1
0
Fork 0
forked from support/it-docs

Compare commits

...
Sign in to create a new pull request.

81 commits
main ... main

Author SHA1 Message Date
support
7b03ba3e0c Update requirements.txt 2025-11-02 02:45:30 +00:00
Siisi Nketsiah
f8839cef09 Update mkdocs.yml 2024-10-15 11:37:10 +00:00
Siisi Nketsiah
3c9e66cec7 Update mkdocs.yml 2024-10-15 11:27:44 +00:00
Siisi Nketsiah
85fb56a17d Update mkdocs.yml 2024-10-15 11:19:58 +00:00
Siisi Nketsiah
8640000c09 Update mkdocs.yml 2024-10-15 11:17:56 +00:00
Siisi Nketsiah
952689b911 Update mkdocs.yml 2024-10-15 11:02:59 +00:00
Siisi Nketsiah
1accb20af0 Update hardware/network/index.md 2024-10-15 10:57:21 +00:00
Siisi Nketsiah
7c4339985a Update mkdocs.yml 2024-10-15 10:45:31 +00:00
Siisi Nketsiah
6c3900b409 Update hardware/servers/index.md 2024-10-15 10:38:57 +00:00
Siisi Nketsiah
cd633aeb97 Update hardware/servers/index.md 2024-10-06 12:50:57 +00:00
Siisi Nketsiah
b7948988f3 Update hardware/servers/index.md 2024-10-06 12:48:06 +00:00
Siisi Nketsiah
be432fe299 Update hardware/servers/optiplex-7040 2024-10-06 10:10:24 +00:00
Tech Support
df3b4520e5 Update mkdocs.yml 2024-10-04 11:01:19 +00:00
Tech Support
96cabc26b2 removing stale resources and updating image urls (webp) 2024-10-04 10:56:03 +00:00
Tech Support
5d61beb874 remove message for test 2024-10-04 10:42:54 +00:00
Tech Support
35dd6b2102 added message for test 2024-10-04 10:12:26 +00:00
Siisi Nketsiah
f821295ac5 Update image in hardware/network/hg8245h.md 2024-10-01 14:17:01 +00:00
Siisi Nketsiah
bea6e55903 Replace images assets/ 2024-10-01 14:11:18 +00:00
Tech Support
9508d1879f Update mkdocs.yml 2024-09-30 13:17:19 +00:00
Tech Support
54909f46b1 Update .drone.yml 2024-09-30 13:14:42 +00:00
Tech Support
a639074daf Update .drone.yml 2024-09-30 12:36:51 +00:00
Tech Support
2aeb1bc445 Update mkdocs.yml, .drone.yml, requirements.txt 2024-09-30 12:22:09 +00:00
Tech Support
b6dab3747d Change Computers -> Servers , Remove ../computers/index.md 2024-09-30 11:39:03 +00:00
Tech Support
588678e3d7 Update mkdocs.yml 2024-09-30 11:31:15 +00:00
Tech Support
f2e6c2d3e1 Update mkdocs.yml 2024-09-30 11:27:49 +00:00
support
def8d745ac Update mkdocs.yml 2024-09-30 11:10:29 +00:00
support
c9f6b486ea Update mkdocs.yml 2024-09-30 11:04:54 +00:00
support
67d5662a9c Update docs/index.md 2024-09-29 17:11:38 +00:00
support
893874502f Update mkdocs.yml 2024-09-29 17:04:21 +00:00
support
73b54abb3a Update mkdocs.yml 2024-09-29 13:36:05 +00:00
support
8786c27426 Update mkdocs.yml 2024-09-29 13:31:29 +00:00
support
956929b1b2 Update mkdocs.yml 2024-09-28 13:29:54 +00:00
support
3e7941d18a Update mkdocs.yml 2024-09-28 13:22:43 +00:00
support
447e1f3085 Update mkdocs.yml 2024-09-28 13:09:05 +00:00
support
fbf46e8026 Update mkdocs.yml 2024-09-28 13:06:58 +00:00
support
45e7cb1a83 Update mkdocs.yml 2024-09-28 12:55:46 +00:00
support
40ae2604d5 Delete docs/services/docker/pihole/configuration.md 2024-09-28 11:20:48 +00:00
support
87514dce9c Update mkdocs.yml
changed repo_url
2024-09-28 09:01:27 +00:00
support
10523deec6 Update mkdocs
updated navigation and also removed production section
2024-09-27 13:25:45 +00:00
support
26e07e7e47 Delete docs/services/docker/mongodb.md 2024-09-27 12:43:16 +00:00
support
31005de595 Delete docs/services/docker/mariadb.md 2024-09-27 12:42:53 +00:00
support
2a53d48dbf Delete docs/services/docker/graylog.md 2024-09-27 12:42:33 +00:00
