Server Documentation: vpn.server.england
System Overview
- Hostname: vpn.server.england
- IP Address: 192.168.0.140
- Operating System: Ubuntu 24.04.3 LTS (Noble Numbat)
- Primary Role: Secure VPN Gateway & Internal Infrastructure Controller (WoL)
Core Services
| Service | Systemd Unit | Description |
|---|---|---|
| OpenVPN | [email protected] | Global encrypted access to the 192.168.0.x network. |
| SearXNG | searxng.service | Privacy-centric metasearch engine (Containerized). |
| WolAuthServer | wolauthserver.service | Proprietary Java-based authentication for network wake-ups. |
| Containerd | containerd.service | Runtime for Docker-based services. |
| SSH | ssh.service | Remote administrative access (Port 22). |
Proprietary: WolAuthServer
The WolAuthServer serves as a secure gatekeeper for waking internal hardware.
- Network: Listens on TCP Port 12222.
- Logic: Uses an RSA-2048 challenge-response mechanism to verify client identity.
- Security: Features automated hourly key rotation with a 2-hour grace period for previous keys to prevent session drops.
- Target: Primary trigger for waking the DB Server at
192.168.0.143. - Data Path:
/home/redacted/wolauth/
Automation & Maintenance
Scheduled tasks are managed via crontab and custom scripts in /usr/local/bin/.
Power Management
- Nightly Suspend: (00:01) Triggers
nightly_suspend.sh. Puts server into RAM sleep (rtcwake) for 8 hours. - Persistence Lock:
disablesuspendcreates/tmp/suspend_disabledto bypass the sleep cycle. - Manual Control:
suspendforallows for temporary, timed suspension of the server.
System Health
- Maintenance: (05:08)
morning_maintaince.shruns general cleanup tasks. - Search Engine: (05:08)
restartSearxngensures the Docker container is refreshed daily. - Network Stability: (05:08)
applyNetplanreapplies network configurations post-wake. - Updates:
daily_apt_check.shmonitors package status and updates/tmp/apt_upgradable_count.
WoL Scripts
wake_db_server: Targets the DB Host at192.168.0.143.wake_pc: Secondary broadcast for authorized desktop wake-up.
Networking & Ports
- Port 12222: WolAuthServer (Internal Registration/Auth).
- Port 8080: SearXNG Web Interface.
- Port 22: Standard SSH.
- Port 53: Systemd-resolved DNS.
Live Status
Status
CPU
--
CPU Temp
--
RAM
-- (--)
Uptime
--
Last Seen
--
Raw Hardware Specifications
System: Kernel: redacted arch x86_64 bits: 64 compiler: gcc v: 13.3.0 Console: pty pts/1 Distro: Ubuntu 24.04.4 LTS (Noble Numbat) Machine: Type: Laptop System: HP product: HP Pavilion Notebook v: N/A serial: redacted Mobo: HP model: 80B6 v: 81.29 serial: redacted UEFI: American Megatrends v: redacted date: redacted Battery: ID-1: BAT0 charge: 0 Wh (0.0%) condition: 41.1/41.1 Wh (100.0%) volts: 16.6 min: 14.6 model: Hewlett-Packard Primary status: not charging CPU: Info: quad core model: AMD A10 Extreme Edition Radeon R8 4C+8G bits: 64 type: MT MCP arch: Excavator rev: 1 cache: L1: 320 KiB L2: 2 MiB Speed (MHz): avg: 1550 high: 2000 min/max: 1400/2000 boost: enabled cores: 1: 1400 2: 1400 3: 1400 