System Health

Tokyo node, Singapore node, Cloudflare Tunnels, SearXNG, Uptime Kuma, UptimeRobot and Telegram Bot monitor overview are grouped here as the main infrastructure layer.

Monitoring layer online
External UptimeRobot · 5/5
Internal Kuma · Backend
Search JSON · Verified
DNS AdGuard · 5353

System Status Snapshot

静态入口卡片;实时状态以 Bot /monitor、Uptime Kuma 和 UptimeRobot 为准
🟢
Nominal

Overall

Home、Status、Kuma、SearXNG Backend、AdGuard DNS 与 Bot 总览已纳入监控。

🗼
Tokyo

Tokyo Node

Reality 443、SearXNG JSON、Netdata Tokyo 和 Tunnel 入口作为东京侧关键观察点。

🇸🇬
Singapore

Singapore Node

AI Reality、Uptime Kuma、AdGuard DNS、Bot、Netdata SG 与备份体系集中在新加坡。

🧭
Verify

AI Route

AI 流量应从新加坡节点转 IPFoxy 住宅落地;手机上用 Bot 详细检查。

🧠
Local

Open WebUI

本地入口只在 Windows 主机可用:LM Studio + WSL Docker + SearXNG 搜索结果模式。

Tokyo / Singapore Nodes

双节点角色分工与关键服务状态提示

Tokyo · Public Daily Node

日常代理 + 朋友共用 + Search 后端。443 必须由 Xray Reality 独占,nginx 只负责 80 / 8888。

Watched
Reality 443 SSH 22 SearXNG JSON Cloudflare Tunnel Netdata Tokyo Prowlarr / FlareSolverr

Singapore · AI & Control Node

AI 专用入口、监控核心、Telegram Bot、AdGuard DNS 与备份入口。Bot /monitor 是手机总控台。

Watched
Reality 443 Uptime Kuma AdGuard DNS 5353 Telegram Bot Netdata SG OneDrive Backup

Monitoring Entry Groups

外部存活、内部服务、性能图表、手机总控分层查看

🌍 External

第三方外部视角,防止新加坡整机故障时自监控失效。

UptimeRobot · Home / Status Reality SG / Tokyo 443 IPFoxy SOCKS5 45001

📈 Internal

新加坡 Kuma 负责更细粒度的服务和后端可达性。

Tokyo SearXNG Backend JSON AdGuard SG DNS 5353 Search / Netdata / AdGuard Access

📊 Performance

Netdata 看性能,不替代存活监控。

CPU / RAM / Load Network / Disk IO SG + Tokyo 双面板

🤖 Mobile Control

Telegram 是移动端操作入口,适合外出快速确认。

/monitor · 总览 /health · 本机体检 /ai_route_check_detail

Open WebUI Local Entry

这个入口不走公网,只在 Windows 主机本地使用。先启动 LM Studio,再进入 WSL 启动 Docker 和 Open WebUI。联网搜索当前建议使用“搜索结果模式”。

LM Studio · Local Server :1234 wsl -d Ubuntu-24.04 cd /mnt/d/AI/OpenWebUI && docker compose up -d http://localhost:3000

Core Services

Daily entry points and external dashboards

Monitoring Layer

External, internal and bot-level checks refined in v7.1
🚨
External Gmail Alert

UptimeRobot External

Outside-world checks for IPFoxy, SG Reality, Tokyo Reality, Home and Status.

5 monitors · 5 min interval · Gmail VIP
📈
Public Kuma Status

Uptime Kuma Status

Public status page backed by internal checks on Singapore VPS.

status.xuyanglab.com
🔎
Backend JSON API

SearXNG Backend JSON

Checks Tokyo SearXNG old backend through nginx Basic Auth and JSON API.

Tokyo SearXNG Backend JSON · 200 OK
🛡️
DNS AdGuard

AdGuard DNS 5353

Real DNS query check from Kuma container through Docker bridge to AdGuard Home.

172.17.0.1:5353 · openai.com A record
🧭
Telegram /monitor

Bot Monitor Overview

One-tap overview for external reachability, local services, Kuma status and backups.

/monitor · menu button enabled
💾
Backup OneDrive crypt

Backup Verification

Daily backup covers bot code, Uptime Kuma data, UFW rules and scripts.

manual daily backup after monitor changes

Internal / Admin

Private panels; do not expose directly
📈
SSH Tunnel Singapore

Uptime Kuma Admin

Internal monitoring dashboard. Use local SSH tunnel; public domain only shows status page.

ssh -L 3001:127.0.0.1:3001 sg -N
📊
Access SG Tunnel

Netdata SG

Real-time metrics for Singapore VPS: CPU, memory, network and services.

https://netdata-sg.xuyanglab.com
Backup: ssh -L 19999:127.0.0.1:19999 sg -N
🗼
Access Tokyo Tunnel

Netdata Tokyo

Real-time metrics for Tokyo VPS, protected by Cloudflare Access.

https://netdata-tokyo.xuyanglab.com
Backup: ssh -L 19998:127.0.0.1:19999 tokyo -N Telegram: /monitor
🛡️
Access SG Tunnel

AdGuard Home

DNS filtering and ad blocking admin panel, protected by Cloudflare Access.

https://adguard-sg.xuyanglab.com
Service: localhost:3000
🧩
Planned Access

Cloudflare Access Hub

Future private entrance for admin panels such as Kuma Admin, Netdata and AdGuard.

Zero Trust · OTP · Email policy
🌐
Planned Mesh

Tailscale Mesh

Private mesh network for Mac, Windows, Tokyo VPS and Singapore VPS.

Future: ACL / subnet / MagicDNS

AI / Search / Network

Routing checks, bot commands and local AI workflow
🤖
Telegram Interactive

Telegram Bot

Open the bot directly from Home. Use it for monitor overview, traffic, health, domain and AI route reports.

@xuyang_assistant_bot
/monitor /domain /health /traffic /ai_route_check
🧭
AI Route Residential

AI Route Check

Checks whether ChatGPT, Claude, Gemini and other AI traffic uses the residential exit.

/ai_route_check · /ai_route_check_detail
🌐
Domain Health

Domain Health

Checks Home, Status and Search entry points. Search may return Access login page as HTTP 200.

/domain · home/status/search
🧠
Local LM Studio

Local AI Stack

Windows + LM Studio + Open WebUI + SearXNG search integration. Search-result mode is stable; full page reading remains optional.

Local only · no public exposure
🔐
Zero Trust Access

Cloudflare Zero Trust

Manage Access applications, tunnels and identity policies for private services.

Applications · Networks · Tunnels
📚
Planned Docs

Knowledge Base

Future Obsidian-based VPS and AI infrastructure documentation center.

Runbooks · commands · handoff notes

Security Principle

Public entry points are fine for Home and Status. Search is protected by Cloudflare Access plus nginx Basic Auth. Netdata and AdGuard are exposed only through Cloudflare Tunnel + Access. Monitoring is split across UptimeRobot, Uptime Kuma, Telegram Bot and Netdata.

Quick Commands

Local tunnel commands for daily operation.

ssh -L 3001:127.0.0.1:3001 sg -N ssh -L 19999:127.0.0.1:19999 sg -N ssh -L 19998:127.0.0.1:19999 tokyo -N Telegram: /monitor