Reference ssh aliases
Configured in ~/.ssh/config on Console. Passwordless key auth.
| Alias | IP | Role |
|---|---|---|
ssh finn |
192.168.86.67 | Proxmox host |
ssh plex |
192.168.86.73 | LXC CT 101, media streaming |
ssh media-server |
192.168.86.74 | LXC CT 102, arr stack + VPN |
ssh adguard |
192.168.86.75 | LXC CT 105, DNS + ad block |
ssh homeassistant |
192.168.86.70 | VM CT 100, smart home |
ssh n8n |
192.168.86.82 | LXC CT 106, workflow automation |
ssh frigate |
192.168.86.84 | LXC CT 108, NVR |
ssh immich |
192.168.86.83 | LXC CT 107, photo library |
ssh minecraft |
192.168.86.23 | LXC CT 110, WiebCraft Paper + Geyser |
ssh vector |
192.168.86.147 (direct LAN, no ProxyJump) | Win11 PC, Justi user. As of 2026-07-14 Vector is a first-class LAN host: Finn's nic3 was bridged into vmbr0, so Vector's Ethernet 3 pulls DHCP from GFiber at 10Gbps. The old 10.0.0.0/24 point-to-point subnet and Finn's MASQUERADE are GONE. Console has a standing key in Vector's authorized_keys (see caveat below). |
ssh vector-ts |
100.67.60.11 (Tailscale) | Off-LAN fallback for Vector. Requires Tailscale up on both ends. |
Vector notes (2026-07-14):
192.168.86.147is a DHCP lease, not a reservation. If it moves, SSH byvector-tsand re-check. Reserve MAC98:B7:85:23:20:C7in the GFiber app to pin it.- SSH inbound is allowed by firewall rule "Forge SSH (Console)" (TCP 22, Any profile, scoped to 192.168.86.0/24 + 100.64.0.0/10). Without it, Windows blocks SSH whenever the adapter lands on the Public profile.
- Vector's Tailscale runs with
--accept-routes=false(set 2026-07-14). With it enabled, Tailscale installed192.168.86.0/24at RouteMetric 0 via Finn's subnet router and Vector tunneled all LAN traffic through Finn, breaking LAN discovery (LocalSend, mDNS). Do not re-enable while Vector lives on this LAN. - Key-based SSH cannot reach Vector's Credential Manager or interactive drive mappings (network logon, no DPAPI unlock). Drive remaps must be done by Justin in his own session.
biz-apps (CT 104) was decommissioned 2026-04-28 (Pure Phoenix Phase 3.3); SSH alias to be removed in that batch.
Quick fleet snapshot: /ssh-status.