56 lines
2.0 KiB
Markdown
56 lines
2.0 KiB
Markdown
---
|
||
created: '2026-04-16T00:45:29+00:00'
|
||
id: d8ea2189-ba56-4cde-81c3-b22a1bb5f675
|
||
keywords:
|
||
- ana-colo
|
||
- ana-docker
|
||
- ana-gw
|
||
- FortiGate-80F
|
||
- colocation
|
||
- infrastructure
|
||
links: []
|
||
modified: '2026-04-16T00:45:29+00:00'
|
||
summary: 'Top-level overview of the ana-colo colocation environment: single colo,
|
||
5 network zones, 1 FortiGate-80F firewall, ~10 servers, and ~20 Docker containers
|
||
on the primary Docker host.'
|
||
tags:
|
||
- infrastructure
|
||
- ana-colo
|
||
- network
|
||
- docker
|
||
- security
|
||
title: Ana Colo — Infrastructure Overview
|
||
---
|
||
|
||
# Ana Colo — Infrastructure Overview
|
||
|
||
> **Last surveyed:** 2026-04-15
|
||
|
||
## Environment Summary
|
||
|
||
| Property | Value |
|
||
|---|---|
|
||
| Site | Ana colocation |
|
||
| Firewall | FortiGate-80F (`ana-gw`), v7.2.10, NAT mode, standalone |
|
||
| Network zones | 5 (internal, userland, servers, sfsrv, mgmt) |
|
||
| Servers | ~10 (see [server map](ana-colo-network.md#server-map)) |
|
||
| Primary Docker host | `ana-docker` (10.250.50.70) — ~20 containers |
|
||
| VPN tunnels | 4 (2 WireGuard, 2 IPsec) |
|
||
| Public IPs | 5 (38.120.12.41–46) |
|
||
|
||
## Sub-Documents
|
||
|
||
| Document | Description |
|
||
|---|---|
|
||
| [Network Topology](ana-colo-network.md) | FortiGate zones, server map, VPN tunnels, firewall policies |
|
||
| [Port Map](ana-colo-port-map.md) | All public-to-internal port mappings and Traefik virtual hosts |
|
||
| [Docker Services](ana-docker-services.md) | Full container inventory on ana-docker with configs and issues |
|
||
| [Security Issues](ana-colo-security-issues.md) | All security and quality findings from the survey |
|
||
| [Conventions](ana-colo-conventions.md) | Established conventions and planned changes |
|
||
|
||
## Quick Reference
|
||
|
||
- **Public IPs:** 38.120.12.41 (gateway) · 38.120.12.42 (WireGuard/Kokoro) · 38.120.12.44 (Docker/Traefik/NAS) · 38.120.12.45 (Webhost) · 38.120.12.46 (TacticalRMM)
|
||
- **Primary service host:** `ana-docker` — 10.250.50.70 (via .44)
|
||
- **File server:** `ana-nas` — 10.250.50.50 (NFS, WebDAV)
|
||
- **Reverse proxy:** Traefik on ana-docker, wildcard DNS `*.phasefinal.com` → 38.120.12.44 |