support
4be140ecb3 Delete docs/services/docker/gitea.md 2024-09-27 12:42:12 +00:00
support
eeca89355f Delete docs/services/docker/elasticsearch.md 2024-09-27 12:41:56 +00:00
support
3bf9e0da20 Delete docs/services/docker/droneci.md 2024-09-27 12:41:30 +00:00
support
8dd8ff73ec Added installation.md nginx 2024-09-27 12:38:57 +00:00
support
3b8ce3c996 Added configuration.md nginx 2024-09-27 12:38:26 +00:00
support
34930c3638 Added installation.md portainer 2024-09-27 12:37:18 +00:00
support
c851ac2c23 Added configuration.md portainer 2024-09-27 12:36:40 +00:00
support
4a3faa4317 Added installation.md pihole 2024-09-27 12:35:52 +00:00
support
dae64096ba Added configuration.md pihole 2024-09-27 12:35:24 +00:00
support
43a71ef608 Added installation.md mongodb 2024-09-27 12:34:20 +00:00
support
838aa4ee4f Added configuration.md traefik 2024-09-27 12:33:52 +00:00
support
fe4bb18898 Added configuration.md mongodb 2024-09-27 12:32:58 +00:00
support
d3baa676f7 Added configuration.md mongodb 2024-09-27 12:32:18 +00:00
support
12fe8fd23f Added installation.md mariadb 2024-09-27 12:30:51 +00:00
support
5703dd7ae9 Added configuration.md mariadb 2024-09-27 12:30:06 +00:00
support
51cc736300 Added configuration.md gitea 2024-09-27 12:29:20 +00:00
support
43205524e9 Added installation.md gitea 2024-09-27 12:28:41 +00:00
support
0f6efe7825 Add docs/services/droneci/configuration.md 2024-09-27 12:26:26 +00:00
support
d401d040d4 Add docs/services/droneci/installation.md 2024-09-27 12:26:04 +00:00
support
3406b288c4 Update 'docs/hardware/index.md' 2023-09-22 11:15:25 +00:00
support
3365b13e8e Update 'docs/hardware/index.md' 2023-09-22 11:06:01 +00:00
support
465677632f Update 'docs/hardware/index.md' 2023-09-22 10:56:03 +00:00
support
35fd4c3934 Update 'docs/hardware/index.md' 2023-09-22 10:54:38 +00:00
support
07ecab4ce6 Update 'docs/hardware/network/hg8245h.md' 2023-09-22 10:44:30 +00:00
support
9569704634 Update 'docs/hardware/network/hg8245h.md' 2023-09-22 10:25:54 +00:00
support
816bd84667 Update 'docs/hardware/network/hg8245h.md' 2023-09-22 10:24:16 +00:00
support
508b1c2317 Update 'docs/hardware/network/hg8245h.md' 2023-09-22 09:07:55 +00:00
support
f838964cb5 Update 'docs/hardware/network/hg8245h.md' 2023-09-18 09:34:44 +00:00
support
1e294ac012 Update 'docs/hardware/network/hg8245h.md' 2023-09-18 09:32:56 +00:00
support
cb86a7af0d added image for device info 2023-09-18 09:08:34 +00:00
support
589b65246b Upload files to 'docs/assets'
device info page for hg824h
2023-09-18 09:05:27 +00:00
support
4fecca4c22 Update 'docs/hardware/index.md' 2023-09-18 08:49:19 +00:00
support
b29ad270c0 Update 'mkdocs.yml' 2023-09-11 13:14:37 +00:00
support
e7e6b67fe4 Update 'requirements.txt' 2023-09-11 12:30:39 +00:00
support
0ead6c0ed4 Update 'requirements.txt' 2023-09-11 12:29:38 +00:00
support
2f06de8a8e Update 'requirements.txt' 2023-09-11 12:26:15 +00:00
support
c2cc9f3c96 Update 'requirements.txt' 2023-09-11 12:24:43 +00:00
support
2c35f411b6 Update 'requirements.txt' 2023-09-11 12:23:51 +00:00
support
72607938fe Merge pull request 'Update 'docs/index.md'' (#1) from NBK/it-docs:main into main
Reviewed-on: https://git.office.kh3group.com/support/it-docs/pulls/1
2023-06-19 10:29:04 +00:00
94 changed files with 203 additions and 82 deletions

BIN
.DS_Store vendored Normal file

Binary file not shown.

