nexus-net

This repository is a snapshot of my home network setup. There is also a second, private repo containing the files with sensitive information. Passwords and private keys are stored in my PW manager.

Network topology

                                    +-----------+
                                    | Internet  |
                                    +-----------+
                                          |
                                   +-------------+
                                   | ISP Router  |
                                   +-------------+
                                          |
                                     +---------+
                                     | Router  |
                                     +---------+
                                          |
                      +---------------------------------------+
                      |                                       |
 +-----+   +---------------------+                 +---------------------+
 | PC  |---|       Switch        |                 |       Switch        |
 +-----+   +---------------------+                 +---------------------+
            |         |         |                        |         |
         +-----+ +---------+ +-----+   +-------+      +-----+   +-----+   +-------+
         | PC  | | IP Cam  | | RPi |---| UPS 0 |      | XVR |   | NAS |---| UPS 1 |
         +-----+ +---------+ +-----+   +-------+      +-----+   +-----+   +-------+
                                |                        |
                             +-----+    +-------------+  |  +-------------+
                             | EHD |    | HDCVI Cam 0 |--+--| HDCVI Cam 1 |
                             +-----+    +-------------+  |  +-------------+
                                                         |
                                        +-------------+  |  +-------------+
                                        | HDCVI Cam 2 |--+--| HDCVI Cam 3 |
                                        +-------------+  |  +-------------+
                                                         |
                                        +-------------+  |  +-------------+
                                        | HDCVI Cam 4 |--+--| HDCVI Cam 5 |
                                        +-------------+  |  +-------------+
                                                         |
                                        +-------------+  |  +-------------+
                                        | HDCVI Cam 6 |--+--| HDCVI Cam 7 |
                                        +-------------+     +-------------+

Devices

ISP Router - UPC Connect Box

Overview

• bridge mode

Details

See isp-router.md

---

Router - Netgear Nighthawk X4S R7800

Overview

• router mode
• OpenWrt firmware
• access:
  • http://helios.lan or http://192.168.1.1
  • ssh (key auth enabled, pw auth disabled)
• WireGuard server (with DDNS)

Details

See router.md

---

Switch - TP-Link TL-SG105

Overview

• unmanaged switch
• no PoE

---

NAS - Synology DS920+

Overview

• access:
  • http://chronos.lan or http://192.168.1.100
  • ssh (both key and pw auth enabled)
• file server (SMB, FTP)
  • XVR syncs CCTV data via FTP
• syslog server
• P2P file sharing server
• surveillance server (IP cams)
• mail server (SMTP relay)

Details

See nas.md

---

UPS 1 - APC Smart-UPS 750VA SmartConnect

Overview

• connected to NAS via USB

---

XVR - DH-XVR5108HS-X

Overview

• access: http://192.168.1.101 (Edge in IE mode)
• syncs CCTV data via FTP to NAS

Details

See xvr.md

---

HDCVI Camera - DH-HAC-HFW1200D-0360B-S4

Overview

• 1080P
• night vision

---

IP Camera - D-Link DCS-8526LH

Overview

• 1080P
• night vision
• connected to NAS Surveillance Station via ONVIF

---

PC - Lenovo ThinkPad L580

Overview

• Fedora

Details

See pc-thinkpad-l580.md

---

PC - MINISFORUM X500 5700G

Overview

• Fedora

Details

See pc-minisforum-x500-5700g.md

---

Phone - Galaxy S10e 128 GB

Overview

• Stock firmware

Details

See phone-galaxy-s10e.md

---

RPi - Raspberry Pi 4 model B 4GB

Overview

• Revolt Pi 4 Cool Box
• 32GB SD card
• encrypted with cryptmypi
  • image: Buster
• connected to EHD via USB
• backup file server (syncs data from NAS via ssh)
• access: ssh (key auth enabled, pw auth disabled)
• mail server (SMTP relay)

Details

See rpi.md

---

UPS 0 - Eaton 5SC500I

Overview

• TODO: connect the RPi to the currently unused USB port

---

EHD - WD Elements Desktop Hard Drive

Overview

• 4TB