Access Setup¶

This guide explains how to set up SSH access to the CharlieHub infrastructure.

Architecture Overview¶

External Client (Mac/PC)
        │
        │ SSH via public IP
        ▼
   hub2 (51.68.235.106)
        │
        │ Via WireGuard VPN
        ▼
   Homelab (px1-px5, CTs)

Connecting to hub2¶

hub2 is the central services hub. It uses the ubuntu user (not root).

SSH Config (Recommended)¶

Add to your ~/.ssh/config:

Host hub2
    HostName 51.68.235.106
    User ubuntu
    IdentityFile ~/.ssh/id_ed25519

Then connect with:

ssh hub1

For root access on hub1:

ssh hub1
sudo -i

Direct Connection¶

ssh ubuntu@151.80.58.99

Connecting to Proxmox Nodes¶

The Proxmox nodes use root user and are accessible via their LAN IPs.

From hub1¶

# UK nodes
ssh root@REDACTED_IP   # px1-silverstone
ssh root@REDACTED_IP   # px2-monza
ssh root@REDACTED_IP   # px3-suzuka

# France node
ssh root@REDACTED_IP   # px5-lemans

From Proxmox Nodes to hub1¶

All Proxmox nodes have ssh hub1 pre-configured:

ssh hub1              # Connects as ubuntu user
ssh hub1 sudo -i      # Then get root

Connecting to VMs/CTs¶

VMs and CTs are on the main LAN (10.44.1.x). Connect from a Proxmox node or hub1:

# From hub1 or any px node
ssh root@REDACTED_IP3   # CT1113 (IoT Platform)
ssh root@REDACTED_IP8   # CT1118 (ISP Monitor)

SSH Key Setup¶

Adding Your Key to hub1¶

# Copy your public key to hub1
ssh-copy-id ubuntu@151.80.58.99

Adding Your Key to Proxmox Nodes¶

From hub1:

# Copy your key to a Proxmox node
ssh-copy-id root@REDACTED_IP

Quick Reference¶

Target	Command	User
hub1	`ssh hub1`	ubuntu
px1	`ssh root@REDACTED_IP`	root
px2	`ssh root@REDACTED_IP`	root
px3	`ssh root@REDACTED_IP`	root
px5	`ssh root@REDACTED_IP`	root
CT1113	`ssh root@REDACTED_IP3`	root

Troubleshooting¶

Cannot connect to hub1¶

Check you're using ubuntu user, not root
Verify your SSH key is in ~/.ssh/authorized_keys on hub2
Try with verbose output: ssh -v ubuntu@51.68.235.106

Cannot reach Proxmox nodes from hub2¶

Check WireGuard status on hub2: sudo wg show
Verify routes are active: ip route | grep -E "10.44|10.35"
Test connectivity: ping REDACTED_IP

Permission denied on px nodes¶

Verify root login is enabled in /etc/ssh/sshd_config
Check your key is in /root/.ssh/authorized_keys

Deprecated¶

SSHPiper/Bastion Deprecated

The old SSHPiper bastion (VM1111:2222) was deprecated when hub2 replaced the legacy infrastructure in January 2026. Direct SSH access via hub2 is now used instead.