juris-backup/README.md

Juris Server

Documentation and configuration reference for the Juris remote server.

Hardware & OS

• OS: Ubuntu 24.04.3 LTS
• Kernel: 6.8.0-100-generic
• Public IP: 83.99.190.32
• LAN IP: 192.168.54.230/24 (via eno1, DHCP from router at 192.168.54.254)

Storage Layout

Disk	Size	VG	LV	Mount	Use
sda (old SSD)	223GB	oldssdg	oldssd	/mnt/hdd2	spare/unused
sdb (HDD)	931GB	ubuntu-vg	ubuntu-lv	/ (OS)	100GB
sdb (HDD)	931GB	ubuntu-vg	data	/mnt/data	828GB

/mnt/data contents

Path	Size	Purpose
/mnt/data/shared	408GB	File sharing (copyparty)
/mnt/data/copyparty	—	copyparty config/state

Network

• Interface: eno1 (MAC 8c:dc:d4:40:0d:96)
• IP: 192.168.54.230/24, gateway 192.168.54.254 (DHCP)
• Public access: via router NAT (port forwarding to 192.168.54.230)

Port Forwarding (router → Juris)

External Port	Internal	Service
443	→ LXD proxy → xray container	Xray VPN (VLESS+XHTTP+Reality)
16627	→ LXD proxy → xray container	x-ui admin panel
22	22	SSH

LXD

LXD manages the xray container. The host forwards ports 443 and 16627 into the container via LXD proxy devices.

Storage pool

Name	Driver	Source
default	dir	/var/snap/lxd/common/lxd/storage-pools/default

Network

Name	Type	Subnet
lxdbr0	bridge (managed)	10.187.159.1/24

Container: xray

Setting	Value
Image	Ubuntu 24.04 LTS (noble), amd64
IP	10.187.159.41 (via lxdbr0)
State	RUNNING
Profile	default

Proxy devices (host → container):

Device	Listen	Connect
proxy-443	tcp:0.0.0.0:443	tcp:127.0.0.1:443
proxy-16627	tcp:0.0.0.0:16627	tcp:127.0.0.1:16627

Services inside xray container:

Service	Description
x-ui	Xray panel — manages Xray config and inbounds
Xray (via x-ui)	VLESS+XHTTP+Reality inbound on port 443

Useful commands

# Enter xray container
lxc exec xray -- bash

# Check xray config
lxc exec xray -- cat /usr/local/x-ui/bin/config.json

# Restart x-ui (and xray)
lxc exec xray -- systemctl restart x-ui

# View x-ui logs
lxc exec xray -- journalctl -u x-ui -f

Xray VPN Configuration

See ai-xray repo for full benchmark and config details.

Active config: VLESS + XHTTP + Reality

Setting	Value
Protocol	VLESS
Transport	XHTTP
Security	Reality
Reality destination	www.delfi.lv:443
Allowed SNIs	www.delfi.lv, www.lmt.lv, www.inbox.lv, e-klase.lv
XHTTP path	/xt-6036d37d
Port	443

x-ui panel: https://share.alogins.net:16627/gBdsRLtVZdgZ63wmVR/

Monitoring

Zabbix agent 2 running on the host in active mode → reports to zb.alogins.net:10051. Zabbix host: Juris Server (template: Linux by Zabbix agent active).

Access

Method	Details
SSH	ssh juris@83.99.190.32 (key auth)
sudo	password required (VitaIeva2A.)