BIN
docs/.DS_Store vendored Normal file

Binary file not shown.

Binary file not shown.

Before

Width:  |  Height:  |  Size: 155 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 31 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 518 KiB

BIN
docs/assets/7040-01.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 48 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 29 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 175 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 75 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 55 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 26 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 49 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 22 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 48 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 22 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 51 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 24 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 79 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 32 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 69 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 26 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 62 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 22 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 61 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 22 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 537 KiB

BIN
docs/assets/hg8245h-00.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 53 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 161 KiB

BIN
docs/assets/hg8245h-02.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 73 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 61 KiB

BIN
docs/assets/hg8245h-03.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 37 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 71 KiB

BIN
docs/assets/hg8245h-04.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 34 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 87 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 204 KiB

BIN
docs/assets/hp-prox-01.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 73 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 113 KiB

BIN
docs/assets/hp-prox-02.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 57 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 55 KiB

BIN
docs/assets/hp-prox-03.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 25 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 59 KiB

BIN
docs/assets/hp-prox-04.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 28 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 531 KiB

BIN
docs/assets/hp290-01.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 66 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 607 KiB

BIN
docs/assets/hp290-02.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 77 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 565 KiB

BIN
docs/assets/hp290-03.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 60 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 56 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 27 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 77 KiB

BIN
docs/assets/proxmox-01.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 26 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 216 KiB

BIN
docs/assets/proxmox-02.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 127 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 181 KiB

BIN
docs/assets/proxmox-03.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 81 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 180 KiB

BIN
docs/assets/proxmox-04.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 74 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 177 KiB

BIN
docs/assets/proxmox-05.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 78 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 189 KiB

BIN
docs/assets/proxmox-06.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 79 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 185 KiB

BIN
docs/assets/proxmox-07.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 81 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 176 KiB

BIN
docs/assets/proxmox-08.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 64 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 107 KiB

BIN
docs/assets/rs816-01.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 46 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 577 KiB

BIN
docs/assets/rs816.webp Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 63 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 258 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 134 KiB

View file

@ -1,4 +1,4 @@
# Device List
# KH3 Hardware Infrastructure
_List of current hardware on network that includes network equipment, computers and configuration details._
@ -7,9 +7,9 @@ _List of current hardware on network that includes network equipment, computers
### Computers and Servers
| Device Name | CPU | RAM | OS | Hostname |
| ------------------------------------- | -------------------------- | --------- | ------------------------ | -------- |
| [HP 290 G1 MT ](hp-290-g1.md) | i3-7100 | 8GB DDR4 | Debian 11(Proxmox 7.2-1) | pve01 |
| [Dell OptiPlex 7040](optiplex-7040.md)| i7-6700 | 32GB DDR4 | Debian 11(Proxmox 7.2-1) | pve02 |
| [Synology NAS RS816](synology-nas.md) | MARVELL Armada 385 88F6820 | 1GB DDR3 | Synology DSM7 | kh3-fsrv |
| [HP 290 G1 MT ](computers/290-g1.md) | i3-7100 | 8GB DDR4 | Debian 11(Proxmox 7.2-1) | pve01 |
| [Dell OptiPlex 7040](computers/optiplex-7040.md)| i7-6700 | 32GB DDR4 | Debian 11(Proxmox 7.2-1) | pve02 |
| [Synology NAS RS816](computers/rs816.md) | MARVELL Armada 385 88F6820 | 1GB DDR3 | Synology DSM7 | kh3-fsrv |
## Network Devices
@ -19,12 +19,10 @@ _List of current hardware on network that includes network equipment, computers
| ---------------------------------------- | ------------------ | -------------- | -------- |
| [Cisco SF300-24P](switch.md) | 24-Port 10/100 PoE | Managed Switch | Change |
### Router Details
### Routers
| Device Name | Firewall | DHCP | Mode |
| ------------------- | -------- | ---- | --------- |
| Synology-RT2600ac | No | No | AP |
| Huawei-HG8245H | No | Yes | ADSL |
| Huawei-HG8245W5-8T | No | No | ADSL |
## Images
| [Synology-RT2600ac](network/rt2600ac.md) | No | No | AP |
| [Huawei-HG8245H](network/hg8245h.md) | No | Yes | ADSL |
| [Huawei-HG8245W5-8T](network/hg8245w5.md) | No | No | ADSL |