4: 2000 bogomips: 15968 Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3 Graphics: Device-1: AMD Wani [Radeon R5/R6/R7 Graphics] vendor: Hewlett-Packard driver: amdgpu v: kernel arch: GCN-3 bus-ID: 00:01.0 Device-2: AMD Topaz XT [Radeon R7 M260/M265 / M340/M360 M440/M445 530/535 620/625 Mobile] vendor: Hewlett-Packard driver: amdgpu v: kernel arch: GCN-3 bus-ID: 04:00.0 temp: 52.0 C Device-3: Chicony HP Truevision HD driver: uvcvideo type: USB bus-ID: 2-1:2 Display: server: No display server data found. Headless machine? tty: 235x60 API: EGL v: 1.5 drivers: radeonsi,swrast platforms: active: gbm,surfaceless,device inactive: wayland,x11 API: OpenGL v: 4.6 compat-v: 4.5 vendor: mesa v: 25.2.8-0ubuntu0.24.04.1 note: console (EGL sourced) renderer: AMD Radeon R7 M360 (radeonsi iceland ACO DRM 3.57 6.8.0-110-generic), AMD Radeon R7 Graphics (radeonsi carrizo ACO DRM 3.57 6.8.0-110-generic), llvmpipe (LLVM 20.1.2 256 bits) Audio: Device-1: AMD Kabini HDMI/DP Audio vendor: Hewlett-Packard driver: snd_hda_intel v: kernel bus-ID: 00:01.1 Device-2: AMD Family 15h Audio vendor: Hewlett-Packard driver: snd_hda_intel v: kernel bus-ID: 00:09.2 API: ALSA v: k6.8.0-110-generic status: kernel-api Network: Device-1: Realtek RTL810xE PCI Express Fast Ethernet vendor: Hewlett-Packard driver: r8169 v: kernel port: e000 bus-ID: 02:00.0 IF: eno1 state: up speed: 100 Mbps duplex: full mac: redacted Device-2: Intel Wireless 3165 driver: iwlwifi v: kernel bus-ID: 03:00.0 IF: wlo1 state: down mac: redacted IF-ID-1: br-cef71c39e62d state: up speed: 10000 Mbps duplex: unknown mac: redacted IF-ID-2: docker0 state: down mac: redacted IF-ID-3: tun0 state: unknown speed: 10000 Mbps duplex: full mac: N/A IF-ID-4: veth02d8836 state: up speed: 10000 Mbps duplex: full mac: redacted IF-ID-5: veth44def66 state: up speed: 10000 Mbps duplex: full mac: redacted IF-ID-6: vethc4711dd state: up speed: 10000 Mbps duplex: full mac: redacted IF-ID-7: vethc7c65ff state: up speed: 10000 Mbps duplex: full mac: redacted Bluetooth: Device-1: Intel Bluetooth wireless interface driver: btusb v: 0.8 type: USB bus-ID: 2-2:3 Report: rfkill ID: hci0 rfk-id: 14 state: down bt-service: not found rfk-block: hardware: no software: no address: see --recommends Drives: Local Storage: total: 238.47 GiB used: 19.87 GiB (8.3%) ID-1: /dev/sda model: P3-256 size: 238.47 GiB Partition: ID-1: / size: 230.67 GiB used: 19.66 GiB (8.5%) fs: ext4 dev: /dev/dm-0 mapped: ubuntu--vg-ubuntu--lv ID-2: /boot size: 1.9 GiB used: 200.4 MiB (10.3%) fs: ext4 dev: /dev/sda2 ID-3: /boot/efi size: 1.05 GiB used: 6.1 MiB (0.6%) fs: vfat dev: /dev/sda1 Swap: ID-1: swap-1 type: file size: 4 GiB used: 0 KiB (0.0%) file: /swap.img Sensors: System Temperatures: cpu: 71.2 C mobo: N/A Fan Speeds (rpm): N/A GPU: device: amdgpu temp: 53.0 C device: amdgpu temp: 71.0 C Info: Memory: total: 12 GiB note: est. available: 11.14 GiB used: 2.07 GiB (18.6%) Processes: 171 Uptime: 12d 16h 23m Init: systemd target: graphical (5) Packages: 890 Compilers: N/A Shell: Sudo v: redacted