Infrastructure

Physical hardware, network layout, and service placement.

Hardware

Host Hardware OS Role
fw01 SuperMicro 1U
E3-1230v2 • 16 GB RAM		 OPNsense 26.1 Firewall, router, VPN, reverse proxy
pf • relayd • WireGuard • unbound
srv01 Dell R720
Xeon E5-2620 • 96 GB RAM		 FreeBSD Primary server
Gitea • httpd • OpenSMTPD • Prometheus • Grafana • Matrix
srv02 Dell R710
Xeon X5560 • 288 GB RAM		 FreeBSD + Linux VMs Backup, game servers
nsd • qemu • Jellyfin • secondary DNS
ws01 Desktop
Intel Core i9-12900K • 64 GB RAM		 Fedora Linux 43 Daily driver, Ansible control node
Development • playbook management
ws02 Lenovo ThinkPad T14s
AMD Ryzen Pro 5 8640HS • 32 GB RAM		 Fedora Linux 43 Mobile daily driver
Development • remote work
ws03 System76 Lemur Pro
Intel Core i7-10210U • 16 GB RAM		 FreeBSD FreeBSD testing machine
Development • testing

Network Diagram

Internet fw01 OPNsense 26.1 · SuperMicro 1U Mgmt VLAN 1 Servers VLAN 10 Desktop VLAN 20 Game VLAN 30 IoT/Guest VLAN 40 srv01 Dell R720 · FreeBSD srv02 Dell R710 · FreeBSD ws01 Desktop · Fedora ws02 ThinkPad T14s ws03 Lemur Pro · FreeBSD

Services

ServiceHostURL
Web / httpdsrv01ridgwaysystems.org
Giteasrv01git.ridgwaysystems.org
Email (OpenSMTPD)srv01—
DNS (unbound)fw01internal resolver
DNS (nsd)srv02authoritative
Prometheus + Grafanasrv01monitoring.ridgwaysystems.org
Matrixsrv01matrix.ridgwaysystems.org
Jellyfinsrv02jellyfin.ridgwaysystems.org
WireGuard VPNfw01vpn.ridgwaysystems.org

VLAN Layout

VLANIDSubnetPurpose
Management110.0.1.0/24Switches, OOB, firewall management
Servers1010.0.10.0/24srv01, srv02 — all hosted services
Desktop2010.0.20.0/24ws01 and personal devices
Game3010.0.30.0/24Gaming VMs and clients
IoT/Guest4010.0.40.0/24Untrusted / isolated devices