View file

@ -2,15 +2,22 @@
The Huawei EchoLife HG8245H is a routing-type Optical Network Terminal (ONT) in the Huawei all-optical access solution. It uses the GPON technology to implement ultra-broadband access for users.
The device was supplied by Kh3's primary Internet Service Provider, Vodafone and provides highspeed fiber broadband to the KH3 office. This device served as KH3's primary wireless, however it did not funtion optimally as a wireless router and resulted in poor internet browsing experience for kh3 users.
<img width="100%" src="../../assets/hg8245h-00.png" style="margin:0 auto" />
| ![hg8245h](../../assets/hg8245h-00.webp) |
| :--: |
| Huawei EchoLife HG8245H router |
Currently the device no longer acts as a wireless router but its is still responsible for bringing
in internet from vodafone, the wirless Access Point functionality is handeled by a different device (Synology RT2600AC).
![hg8245h](../../assets/hg8245h-01.png)
in internet from vodafone, the wirless Access Point functionality is handeled by a different device (Synology RT2600AC).
| ![hg8245h](../../assets/hg8245h_device_info.webp) |
| :--: |
| HG8245H Login |
## Device Information
Below is a screenshot for the managment web interface page of the device, showing all device related information
![]()
| ![hg8245h](../../assets/hg8245h_device_info.webp) |
| :--: |
| Huawei Device Information Page |
## LAN Host Configuration

View file

@ -1,2 +1,49 @@
# Network Overview
![network](../../assets/kh3-office-net.drawio.svg)
KH3 Groups network infrastructure is composed of a variety of devices designed to provide reliable and high-speed internet connectivity, manage traffic efficiently, and ensure secure networking. The network devices include both routing and switching equipment sourced from trusted vendors, adapted to meet KH3s specific needs for internet access and internal network management.
The key devices in the network infrastructure are:
1. **Huawei EchoLife HG8245H** - A routing-type Optical Network Terminal (ONT) provided by Vodafone as part of KH3's primary fiber broadband service. Despite its role in delivering high-speed fiber broadband, its performance as a wireless router was suboptimal, leading to a poor internet browsing experience for KH3 users.
2. **Huawei EchoLife H8245W5-8T** - Another ONT device using GPON technology, supplied by MTN as part of their fiber broadband service in 2021. It provides 4 GE ports, 2 POTS ports, 1 USB port, and both 2.4GHz and 5GHz WiFi, serving as a key component of KH3s network setup.
3. **Synology RT2600ac** - A high-performance WiFi router powered by a dual-core 1.7GHz processor. It supports both 2.4GHz and 5GHz radios and offers WAN aggregation, failover capabilities, and Layer 7 traffic control, all managed through Synologys user-friendly DSM interface.
4. **Cisco Small Business Ethernet Switch** - A 24-port Fast Ethernet switch that provides advanced security features and network management capabilities. Part of Ciscos Small Business line, this switch is designed to handle the demands of data, voice, security, and wireless technologies, making it an essential part of KH3s internal networking.
Together, these devices form the backbone of KH3s network, enabling high-speed internet access, seamless connectivity, and robust network management.
![network](../../assets/kh3-office-net.drawio.svg)
## Huawei EchoLife HG8245H
The Huawei EchoLife HG8245H is a routing-type Optical Network Terminal (ONT) in the Huawei all-optical access solution. It uses the GPON technology to implement ultra-broadband access for users.
The device was supplied by Kh3's primary Internet Service Provider, Vodafone and provides highspeed fiber broadband to the KH3 office. This device served as KH3's primary wireless, however it did not funtion optimally as a wireless router and resulted in poor internet browsing experience for kh3 users.
| ![hg8245h](../../assets/hg8245h-00.webp) |
| :--: |
| Huawei EchoLife HG8245H router |
Currently the device no longer acts as a wireless router but its is still responsible for bringing
in internet from vodafone, the wirless Access Point functionality is handeled by a different device (Synology RT2600AC).
| ![hg8245h](../../assets/hg8245h_device_info.webp) |
| :--: |
| HG8245H Login |
### Device Information
Below is a screenshot for the managment web interface page of the device, showing all device related information
| ![hg8245h](../../assets/hg8245h_device_info.webp) |
| :--: |
| Huawei Device Information Page |
## Huawei EchoLife HG8245W5-8T
The Hauwei EchoLife H8245W5-8T is a routing-type Optical Network Terminal (ONT). It uses the GPON technology to implement ultra-broadband access for users.
It provides 4 GE ports, 2 POTS ports, 1 USB port and 2.4G & 5G WiFi ports.
KH3 subscribed to MTN's fiber broadband service in early 2021 and the device was supplied a part of the service bundle by MTN.
## Synology RT2600ac
The Synology RT2600ac is a wifi router that brings together a comprehensive selection of wireless protocols and features with a management interface based on Synologys DSM operating system. Powered by a dual-core 1.7Ghz processor, the RT2600ac incorporates 2.4GHz and 5GHz radios and offers WAN aggregation, WAN failover, and hardware-assisted Layer 7 traffic control.
## Cisco SF300-24P
Part of the Cisco Small Business line of network solutions, is a fixed-configuration managed Ethernet switch. It has 24 ports of Fast Ethernet connectivityIt supports advanced security management capabilities and network features for data, voice, security, and wireless technologies. It is simple to deploy and configure.

