# vishdebian

Debian 13 VM running on Calypso (Synology DS723+).

**Hostname**: vishdebian
**LAN IP**: 192.168.0.81 (DHCP)
**Tailscale IP**: 100.64.0.2
**SSH**: `ssh vishdebian` (via Tailscale — see `~/.ssh/config`)
**SSH user**: vish (passwordless sudo)

---

## Hardware (Virtual Machine)

| Property | Value |
|----------|-------|
| **Hypervisor** | Synology Virtual Machine Manager (VMM) on Calypso |
| **Host** | Calypso — Synology DS723+ |
| **OS** | Debian GNU/Linux 13 (Trixie) |
| **Kernel** | 6.12.57+deb13-amd64 |
| **Architecture** | x86_64 |
| **vCPU** | 2 cores (AMD Ryzen Embedded R1600, host passthrough) |
| **RAM** | 16 GB |
| **Disk** | 1 TB (virtual disk), 97 GB root partition (`/dev/sda1`) |
| **Network** | `ens3`, bridged to Calypso LAN |

---

## Network Configuration

- **LAN IP**: `192.168.0.81/24` (DHCP from home router)
- **Tailscale IP**: `100.64.0.2` (Headscale node 20)
- **Default gateway**: `192.168.0.1`

### Tailscale / Headscale

Joined to Headscale at `headscale.vish.gg:8443`. Accepts all subnet routes (`--accept-routes`).

**Known routing quirk**: Calypso advertises `192.168.0.0/24` as a subnet route via Headscale. This causes Tailscale to install that route in table 52 on this VM, which breaks inbound LAN connectivity (replies go via `tailscale0` instead of `ens3`). Fixed with a persistent ip rule:

```bash
# /etc/network/if-up.d/99-lan-routing-fix
ip rule add to 192.168.0.0/24 priority 5200 lookup main 2>/dev/null || true
```

This rule takes priority 5200, beating Tailscale's table 52 rule at 5270.

---

## Services

No persistent Docker stacks deployed yet.

Docker is installed (v29.1.1) and ready for use.

---

## Quick Access

```bash
# SSH
ssh vishdebian

# Check running containers
ssh vishdebian "docker ps"

# System resources
ssh vishdebian "free -h && df -h /"
```

---

*Last Updated*: 2026-03-10
*Host*: Calypso (Synology DS723+) via Synology VMM