Seven audited systems: Clanker, ScopeCreep, Wurstcase, FrontDesk, Molasses, hbg1, and Ryzenshine. This inventory covers my VPSes, home infrastructure, residential router VM, and Windows development workstation: where things run, how they’re reachable, and what they do.
Clanker: · ScopeCreep, Wurstcase, FrontDesk, Molasses, hbg1, and Ryzenshine: · Inventory snapshots, not real-time monitoring.
Systems
Clanker
Audited system
Application host, public Internet services, DN42 router / BGP node, Yggdrasil node, and monitoring / operations host.
Operating system
Ubuntu 26.04.1 LTS
Architecture
x86-64
CPU
2 AMD EPYC Rome vCPUs
Memory
3.8 GiB RAM
Storage
33 GiB root disk
ScopeCreep
Audited system
Public VPS edge, DN42 routing node, Yggdrasil node, secondary authoritative DN42 DNS, Looking Glass backend, monitoring / backup node, and personal privacy-VPN gateway.
Operating system
Debian GNU/Linux 13 (trixie)
Architecture
x86-64
Virtualization
KVM/QEMU
CPU
2 AMD EPYC Rome vCPUs
Memory
3.8 GiB RAM
Storage
35 GiB root disk
Wurstcase
Audited system
A small Frankfurt, Germany POP: DN42 POP / router, Yggdrasil node, Looking Glass backend, and monitoring infrastructure.
Operating system
Debian GNU/Linux 13 (trixie)
Architecture
x86-64
Virtualization
KVM/QEMU
CPU
1 AMD EPYC 7443P vCPU
Memory
3.8 GiB RAM
Storage
25 GiB root disk
Location
Frankfurt, Germany
FrontDesk
Audited system
A clean client-facing host for static websites and .NET APIs, with private SMB file storage, encrypted Restic backup storage, and monitoring. Bulk storage holds files moved off my workstation to free up local disk space.
Operating system
Debian GNU/Linux 13 (trixie)
Architecture
x86-64
Virtualization
KVM/QEMU
CPU
2 virtual Intel Xeon Skylake CPUs
Memory
2.9 GiB RAM
System disk
40 GB
Storage disk
1 TB
Molasses
Audited system
Home infrastructure and DNS server, Docker host, monitoring, and private Restic backup infrastructure. Also hosts the FreeBSD virtual machine hbg1, a residential DN42 POP.
A FreeBSD virtual machine on Molasses: residential DN42 POP / router, internal iBGP router, external DN42 peering point, and native residential IPv6 test point. Also a FreeBSD routing / BIRD experiment.
Operating system
FreeBSD 15.1-RELEASE
Architecture
amd64
Virtualization
KVM on Molasses
CPU
1 vCPU · Intel Core i3-4170 · 3.70 GHz
Memory
Approximately 1 GiB RAM
Storage
8 GiB virtual disk
Ryzenshine
Audited system
Windows development / build workstation, Hyper-V lab host, and Docker container build host. Runs networking / lab VMs and the IIS origin for RandomSteamBeta.
Operating system
Windows 11 Pro
CPU
AMD Ryzen 7 3700X · 8 cores / 16 threads
Memory
Approximately 80 GiB RAM
Motherboard
ASRock X570 Steel Legend WiFi ax
Storage
Multiple NVMe / SATA disks
Virtualization
Hyper-V + Docker Desktop
Networks
Public Internet services, private infrastructure, and DN42 / Yggdrasil connectivity across the systems below. Overlay hostnames require connectivity to their respective networks.
Clanker
Public Internet
Public
Web applications and small Internet protocols, reached through the public hostnames listed below.
DN42
DN42
AS4242420425
BGP routing, authoritative DNS, web/service ingress, a Looking Glass, and peers/transit relationships connecting additional JoyfulReaper POPs.
External BGP peers
Baragoon AS4242421732
RoutedBits AS4242420207
HEADSCARF AS4242420842
Within AS4242420425
Routing relationships with ScopeCreep, Wurstcase, the hbg1 residential POP, and the overlay gateway.
Internal iBGP with Clanker and ScopeCreep over WireGuard links. hbg1 uses native residential IPv6 and does not provide general DN42 transit.
Ryzenshine
Private infrastructure & DN42
PrivateDN42
The workstation connects to private infrastructure and DN42 over WireGuard.
Public services & protocols
Applications, protocol services, and supporting infrastructure on the audited systems. These are audited inventory entries, not availability checks. Non-HTTP endpoints need a suitable client.
Hosting, home infrastructure, development, and operations tooling. Private/internal components are listed by role, without management endpoints.
Clanker
Mission Control
Private
Dashboard, Gateway, Archive, GitActivity, and the host Agent handle monitoring, telemetry, and activity. NATS JetStream provides messaging and persistence.
Scheduled backup maintenance — retention, pruning, and integrity checks for FrontDesk’s recovery-configuration backups.
Connectivity & monitoring
Private
Cloudflare Tunnel — outbound tunnel connectivity.
Mission Control Agent — host telemetry.
Beszel Agent — host monitoring.
Molasses
Home services & monitoring
Private
Pi-hole + Unbound — home DNS.
Docker workloads — Uptime Kuma, The Lounge, Scrutiny, PairDrop, NetAlertX, Matrix Synapse / PostgreSQL, Dozzle Agent, and Dockge.
Mission Control Agent — host telemetry.
Beszel Agent — host monitoring.
Private backups
Private
Molasses — configuration and selected application state backed up daily with Restic to Clanker and FrontDesk.
hbg1 — separate daily live VM backups to FrontDesk.
Maintenance — weekly maintenance and 90-day retention for Molasses’s Restic backups on FrontDesk.
Matrix history and uploaded media are intentionally excluded from Molasses’s configuration-focused backup. This backup scope does not cover full-machine recovery; restoration has not been verified.
hbg1
Routing & traffic control
Private
BIRD 2.19.1 — DN42 routing and ROA validation.
WireGuard — links to Clanker, ScopeCreep, and PuduNet NY01.
PF — host firewall.
IPFW + dummynet — PuduNet traffic limited to 5 Mbps in each direction.
VM backups
Private
Daily live VM backups from Molasses to FrontDesk, with 14 generations retained. These are separate from Molasses’s configuration-focused Restic backups.
Backup image integrity and transfer were verified during the audit; a full recovery boot has not been tested.
Ryzenshine
Development & lab workloads
Private
Windows development workstation — development work and source / application builds.
Hyper-V — networking and lab VMs.
Docker Desktop — container builds and local development.
Backup audit status
Private
Windows host backup / recovery coverage was not fully audited and remains to be reviewed.