View file

@ -1,7 +1,7 @@
# HP 290 G1 MT
The HP 290 G1 system was acquired by Kh3group in the past, earlier than 2020. The system has been repurposed and is currently serving as the Kh3 office firewall. A PCIe 4-port gigabit Ethernet adapter has been installed, providing a total of 5 network interfaces for the firewall.
![HP-290](../../assets/hp290-01.png)
![HP-290](../../assets/hp290-01.webp)
## Specifications
@ -13,19 +13,19 @@ The HP 290 G1 system was acquired by Kh3group in the past, earlier than 2020. Th
### Proxmox VE
Proxmox VE 7.2-1, a virtualization management solution, has been installed on the HP 290 G1. It provides an easy-to-use web interface for managing virtual machines and containers.
![Proxmox Dashboard](../../assets/hp-prox-01.png)
![Proxmox Dashboard](../../assets/hp-prox-01.webp)
The following virtual machines and containers are currently running on the Proxmox VE host:
#### pfSense Virtual Machine
A pfSense virtual machine acts as the firewall for the Kh3 office network. It has been configured using hardware passthrough to link the Ethernet adapter to the pfSense VM. This allows for better network performance and provides more control over the firewall configuration.
![Proxmox Dashboard](../../assets/hp-prox-03.png)
![Proxmox Dashboard](../../assets/hp-prox-03.webp)
#### Debian 11 LXC Container
A Debian 11 LXC container also runs on the Proxmox host with Docker installed. The container runs a Pi-hole container and a Cloudflare Tunnel container. Pi-hole serves as the local DNS and ad-blocker for the Kh3 office network. The Cloudflare Tunnel container provides secure access to the internal services running on the Kh3 office network.
![Proxmox Dashboard](../../assets/hp-prox-04.png)
![Proxmox Dashboard](../../assets/hp-prox-04.webp)
## Upgrade Path and Future Plans

