Ingress Box

box.lan

Public edge for everything behind WireGuard. live status →

Peers
7
Services
17
Sync cadence
5 min

Infra · this box

6
npm.lan
reverse proxy · SSL
wg.lan
peer management (wg-easy)
status.lan
monitors · alerts
logs.lan
docker log tail
portainer.lan
container GUI
secrets.lan
credentials · patterns · agents UI

Apps · behind this box

11
app.tynto.ai
Tynto editor
api.tynto.ai
Tynto API
avatar.tynto.ai
Megan / avatar admin
synapse.tynto.ai
AI proxy (cerebrum)
drive.tynto.ai
Nextcloud — files
johns-doughnut-shoppe.tynto.ai
→ static:
organizewithlizowl.com
→ static:
ottos.tynto.ai
→ static:
owl.tynto.ai
→ static:
phalanx.tynto.ai
→ static:
signaling.tynto.ai
→ static:

Add a new web app

No DNS change needed — *.lan already resolves to this box.

  1. Run your app, note the address:port
  2. Open npm.lan → Add Proxy Host
  3. Set domain myapp.lan, forward to the app, Save

To reach a machine by name, just label it in wg.lan — the wg → dnsmasq sync (cron) picks it up within 5 min.

VPN map

7 peers
Name WG IP Role
app-server.lan10.99.0.2cerebrum — prod app server, GPUs
laptop.lan10.99.0.3—
mac-studio.lan10.99.0.4—
jb-iphone.lan10.99.0.5—
bz-gpu.lan10.99.0.6original POC GPU box
sparkie.lan10.99.0.7DGX Spark node A (TP cluster)
synapse.lan10.99.0.8DGX Spark node B (TP cluster)