# Paccoco Homelab Network Topology

Current-state operator map as of 2026-05-23. Reflects live UniFi segmentation, the new Servers VLAN, restricted-lane DNS cutover to 10.5.30.53, and the broader Untrusted → Gateway shield with DHCP/mDNS preservation.

### Core hosts + routing facts

- • PD 10.5.30.6 is the main Docker/control host.
- • Serenity 10.5.30.5 handles NAS + ARR + Tailscale reachability.
- • N.O.M.A.D. 10.5.30.7 runs local services and game/server workloads.
- • Rocinante 10.5.30.112 carries heavy Ollama inference.
- • UDM Pro stays at 10.5.0.1 on the management subnet.

### What changed recently

- • Servers VLAN is live at 10.5.30.0/24 (VLAN 30).
- • IoT, Camera, and Old IoT now DHCP-advertise 10.5.30.53 for DNS.
- • Broader Untrusted → Gateway block is live.
- • DHCP and mDNS are still preserved for restricted lanes.
- • UDM Pro admin TCP ports are explicitly blocked from Untrusted.

### Still worth validating on real clients

- • Renew one DHCP lease per restricted lane.
- • Confirm DNS resolution works through 10.5.30.53.
- • Confirm gateway admin/UI access fails from those lanes.
- • Keep Google/cast validation as a separate laptop-present test wave.
- • Treat any new exception as earned only by a real failing device.

Open locally with: xdg-open /home/fizzlepoof/repos/truenas-stacks/docs/architecture/network-topology-2026-05-23.html