View file

@ -0,0 +1,60 @@
# Servers Overview
KH3 Group's server infrastructure is built using a combination of repurposed desktop systems and dedicated network storage devices to meet the organizations evolving needs. These systems, though originally designed for different purposes, have been strategically adapted to provide essential services, ensuring both flexibility and cost-efficiency in IT operations.
The servers support a variety of critical functions, from network security to hosting enterprise applications and managing data storage. Leveraging virtualization technologies, they maximize resource utilization, allowing for the deployment of multiple virtual machines and services on a single physical system.
KH3s infrastructure is centered around three main components:
1. **HP 290 G1** - Repurposed as the office firewall, with an enhanced network interface configuration to manage and secure internal and external traffic.
2. **Dell Optiplex 7040** - Serving as a core virtualized host, running Proxmox to deliver essential services like Active Directory, SQL Server, and SharePoint, while also supporting containerized applications.
3. **Synology RackStation RS816** - Acting as the primary storage device, this NAS handles both file synchronization and data backup, ensuring the security of critical organizational data.
Each of these systems plays a vital role in KH3 Groups operations, providing the necessary infrastructure for secure, reliable, and scalable IT services.
## HP 290 G1 MT
The HP 290 G1 system was acquired by Kh3group in the past, earlier than 2020. The system has been repurposed and is currently serving as the Kh3 office firewall. A PCIe 4-port gigabit Ethernet adapter has been installed, providing a total of 5 network interfaces for the firewall.
![HP-290](../../assets/hp290-01.webp)
### Specifications
| CPU | RAM | Storage | OS | Hostname |
| -------------- | --- | --------- | --------------------------- | -------- |
| Intel i3-7100 | 8GB | 500GB HDD | Debian 11 (Promox VE 7.2-1) | pve02 |
## Dell Optiplex 7040 SFF
The Dell Optiplex was acquired in September 2022 to expand KH3's server infrastructure and host additional services. Proxmox VE 7.2-1 is installed on the system, which in turn supports three Windows Server 2016 virtual machines. One VM serves as an active directory domain controller, another runs SQL Server 2016, and the third runs SharePoint Server 2019. Additionally, a Debian LXC container runs on the Proxmox host, with Docker installed to support a variety of additional services containers.
| ![Optiplex 7040](../../assets/7040-01.webp) |
| :-: |
### Specifications
| CPU | RAM | Storage | OS | Hostname |
| -------------- | ---- | ---------------------------- | --------------------------- | -------- |
| Intel i7-6700 | 32GB | 1TB M.2 SATA SSD / 500GB SSD | Debian 11 (Promox VE 7.2-1) | pve02 |
## Synology RS816
The Synology RackStation RS816 is a 4-bay rackmount Network Attached Storage device, that was acquired by the KH3 before 2020. Currently it used to store and synchronize design files and backup data from employees that have left the KH3.
![rs816](../../assets/rs816.webp)
### Device Information
The Synology NAS runs on DSM 7.0-41890, which is the operating system for Synology's NAS devices.
Below is a summary of additional information about the device
| Specification | Value |
| ------------------ | --------------------------- |
| Server Name | kh3-fileserver |
| OS | DSM 7.0-41890 |
| Model | RS816 |
| CPU | MARVELL Armada 385 88F6820 |
| RAM | 1GB |
| Capacity | 3.6TB |
![rs816-info](../../assets/rs816-01.webp)

