NBK/it-docs
1
0
Fork 0
forked from support/it-docs
Code Pull requests Activity

Change Computers -> Servers , Remove ../computers/index.md

Browse source
This commit is contained in:
Tech Support 2024-09-30 11:39:03 +00:00
parent 588678e3d7
commit b6dab3747d
4 changed files with 0 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

32
docs/hardware/servers/290-g1.md Normal file
View file

@ -0,0 +1,32 @@
# HP 290 G1 MT
The HP 290 G1 system was acquired by Kh3group in the past, earlier than 2020. The system has been repurposed and is currently serving as the Kh3 office firewall. A PCIe 4-port gigabit Ethernet adapter has been installed, providing a total of 5 network interfaces for the firewall.
![HP-290](../../assets/hp290-01.png)
## Specifications
| CPU | RAM | Storage | OS | Hostname |
| -------------- | --- | --------- | --------------------------- | -------- |
| Intel i3-7100 | 8GB | 500GB HDD | Debian 11 (Promox VE 7.2-1) | pve02 |
### Proxmox VE
Proxmox VE 7.2-1, a virtualization management solution, has been installed on the HP 290 G1. It provides an easy-to-use web interface for managing virtual machines and containers.
![Proxmox Dashboard](../../assets/hp-prox-01.png)
The following virtual machines and containers are currently running on the Proxmox VE host:
#### pfSense Virtual Machine
A pfSense virtual machine acts as the firewall for the Kh3 office network. It has been configured using hardware passthrough to link the Ethernet adapter to the pfSense VM. This allows for better network performance and provides more control over the firewall configuration.
![Proxmox Dashboard](../../assets/hp-prox-03.png)
#### Debian 11 LXC Container
A Debian 11 LXC container also runs on the Proxmox host with Docker installed. The container runs a Pi-hole container and a Cloudflare Tunnel container. Pi-hole serves as the local DNS and ad-blocker for the Kh3 office network. The Cloudflare Tunnel container provides secure access to the internal services running on the Kh3 office network.
![Proxmox Dashboard](../../assets/hp-prox-04.png)
## Upgrade Path and Future Plans
The current plan is to upgrade the HP 290 G1 from a 500GB HDD to a 500GB SSD and upgrade from 4GB of RAM to 8GB of RAM. Ultimately, we plan to replace the PC with something more powerful and power-efficient.

