Infrastructure Inventory¶

Compute Nodes¶

Node	Hardware	IP	SSH Port	OS	Role
caneast-site1-node3	CanEast Server	REDACTED	2222	Ubuntu 25.10	k3s control-plane, KVM host, Infisical, primary git
caneast-site1-node2	CanEast Workstation	REDACTED	2222	Ubuntu 25.10	k3s worker, Docker/Portainer, primary services, AdGuard DNS
caneast-site1-node4	Dell OptiPlex 3070, i5-9500T, REDACTED	REDACTED	22 (pre-baseline)	Ubuntu 25.10	k3s worker (pending join); Ethernet connected
caneast-site1-node1	Raspberry Pi	REDACTED	22	Raspberry Pi OS	WireGuard Dashboard -- NOT in k3s (906MB RAM)
CanEast AI Node	REDACTED	REDACTED	2222	Windows + WSL	AI/GPU node, developer workstation, Claude Code, kubectl, Infisical CLI, MCP stack

Node	Hardware	IP	SSH Port	Role
caneast-site1-mqtt1	RPi Zero 2WH (SanDisk Ultra 8GB, Debian trixie)	REDACTED	22	Mosquitto MQTT broker
caneast-site1-ot1-snr01	ESP32 dev board	REDACTED	--	OT zone 1 sensor node -- sump pit

Node	Type	IP	Role
caneast-site1-fw1	OPNsense VM (KVM on caneast-site1-node3)	REDACTED	WAN-facing firewall, DMZ
caneast-site1-jmp1	Ubuntu VM (KVM on caneast-site1-node3)	REDACTED	Jump box -- only entry to DMZ
ISP gateway	ISP router	REDACTED	WAN gateway

Service	Node	IP	Port	Infisical Path
openclaw-archonagent1	CanEast AI Node	REDACTED	18789	archon-platform/prod/cae_archonagent_bot
Ollama API	CanEast AI Node	REDACTED	11434	--
Open WebUI	CanEast AI Node	REDACTED	3000	--

Field	Value
User	ansible-svc-account
SSH key	ed25519 -- stored in Infisical: ANSIBSVCOPS_SSH_PRIVATE_KEY
Sudo	NOPASSWD on all nodes
Purpose	All Ansible playbooks and AWX job templates -- never use operator