View file

@ -1,7 +1,7 @@
# Dell Optiplex 7040 SFF
The Dell Optiplex was acquired in September 2022 to expand KH3's server infrastructure and host additional services. Proxmox VE 7.2-1 is installed on the system, which in turn supports three Windows Server 2016 virtual machines. One VM serves as an active directory domain controller, another runs SQL Server 2016, and the third runs SharePoint Server 2019. Additionally, a Debian LXC container runs on the Proxmox host, with Docker installed to support a variety of additional services containers.
| ![Optiplex 7040](../../assets/7040-01.png) |
| ![Optiplex 7040](../../assets/7040-01.webp) |
| :-: |
@ -15,15 +15,15 @@ The Dell Optiplex was acquired in September 2022 to expand KH3's server infrastr
## Proxmox VE
Proxmox VE 7.2-1, a virtualization management solution, has been installed on the Dell Optiplex 7040. It provides an easy-to-use web interface for managing virtual machines and containers.
| ![Proxmox Dashboard](../../assets/dell-prox-01.png) |
| ![Proxmox Dashboard](../../assets/dell-prox-01.webp) |
| :--: |
| Promox Web Management Dashboard - Dell Optiplex 7040 |
| ![local](../../assets/dell-prox-06.png) | ![local](../../assets/dell-prox-07.png) |
| ![local](../../assets/dell-prox-06.webp) | ![local](../../assets/dell-prox-07.webp) |
| :--: | :--: |
| Storage - DIR01 | Storage - local |
| ![network-syn](../../assets/dell-prox-08.png) | ![network-syn](../../assets/dell-prox-09.png)|
| ![network-syn](../../assets/dell-prox-08.webp) | ![network-syn](../../assets/dell-prox-09.webp)|
| Storage - local-lvm | Storage - network-backup-syn |
@ -32,7 +32,7 @@ The following virtual machines and containers are currently running on the Proxm
### Windows Server 2016 - AD Domain Controller (dc01)
This server is responsible for authenticating users, computers, and other resources primarily to the Document Management System (DMS). It provides a centralized database of user accounts (kh3 users), passwords, and security information that enables users to log in to a domain and access resources across the network, namely the DMS.
| ![Proxmox Dashboard](../../assets/dell-prox-03.png) |
| ![Proxmox Dashboard](../../assets/dell-prox-03.webp) |
| :--: |
| Proxmox Content Panel for Windows Server Guest dc01 |
@ -40,7 +40,7 @@ This server is responsible for authenticating users, computers, and other resour
### Windows Server 2016 - SQL Server 2016 (db01)
SQL Server is a relational database management system (RDBMS) developed by Microsoft. This server is used primarily to store and retrieve data as requested by SharePoint Server 2019 (Document Management System). All data housed in the DMS in stored here
| ![Proxmox Dashboard](../../assets/dell-prox-04.png) |
| ![Proxmox Dashboard](../../assets/dell-prox-04.webp) |
| :--: |
| Proxmox Content Panel for Windows Server Guest db01 |
@ -48,7 +48,7 @@ SQL Server is a relational database management system (RDBMS) developed by Micro
### Windows Server 2016 - SharePoint Server 2019
SharePoint Server 2019 is a collaboration and document management platform developed by Microsoft. It provides a set of tools and services that enable teams to create, share, and manage documents, websites, and other digital content. SharePoint provides the platform for KH3's Document Management System
| ![Proxmox Dashboard](../../assets/dell-prox-05.png) |
| ![Proxmox Dashboard](../../assets/dell-prox-05.webp) |
| :--: |
| Proxmox Content Panel for Windows Server Guest sp01 |
@ -56,6 +56,6 @@ SharePoint Server 2019 is a collaboration and document management platform devel
### Debian 11 LXC Container
A Debian 11 LXC container also runs on the Proxmox host with Docker installed. The container runs a Pi-hole container and a Cloudflare Tunnel container. Pi-hole serves as the local DNS and ad-blocker for the Kh3 office network. The Cloudflare Tunnel container provides secure access to the internal services running on the Kh3 office network.
| ![Proxmox Dashboard](../../assets/dell-prox-02.png) |
| ![Proxmox Dashboard](../../assets/dell-prox-02.webp) |
| :--: |
| Proxmox Content Panel for Debian 11 LXC Container proxy |

View file

@ -1,7 +1,7 @@
# Synology RS816
The Synology RackStation RS816 is a 4-bay rackmount Network Attached Storage device, that was acquired by the KH3 before 2020. Currently it used to store and synchronize design files and backup data from employees that have left the KH3.
![rs816](../../assets/rs816.png)
![rs816](../../assets/rs816.webp)
## Device Information
The Synology NAS runs on DSM 7.0-41890, which is the operating system for Synology's NAS devices.
@ -16,7 +16,7 @@ Below is a summary of additional information about the device
| RAM | 1GB |
| Capacity | 3.6TB |
![rs816-info](../../assets/rs816-01.png)
![rs816-info](../../assets/rs816-01.webp)
## Configuration

