# Ubuntu-SVR (192.168.0.252)

Local mini PC — Frigate NVR, Omada controller, Coral TPU.

## Network

| Item | Value |
|------|-------|
| LAN IP | 192.168.0.252 |
| Tailscale IP | 100.101.7.86 |
| Gateway | OPNsense (192.168.0.1) |
| User | `kaburu` (NOT `root`) |

## SSH Access

**From kaburuaibox, use this key:**
```
ssh -i ~/.ssh/id_ed256 kaburu@192.168.0.252
```

**⚠️ CRITICAL: Do NOT use `/opt/hermes/config/hermes_shell_id_ed25519` for ubuntu-svr.**
That key is for TrueNAS only. It will fail with ubuntu-svr.

The correct key is `/home/kaburu/.ssh/id_ed256` (411 bytes, RSA).

**Via Tailscale:**
```
ssh -i ~/.ssh/id_ed256 kaburu@100.101.7.86
```

## Services

- **Frigate** — NVR (v0.17.1)
- **Omada Controller** — network management
- **Coral TPU** — edge AI inference
- **Open WebUI** — web interface
- **Portainer** — Docker management
- **Uptime Kuma** — uptime monitoring

## SSH Config

Entry in `~/.ssh/config` on kaburuaibox:
```
Host ubuntu-svr
    HostName 192.168.0.252
    User kaburu
    Port 22
    IdentityFile ~/.ssh/id_ed256
    StrictHostKeyChecking no
    ConnectTimeout 10
```

## Known Issues

- No Fail2Ban (LAN-only, behind OPNsense firewall)
- SSH key auth only (no password auth)
- Previously had key mismatch issues — fixed 2026-06-03

## Notes

- Ping works (unlike OPNsense which drops ICMP)
- SSH from LAN only (not exposed to internet)
- Tailscale SSH also works