=== FLOTTA AUTONOMA - CONFIGURAZIONI ===
Aggiornato: 2026-04-23

=== NETWORK ===
VPS IP Pubblico: 168.119.114.146
VPS IP Tunnel: 10.0.0.1
Nave IP LAN: 192.168.1.51
Nave IP Tunnel: 10.0.0.2
Dominio: privcloud.dev
Tunnel: WireGuard (interface wg0, porta 51820)

=== PERCORSI CRITICI NAVE ===
Hub Dati (SSD 1TB):      /mnt/ssd
Cassaforte Dati (HDD 5TB): /mnt/backup-hdd
Adrian Ops Hub:          /mnt/ssd/adrian/
Docker Configs:          /mnt/ssd/config/
Docker Data / User Data: /mnt/ssd/data/
Restic Repository:       /mnt/backup-hdd/flotta-backup
Restic Password File:    /mnt/ssd/adrian/scripts/secrets/restic_password

=== STRUTTURA SSD (/mnt/ssd) ===
/mnt/ssd/
├── albert/              (Bot Telegram Albert — stack Adrian)
├── config/              (Docker configs: jellyfin, navidrome, guacamole, portainer, webdav)
├── data/                (Dati utente: media 257GB, obsidian-vault, Dropbox mirror, ecc.)
└── adrian/              (Adrian Ops Hub — ingloba ex-Steve)
    ├── vault/           (credenziali, config, manifesto — .gitignore)
    ├── scripts/         (outlook_sync, monitor, backup Restic, pCloud mirror, wg_monitor)
    │   ├── secrets/     (restic_password)
    │   └── logs/        (backup_completo.log, pcloud_mirror.log, wg_monitor.log)
    ├── config-backups/  (snapshot configs locale + avamposto)
    ├── logbook/         (report giornalieri)
    ├── flotta-diagnostics/ (sentinel.py)
    └── CLAUDE.md

=== CRON JOBS (utente mauro) ===
01:15 - pCloud Full Mirror    (/mnt/ssd/adrian/scripts/pcloud_backup.sh)
02:30 - Config Snapshot Local (/mnt/ssd/adrian/config-backups/snapshot_configs.py)
02:45 - Avamposto Snapshot    (/mnt/ssd/adrian/config-backups/backup_avamposto.py)
05:45 - Logbook Report        (/mnt/ssd/adrian/logbook/collect_logs.py)
03:00 - Backup Completo Restic(/mnt/ssd/adrian/scripts/backup_completo.sh)
06:00 dom - Sentinel Check    (/mnt/ssd/adrian/flotta-diagnostics/sentinel.py)
*/5   - WireGuard Monitor     (/mnt/ssd/adrian/scripts/wg_monitor.sh)

=== CRON JOBS (root) ===
# Nessuno — Restic spostato a mauro crontab (usa sudo)

=== SUDO NOPASSWD ===
Nave:      /etc/sudoers.d/mauro-nopasswd (mauro ALL=(ALL) NOPASSWD: ALL)
Avamposto: /etc/sudoers.d/mauro-nopasswd (mauro ALL=(ALL) NOPASSWD: ALL)

=== VELIONMC — SERVER MINECRAFT FRANCESCO ===
Nome:          VelionMC
Provider:      Hetzner Cloud
Piano:         CX23 (2 vCPU, 4GB RAM, 40GB disco)
Location:      Falkenstein (FSN1)
IP Pubblico:   167.233.98.108
OS:            Ubuntu 24.04 LTS
Utente SSH:    root
Chiave SSH:    /home/mauro/.ssh/id_ed25519 (stessa della Nave)
Backup:        Hetzner automatico (20% costo)
Scopo:         Server Minecraft Paper per Francesco e amici (~5 giocatori)
Gestione:      Francesco (figlio) — Adrian supporto infrastruttura
Creato:        2026-04-23
Porta MC:      25565 (da aprire su ufw)
Note:          ufw e Java/Paper da configurare

=== CADDY REVERSE PROXY (su VPS) ===
Config: /opt/caddy/Caddyfile
Gestisce routing per *.privcloud.dev → 10.0.0.2 (Nave via tunnel)

=== FIREWALL VPS (ufw) ===
Porte aperte: 22/tcp, 80/tcp, 443/tcp, 51820/udp
fail2ban: attivo
ufw: attivo (riattivato 2026-03-04)