System Health

Tokyo node, Singapore node, Cloudflare Tunnels, SearXNG, Uptime Kuma and the public entry points are grouped here as the main infrastructure layer.

Core services online
Home Pages · Online
Status Kuma · Public
Search Access + Auth
Tunnels Tokyo / SG

Core Services

Daily entry points and external dashboards

Internal / Admin

Private panels; do not expose directly
📈
SSH Tunnel Singapore

Uptime Kuma Admin

Internal monitoring dashboard. Use local SSH tunnel; public domain only shows status page.

ssh -L 3001:127.0.0.1:3001 sg -N
📊
Access SG Tunnel

Netdata SG

Real-time metrics for Singapore VPS: CPU, memory, network and services.

https://netdata-sg.xuyanglab.com
Backup: ssh -L 19999:127.0.0.1:19999 sg -N
🗼
Access Tokyo Tunnel

Netdata Tokyo

Real-time metrics for Tokyo VPS, protected by Cloudflare Access.

https://netdata-tokyo.xuyanglab.com
Backup: ssh -L 19998:127.0.0.1:19999 tokyo -N
🛡️
Access SG Tunnel

AdGuard Home

DNS filtering and ad blocking admin panel, protected by Cloudflare Access.

https://adguard-sg.xuyanglab.com
Service: localhost:3000
🧩
Planned Access

Cloudflare Access Hub

Future private entrance for admin panels such as Kuma Admin, Netdata and AdGuard.

Zero Trust · OTP · Email policy
🌐
Planned Mesh

Tailscale Mesh

Private mesh network for Mac, Windows, Tokyo VPS and Singapore VPS.

Future: ACL / subnet / MagicDNS

AI / Search / Network

Routing checks, bot commands and local AI workflow
🤖
Telegram Interactive

Telegram Bot

Open the bot directly from Home. Use it for traffic, health, domain and AI route reports.

@xuyang_assistant_bot
/domain /health /traffic /ai_route_check
🧭
AI Route Residential

AI Route Check

Checks whether ChatGPT, Claude, Gemini and other AI traffic uses the residential exit.

/ai_route_check · /ai_route_check_detail
🌐
Domain Health

Domain Health

Checks Home, Status and Search entry points. Search may return Access login page as HTTP 200.

/domain · home/status/search
🧠
Local LM Studio

Local AI Stack

Windows + LM Studio + Open WebUI + SearXNG search integration.

Local only · no public exposure
🔐
Zero Trust Access

Cloudflare Zero Trust

Manage Access applications, tunnels and identity policies for private services.

Applications · Networks · Tunnels
📚
Planned Docs

Knowledge Base

Future Obsidian-based VPS and AI infrastructure documentation center.

Runbooks · commands · handoff notes

Security Principle

Public entry points are fine for Home and Status. Search is protected by Cloudflare Access plus nginx Basic Auth. Netdata and AdGuard are exposed only through Cloudflare Tunnel + Access. SSH Tunnel remains the fallback path.

Quick Commands

Local tunnel commands for daily operation.

ssh -L 3001:127.0.0.1:3001 sg -N ssh -L 19999:127.0.0.1:19999 sg -N ssh -L 19998:127.0.0.1:19999 tokyo -N