Files

Kenji M 7c4c786e7b zet.home.arpa: document all services and SSL/nginx setup

- Server overview (README.md) with services, storage, and network summary
- Storage layout with disk/fstab/mount details (storage.md)
- Service docs: Samba, NFS, Squid, Pi-hole (with DHCP/split-DNS notes)
- Let's Encrypt cert via acme.sh + GoDaddy DNS-01 (ssl/)
- nginx SSL reverse proxy config and virtual host guide (nginx/)
- Pi-hole moved to port 8081; split DNS overrides documented for both
  Pi-hole and pfSense Unbound to avoid hairpin NAT issues

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-19 14:37:04 +00:00

README.md

zet.home.arpa: document all services and SSL/nginx setup

2026-06-19 14:37:04 +00:00

README.md

NFS — zet.home.arpa

NFSv4 file server exporting bulk storage to LAN clients.

Overview

Field	Value
Package	`nfs-kernel-server` (Ubuntu)
Config	`/etc/exports`
Services	`nfs-server`, `nfs-mountd`, `nfs-idmapd`, `rpcbind`, `rpc-statd`
Port	2049/tcp+udp

Exports

Path	Clients	Options
`/data/hsgt10a`	`172.27.0.0/24`	`rw,sync,no_subtree_check`

`/etc/exports`

/data/hsgt10a 172.27.0.0/24(rw,sync,no_subtree_check)

Warning

: The current /etc/exports on the server has a space between 172.27.0.0/24 and (rw,sync,...). A space causes the options to apply to * (world) rather than the specified subnet — this is a security misconfiguration. The correct syntax has no space before the parenthesis:
/data/hsgt10a 172.27.0.0/24(rw,sync,no_subtree_check)
Fix and reload: sudo exportfs -ra

Service Management

sudo systemctl status nfs-server
sudo systemctl restart nfs-server
sudo exportfs -v                     # show active exports
sudo exportfs -ra                    # reload /etc/exports without restarting
showmount -e 172.27.0.35             # list exports (run from client)

Mounting from a Client

# Temporary mount
sudo mount -t nfs 172.27.0.35:/data/hsgt10a /mnt/hsgt10a

# Permanent — add to client's /etc/fstab:
172.27.0.35:/data/hsgt10a  /mnt/hsgt10a  nfs  defaults,_netdev  0 0

Migration Notes

To move NFS to a new server:

Install: sudo apt install nfs-kernel-server
Copy /etc/exports (fix the space issue above before copying)
Ensure /data/hsgt10a is mounted on the new host
Enable and start: sudo systemctl enable --now nfs-server
Update any client /etc/fstab entries to point to the new server IP