VPS Principal — 144.91.96.120

# VPS Principal — 144.91.96.120 ## Specs | Propriété | Valeur | |-----------|--------| | **Hostname** | vmi3041673 | | **IP Publique** | 144.91.96.120 / 2a02:c207:2304:1673::1 | | **IP Tailscale** | 100.112.45.36 | | **OS** | Linux 6.8.0-117-generic | | **Kernel** | x86_64 | | **Disque** | 96G (76G used, 21G free, 79%) | | **Container runtime** | Docker (containerd) | ## Services Systemd Actifs | Service | Description | Status | |---------|-------------|--------| | `hermes-gateway` | Hermes Agent Gateway (3 profils: default+maison+nexio) | ✅ Running (2j, 3.9G RAM) | | `hermes-dashboard` | Hermes Agent Dashboard Web UI | ✅ Running | | `nginx` | Reverse proxy + static serving | ✅ Running | | `postgresql@16-main` | PostgreSQL 16 (DB: paperclip) | ✅ Running | | `docker` | Docker Engine (Infisical stack) | ✅ Running | | `tailscaled` | Tailscale node agent | ✅ Running | | `crowdsec` + `crowdsec-firewall-bouncer` | WIP/IPS (dashboard :6060) | ✅ Running | | `fail2ban` | Ban brute-force SSH | ✅ Running | | `syncthing` | File sync (Tailscale, port 22000/8384) | ✅ Running | | `sms-finance` | SMS Finance Webhook (MacroDroid → FastAPI) | ✅ Running | | `ssh` | OpenSSH server | ✅ Running | | `git-sync-watcher` | Git Sync Watcher pour Rizz | ✅ Running | | `pi-coding-agent` | Pi Coding Agent (RPC via socat) | ✅ Running | | `pm2-root` | PM2 process manager | ✅ Running (vide — pas de process) | ## Ports Écoute (résumé) | Port | Service | Bind | Access | |------|---------|------|--------| | 22 | SSH | 0.0.0.0 | Public | | 80 | Nginx | 0.0.0.0 | Public | | 443 | Tailscale HTTPS | Tailscale IP | Tailscale only | | 5432 | PostgreSQL 16 | 127.0.0.1 | Local only | | 8000 | NotebookLM Server | 127.0.0.1 | Local only | | 8089 | Infisical (Docker) | 127.0.0.1 | Local only | | 8080 | CrowdSec Dashboard | 127.0.0.1 | Local only | | 8090 | Madacup dev | 127.0.0.1 | Local only | | 9120 | Hermes API | 0.0.0.0 | Public | | 9191 | Family Dashboard API (Python) | 127.0.0.1 | Local only | | 9192 | Family Dashboard API (Tailscale) | Tailscale IP | Tailscale only | | 3113 | Memory App (fenohery.space) | 127.0.0.1 | Local only | | 8642 | Hermes internal | 127.0.0.1 | Local only | | 6060 | CrowdSec API | 127.0.0.1 | Local only | | 22000 | Syncthing | Tailscale IP | Tailscale only | | 8384 | Syncthing Web UI | Tailscale IP | Tailscale only | ## Docker Containers | Container | Image | Status | Ports | |-----------|-------|--------|-------| | `infisical` | infisical/infisical:latest | Up 3 days | 127.0.0.1:8089→8080 | | `infisical-postgres` | postgres:16-alpine | Up 5 days (healthy) | 5432 (internal) | | `infisical-redis` | redis:7-alpine | Up 5 days (healthy) | 6379 (internal) | ## Bases de données ### PostgreSQL 16 (host) | DB | Owner | Usage | |----|-------|-------| | `paperclip` | paperclip | Paperclip AI server | | `postgres` | postgres | System | ### PostgreSQL (Docker — Infisical) | DB | Usage | |----|-------| | infisical | Secrets manager backend | ## Nginx — Sites configurés | Domaine | Proxy vers | Auth | Notes | |---------|-----------|------|-------| | `dev.madacup.online` | 127.0.0.1:8090 | Non | Assets depuis `/root/workspace/madacup-website-local/assets/` | | `env.nexio.work` | 127.0.0.1:8089 | Basic auth | Infisical UI (WebSocket support) | | `family.fenohery.space` | Static + `/api/` → 9192 | Non | Family dashboard (SPA) | | `memory.fenohery.space` | 127.0.0.1:3113 | Non | Memory app (WS support) | ## Workspace Structure Path : `/root/workspace/` — ~87 répertoires, ~30 repos git. Projets principaux : - `/root/workspace/kontia/` — Kontia compta IA - `/root/workspace/nexio-os/` — Nexio OS SaaS - `/root/workspace/nexio-app/` — Nexio App Next.js - `/root/workspace/nexio-work/` — Nexio workspace monorepo - `/root/workspace/mochogo-web/` — Mochogo web app - `/root/workspace/gbrain/` — GBrain v0.22.4 - `/root/workspace/Meristheme/` — Client Meristhème - `/root/workspace/Nostra/` — Client Nostra - `/root/workspace/fataplus-os/` — FATAPLUS OS (SaaS) - `/root/workspace/jpm-content/` — JPM website content - `/root/workspace/family-dashboard/` — Family dashboard - `/root/workspace/hyperframes/` — Hyperframes video - `/root/workspace/plane/` — Plane PM tool - `/root/workspace/madacup-website/` — Madacup site # Citations [1] Données vérifiées : `systemctl list-units`, `ss -tlnp`, `docker ps`, `nginx -T`, `df -h` (2026-06-14).