61
docs/hardware/servers/optiplex-7040.md Normal file
View file

@ -0,0 +1,61 @@
# Dell Optiplex 7040 SFF
The Dell Optiplex was acquired in September 2022 to expand KH3's server infrastructure and host additional services. Proxmox VE 7.2-1 is installed on the system, which in turn supports three Windows Server 2016 virtual machines. One VM serves as an active directory domain controller, another runs SQL Server 2016, and the third runs SharePoint Server 2019. Additionally, a Debian LXC container runs on the Proxmox host, with Docker installed to support a variety of additional services containers.
| ![Optiplex 7040](../../assets/7040-01.png) |
| :-: |
## Specifications
| CPU | RAM | Storage | OS | Hostname |
| -------------- | ---- | ---------------------------- | --------------------------- | -------- |
| Intel i7-6700 | 32GB | 1TB M.2 SATA SSD / 500GB SSD | Debian 11 (Promox VE 7.2-1) | pve02 |
## Proxmox VE
Proxmox VE 7.2-1, a virtualization management solution, has been installed on the Dell Optiplex 7040. It provides an easy-to-use web interface for managing virtual machines and containers.
| ![Proxmox Dashboard](../../assets/dell-prox-01.png) |
| :--: |
| Promox Web Management Dashboard - Dell Optiplex 7040 |
| ![local](../../assets/dell-prox-06.png) | ![local](../../assets/dell-prox-07.png) |
| :--: | :--: |
| Storage - DIR01 | Storage - local |
| ![network-syn](../../assets/dell-prox-08.png) | ![network-syn](../../assets/dell-prox-09.png)|
| Storage - local-lvm | Storage - network-backup-syn |
The following virtual machines and containers are currently running on the Proxmox VE host:
### Windows Server 2016 - AD Domain Controller (dc01)
This server is responsible for authenticating users, computers, and other resources primarily to the Document Management System (DMS). It provides a centralized database of user accounts (kh3 users), passwords, and security information that enables users to log in to a domain and access resources across the network, namely the DMS.
| ![Proxmox Dashboard](../../assets/dell-prox-03.png) |
| :--: |
| Proxmox Content Panel for Windows Server Guest dc01 |
### Windows Server 2016 - SQL Server 2016 (db01)
SQL Server is a relational database management system (RDBMS) developed by Microsoft. This server is used primarily to store and retrieve data as requested by SharePoint Server 2019 (Document Management System). All data housed in the DMS in stored here
| ![Proxmox Dashboard](../../assets/dell-prox-04.png) |
| :--: |
| Proxmox Content Panel for Windows Server Guest db01 |
### Windows Server 2016 - SharePoint Server 2019
SharePoint Server 2019 is a collaboration and document management platform developed by Microsoft. It provides a set of tools and services that enable teams to create, share, and manage documents, websites, and other digital content. SharePoint provides the platform for KH3's Document Management System
| ![Proxmox Dashboard](../../assets/dell-prox-05.png) |
| :--: |
| Proxmox Content Panel for Windows Server Guest sp01 |
### Debian 11 LXC Container
A Debian 11 LXC container also runs on the Proxmox host with Docker installed. The container runs a Pi-hole container and a Cloudflare Tunnel container. Pi-hole serves as the local DNS and ad-blocker for the Kh3 office network. The Cloudflare Tunnel container provides secure access to the internal services running on the Kh3 office network.
| ![Proxmox Dashboard](../../assets/dell-prox-02.png) |
| :--: |
| Proxmox Content Panel for Debian 11 LXC Container proxy |

37
docs/hardware/servers/rs816.md Normal file
View file

@ -0,0 +1,37 @@
# Synology RS816
The Synology RackStation RS816 is a 4-bay rackmount Network Attached Storage device, that was acquired by the KH3 before 2020. Currently it used to store and synchronize design files and backup data from employees that have left the KH3.
![rs816](../../assets/rs816.png)
## Device Information
The Synology NAS runs on DSM 7.0-41890, which is the operating system for Synology's NAS devices.
Below is a summary of additional information about the device
| Specification | Value |
| ------------------ | --------------------------- |
| Server Name | kh3-fileserver |
| OS | DSM 7.0-41890 |
| Model | RS816 |
| CPU | MARVELL Armada 385 88F6820 |
| RAM | 1GB |
| Capacity | 3.6TB |
![rs816-info](../../assets/rs816-01.png)
## Configuration
The device is set up with four 4TB drives, utilizing Synology Hybrid Raid (SHR) for data redundancy. This means that up to two drives can fail without any data loss, although the usable storage capacity is limited to around 4TB. which provides a flexible and easy-to-use solution for managing and protecting data. It has several applications installed, including DHCP Server, DNS Server, LDAP Server, Log Center, Storage Analyzer, Synology Drive Server, and Universal Search.
It is connected to the same local network and subnet as other office client PCs, but it has two statically assigned IP addresses. Synology sync client is installed on the PCs of all designers and selected design folder from the designer's PCs are synced to their personal folders on the NAS. Additionally, data is copied from various sources and manually backed up to the NAS.
![]
## Security Measures
Access control is implemented using local DSM users accounts, each KH3 employee has a local DSM account on the NAS and a personal folder. There's just a single administrator account to reduce the attack surface of the NAS and improve security.
## Maintenance
Currently Synology NAS RS816 is running low on disk space and needs to be decluttered, however the medium term plan is to replace the NAS with a primary storage device and use the NAS for backups primarily.
## Conclusion
In summary, the Synology NAS RS816 is a valuable device for the KH3's business operations. However, it is important to take additional steps to ensure data security and perform regular maintenance to keep the device running smoothly.