Debian 12 Resonator Node ❯ Buffalo, NY (US)
Core services running natively, verified stable, and actively handling traffic.
Self-hosted RSS/Atom feed reader with SQLite persistence, Fever/Google Reader API sync for Liferea/Newsboat, and automated 20-minute feed polling.
Kernel-accelerated VPN tunnel providing full-tunnel encryption and DNS sinkhole ad-blocking directly into this Buffalo node for the ThinkPad X280.
Network-wide DNS blocker with Quad9 DoH upstream, anti-telemetry filtering, tracking protection, and custom local host resolution.
Secure peer-to-peer overlay interconnecting this VPS with the Letheplex storage server (100.88.50.117) and mobile ThinkPad nomad environment.
Real-time bi-directional synchronization hub maintaining synced copies of nomad configurations and feed cache across nodes.
Media automation services configured in Caddy proxy, pending attached drive reformatting and storage linking.
Smart PVR for tracking, indexing, and organizing television releases and series metadata via Letheplex storage link.
Automated movie tracking, parsing, and collection management with quality profiles and auto-renaming pipelines.
Music library management tool tracking discographies, artist releases, and organizing audio tags into high-fidelity libraries.
Book and audiobook collection manager handling author catalogs, series lists, and automated library structuring.
Centralized indexer manager proxying Torrent and Usenet indexers directly to Sonarr, Radarr, Lidarr, and Readarr.
Automated subtitle downloader matching audio tracks and formats with multi-language subtitle providers.
Live firewall (UFW) rules, protocol bindings, and security access policies.
| Service | Port / Protocol | Subdomain / Host | Access Boundary | Status |
|---|---|---|---|---|
| HTTPS Web Entry / Caddy | 443 / TCP & UDP (HTTP/3) | lethedwellers.com, *.lethedwellers.com | Public WAN (Auto-TLS) | Operational |
| HTTP Redirect / Caddy | 80 / TCP | Auto-redirect to HTTPS | Public WAN (ACME Challenge) | Operational |
| WireGuard Resonator Tunnel | 51820 / UDP | lethedwellers.com:51820 | Public WAN (Key Authenticated) | Operational |
| AdGuard Home DNS Engine | 53 / TCP & UDP | 10.7.0.1, 127.0.0.1 | WireGuard Mesh / Local | Operational |
| AdGuard Home Admin UI | 3000 / TCP | lethedwellers.com:3000 | Protected / Admin | Operational |
| OpenSSH Security Server | 22 / TCP | lethedwellers.com:22 | Ed25519 Keys + Fail2Ban Jailed | Hardened |
| Tailscale Mesh Daemon | 41641 / UDP | 100.84.69.86 | Nomadic Mesh Only | Connected |
| Sonarr PVR (Letheplex) | 8989 / TCP | sonarr.lethedwellers.com | Tailscale Reverse Proxy + BasicAuth | Drive Reformat |
| Radarr Cinema (Letheplex) | 7878 / TCP | radarr.lethedwellers.com | Tailscale Reverse Proxy + BasicAuth | Drive Reformat |