View file

@ -1,16 +1,34 @@
# IT Infrastructure Documentation
# Introduction
### Purpose of Documentation
The purpose of this documentation is to ensure that all the IT infrastructure is properly documented for reference and business continuation.
The purpose of this documentation is to ensure that all aspects of KH3 Group's IT infrastructure are thoroughly documented to support business continuity and streamline operations.
In June of 2020, it was discovered that many systems required password resets because most of them were not documented. This lack of documentation caused inconvenience and disruptions. To avoid such issues in the future, this documentation effort aims to provide a comprehensive record of the IT infrastructure, including system configurations and credentials.
In June 2020, it was discovered that many systems required password resets due to a lack of documentation. This gap led to disruptions and inefficiencies. To prevent similar issues in the future, this documentation initiative will create a comprehensive record of system configurations, credentials, and other critical IT details.
An IT roadmap was developed in early 2020, which serves as a guiding framework for KH3's technological direction. This documentation will align with the roadmap to ensure consistency and enable efficient management of the IT infrastructure.
### Background
By documenting the infrastructure, we can establish a reliable source of information for troubleshooting, maintenance, and future planning. It will also facilitate the onboarding process for new team members and help ensure the smooth continuity of business operations.
In early 2020, an IT roadmap was established to guide KH3 Group's technological strategy and growth. This documentation will align with the roadmap, ensuring a consistent and structured approach to managing the IT environment.
This documentation will cover various aspects of the IT infrastructure, including network architecture, hardware configurations, software applications, security protocols, and any other relevant information. It will serve as a valuable resource for the IT team, providing a centralized repository of information that can be easily accessed and updated as needed.
### Benefits
By investing time and effort into comprehensive documentation, we can improve the overall efficiency and reliability of our IT systems. It will contribute to a more organized and resilient infrastructure, reducing the risk of disruptions and enhancing the ability to respond effectively to any technical challenges that may arise.
By maintaining detailed and accurate documentation, we aim to:
- **Support Troubleshooting and Maintenance**: Provide a reliable source of information for diagnosing issues and maintaining systems.
- **Simplify Onboarding**: Facilitate knowledge transfer to new team members, reducing learning curves.
- **Ensure Business Continuity**: Enable smooth operations and rapid recovery in the event of personnel changes or system disruptions.
### Scope
This documentation will cover the following areas:
- **Network Architecture**: Layout and structure of network components.
- **Hardware Configurations**: Specifications and details of physical devices.
- **Software Applications**: Inventory and configurations of software tools.
- **Security Protocols**: Password management, access controls, and compliance guidelines.
- **Other Relevant Information**: Any additional resources necessary for managing the IT infrastructure.
### Conclusion
Investing in comprehensive IT documentation will enhance the efficiency and reliability of our infrastructure, reducing risks and ensuring a resilient, well-organized environment. Lets work together to build a robust documentation repository that will serve as a valuable resource for KH3 Group.
Let's work together to create a robust and up-to-date documentation repository that will serve as a valuable asset for the organization.

View file

@ -3,19 +3,41 @@
site_name: KH3Group IT Documentation
copyright: Copyright &copy; 2022 - 2024 Siisi Nketsiah
repo_url: https://git.office.kh3group.com/support/it-docs
repo_url: https://git.kh3group.com/support/it-docs
docs_dir: docs
theme:
name: material
palette:
primary: black
- scheme: defualt
toggle:
icon: material/toggle-switch-off-outline
name: Switch to dark mode
primary: teal
accent: purple
- scheme: slate
toggle:
icon: material/toggle-switch
name: Switch to light mode
primary: teal
accent: lime
features:
- content.code.annotate
- content.code.copy
- content.tabs.link
- header.autohide
- announce.dismiss
- navigation.footer
- navigation.indexes
- navigation.instant
- navigation.sections
- navigation.tabs
- navigation.tracking
- search.highlight
- search.share
- search.suggest
markdown_extensions:
- pymdownx.emoji:
@ -38,44 +60,15 @@ markdown_extensions:
nav:
- Home: index.md
- Hardware:
- Computers:
- hardware/computers/290-g1.md
- hardware/computers/optiplex-7040.md
- hardware/computers/rs816.md
- Network:
- hardware/network/hg8245h.md
- hardware/network/hg8245w5.md
- hardware/network/rt2600ac.md
- hardware/network/sf3000-24p.md
- hardware/index.md
- Installation:
- installation/index.md
- installation/sandbox.md
- Production:
- installation/production/index.md
- installation/production/prerequisites.md
- installation/production/proxmox.md
- installation/production/docker.md
- installation/production/external-resources.md
- installation/production/configuration.md
- installation/production/deployment.md
- installation/post-installation.md
- Hardware:
- Servers:
- hardware/servers/index.md
- Network:
- hardware/network/index.md
#- hardware/index.md
- Services:
- Docker:
- services/docker/index.md
- services/docker/droneci.md
- services/docker/elasticsearch.md
- services/docker/gitea.md
- services/docker/graylog.md
- services/docker/mariadb.md
- services/docker/mongodb.md
- services/docker/nginx.md
- services/docker/pihole.md
- services/docker/portainer.md
- services/docker/traefik.md
- services/docker/uptime-kuma.md
- Proxmox:
- Docker: services/docker/index.md
- Droneci:
- services/proxmox/index.md
- services/proxmox/db01.md
- services/proxmox/dc01.md
@ -105,8 +98,4 @@ nav:
- reference/architecture/index.md
- reference/architecture/overview.md
- reference/architecture/networking.md
- reference/license.md
- reference/changelog.md
- reference/roadmap.md
- reference/contributing.md
- reference/faq.md
- reference/license.mdy

View file

@ -1 +1,3 @@
mkdocs<=1.4.2
mkdocs~=1.6.1
markdown~=3.7
mkdocs-git-revision-date-localized-plugin