
- Set static IPs: UniFi (.16), Gitea (.17), Immich (.30)
- Migrated critical containers to local-lvm storage

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2025-12-22 15:58:23 -05:00

4.5 KiB

Raw Blame History

IP Address Migration Plan

Status: PAUSED

Completed 2025-12-22:

All LXC gateways fixed to 10.4.2.1 (OPNsense)
UniFi set to static 10.4.2.16
Gitea set to static 10.4.2.17
Immich set to static 10.4.2.30

Pending:

Media stack IP reorganization (10.4.2.20-29)
Pi-hole migration (10.4.2.129 → 10.4.2.11)
KavNas / Elantris IP updates
Traefik config updates for new IPs

New IP Allocation Scheme

Range	Purpose
10.4.2.1	OPNsense gateway
10.4.2.2-9	Proxmox nodes
10.4.2.10-19	Core Infrastructure (proxy, DNS, auth, NAS)
10.4.2.20-39	Services (media stack, apps)
10.4.2.40-49	Game servers / AMP
10.4.2.50-99	Reserved / Future
10.4.2.100-199	DHCP Dynamic Pool
10.4.2.200-239	Docker hosts / VMs
10.4.2.240-249	IoT / Network controllers
10.4.2.250-254	Network gear

Migration Table

Core Infrastructure (10.4.2.10-19)

Service	VMID	Node	Current IP	New IP	Gateway Fix
Traefik	104	pm2	10.4.2.10	10.4.2.10	Already 10.4.2.1
Pi-hole	103	pm4	10.4.2.129	10.4.2.11	Already 10.4.2.1
Authelia	116	pm2	10.4.2.19	10.4.2.12	10.4.2.254→10.4.2.1
KavNas	-	NAS	10.4.2.13	10.4.2.13	N/A (DHCP static)
Gitea	127	pm4	10.4.2.7 (DHCP)	10.4.2.14	Set to 10.4.2.1
Vaultwarden	125	pm4	10.4.2.212	10.4.2.15	10.4.2.254→10.4.2.1
UniFi	111	pm4	10.4.2.242 (DHCP)	10.4.2.16	Set to 10.4.2.1

Services - Media Stack (10.4.2.20-29)

Service	VMID	Node	Current IP	New IP	Gateway Fix
Sonarr	105	pm2	10.4.2.15	10.4.2.20	10.4.2.254→10.4.2.1
Radarr	108	pm2	10.4.2.16	10.4.2.21	10.4.2.254→10.4.2.1
Prowlarr	114	pm2	10.4.2.17	10.4.2.22	10.4.2.254→10.4.2.1
Bazarr	119	pm2	10.4.2.22	10.4.2.23	10.4.2.254→10.4.2.1
Whisparr	117	pm2	10.4.2.20	10.4.2.24	10.4.2.254→10.4.2.1
Jellyseerr	115	pm2	10.4.2.18	10.4.2.25	10.4.2.254→10.4.2.1
Jellyfin	121	elantris	10.4.2.21	10.4.2.26	Check
Kometa	120	pm2	10.4.2.23	10.4.2.27	10.4.2.254→10.4.2.1
Recyclarr	122	pm2	10.4.2.25	10.4.2.28	10.4.2.254→10.4.2.1
Notifiarr	118	pm2	10.4.2.21	10.4.2.29	10.4.2.254→10.4.2.1
Immich	126	pm4	DHCP	10.4.2.30	Set to 10.4.2.1

Services - Other (10.4.2.30-39)

Service	VMID	Node	Current IP	New IP	Gateway Fix
Immich	126	pm4	DHCP	10.4.2.30	Set to 10.4.2.1
Frigate	128	pm3	10.4.2.8	10.4.2.31	Check
Foundry VTT	112	pm3	10.4.2.37	10.4.2.32	Check
Home Assistant	100	pm1	10.4.2.62	10.4.2.33	Check
llama.cpp	123	elantris	10.4.2.224	10.4.2.34	Check

Game Servers (10.4.2.40-49)

Service	VMID	Node	Current IP	New IP	Gateway Fix
AMP	124	elantris	10.4.2.26	10.4.2.40	Check

Docker Hosts (10.4.2.200-209)

Service	VMID	Node	Current IP	New IP	Gateway Fix
docker-pm2	113	pm2	10.4.2.203	10.4.2.200	10.4.2.254→10.4.2.1
docker-pm4	110	pm4	10.4.2.204	10.4.2.201	10.4.2.254→10.4.2.1
docker-pm3	109	pm3	?	10.4.2.202	Check
dockge	107	pm3	?	10.4.2.203	Check

Migration Order

Phase 1: Fix gateways only (no IP changes)

Restart not required, just config update

Phase 2: Migrate non-critical services

Media stack (Sonarr, Radarr, etc.) - low impact
Docker hosts
Game servers

Phase 3: Migrate core services (brief downtime)

Authelia
Vaultwarden
UniFi
Gitea

Phase 4: Migrate DNS (coordinate carefully)

Update all DHCP clients to use new Pi-hole IP FIRST
Then migrate Pi-hole

Phase 5: Update Traefik configs

Update all backend IPs in Traefik route configs

Post-Migration

Update OPNsense DHCP static mappings
Update docs/INFRASTRUCTURE.md
Update Traefik configs
Test all services
Delete this migration plan file

Commands Reference

Change LXC IP and gateway:

pct set <vmid> --net0 name=eth0,bridge=vmbr0,gw=10.4.2.1,ip=<NEW_IP>/24,type=veth
pct reboot <vmid>

Add DHCP static mapping in OPNsense: Via UI: Services → DHCPv4 → [LAN] → Static Mappings

4.5 KiB Raw Blame History