Quick Reference
A cheat sheet for day-to-day Astradial infrastructure operations.
Access Methods
| Target | Method | Command / Address |
| NUC (local network) | SSH | ssh user@192.168.0.13 |
| NUC (Cloudflare) | SSH via cloudflared | ssh nuc.astradial.com (requires cloudflared + SSH config) |
| NUC (cloud hop) | SSH via WireGuard | SSH to cloud first, then ssh user@10.10.10.2 |
| NUC (WireGuard) | Direct WireGuard | ssh user@10.10.10.2 (if local WireGuard peer configured) |
| Cloud server | SSH | ssh root@89.116.31.109 |
| API docs | Browser | https://devsip.astradial.com/api/docs |
| Status page | Browser | https://status.astradial.com |
Monitoring
| Service | URL / Command |
| NUC Netdata | http://192.168.0.13:19999 or via cloud hop |
| Cloud Netdata | http://89.116.31.109:19999 |
| Status page | https://status.astradial.com |
| Upptime repo | https://github.com/astradial/upptime |
Key IP Addresses
| Label | IP / Range |
| NUC WireGuard | 10.10.10.2 |
| Cloud WireGuard | 10.10.10.1 |
| Cloud public | 89.116.31.109 |
| Tata SBC | 10.79.215.102 |
| NUC NNI interface | 10.54.225.90 |
| NNI gateway | 10.54.225.89 |
| Tata media pool 1 | 10.79.167.0/28 |
| Tata media pool 2 | 10.79.167.48/28 |
| NUC local Wi-Fi | 192.168.0.13 |
| NUC local USB-eth | 192.168.0.14 |
Zoiper Settings (Quick)
| Setting | Value |
| Domain | devsip.astradial.com:5080 |
| Transport | UDP |
| STUN | Disabled |
| Port | 5080 (ISPs block 5060) |
NUC -- After Reboot Verification
Run these commands on the NUC after any reboot to confirm everything is healthy:
# Check all network interfaces are up
ip addr show
# Verify WireGuard tunnel
wg show
# Ping cloud through WireGuard
ping -c 3 10.10.10.1
# Verify Asterisk is running
systemctl status asterisk
# Check PJSIP trunk registration
asterisk -rx 'pjsip show registrations'
# Verify dialplan loaded
asterisk -rx 'dialplan show tata-did-route'
# Check NNI interface has correct IP
ip addr show enp86s0 | grep 10.54.225.90
NUC -- Debug Commands
# Watch SIP traffic on NNI interface
sngrep -d enp86s0
# Asterisk verbose CLI
asterisk -rvvvv
# Check recent Asterisk logs
tail -f /var/log/asterisk/full
# Show active channels
asterisk -rx 'core show channels'
# Show PJSIP endpoint status
asterisk -rx 'pjsip show endpoints'
# Check NNI route to Tata SBC
ip route | grep 10.79
# Test DNS resolution
dig devsip.astradial.com
Cloud -- Check Commands
# Asterisk status
systemctl status asterisk
# PJSIP endpoints and registrations
asterisk -rx 'pjsip show endpoints'
asterisk -rx 'pjsip show contacts'
# WireGuard tunnel
wg show
# Ping NUC through WireGuard
ping -c 3 10.10.10.2
# Firewall rules
sudo ufw status verbose
# AstraPBX API service
systemctl status astrapbx
# Active calls
asterisk -rx 'core show channels'
# Recent logs
tail -f /var/log/asterisk/full
Config File Locations
NUC
| File | Purpose |
/etc/asterisk/pjsip.conf | PJSIP transports, Tata trunk |
/etc/asterisk/ext_tata_gateway.conf | DID routing dialplan |
/etc/asterisk/extensions.conf | Main dialplan (includes others) |
/etc/wireguard/wg0.conf | WireGuard tunnel config |
/etc/network/interfaces | NNI interface config (enp86s0) |
Cloud
| File | Purpose |
/etc/asterisk/pjsip_wizard.conf | PJSIP endpoint definitions |
/etc/asterisk/pjsip.conf | PJSIP transports, globals |
/etc/asterisk/extensions.conf | Main dialplan |
/etc/wireguard/wg0.conf | WireGuard tunnel config |
/opt/astrapbx/.env | AstraPBX API environment vars |
Common Gotchas
Things that will bite you
- Indian ISPs block port 5060. Always use port 5080 for external SIP clients.
- NUC has multiple network interfaces. Make sure SIP traffic from Tata arrives on
enp86s0 (NNI), not the Wi-Fi or USB-ethernet interface. - PJSIP
identify conflicts. If two endpoints share the same source IP (common behind NAT), Asterisk matches the wrong one. Use identify sections carefully. - WireGuard does not auto-reconnect if the NUC's internet drops. After a network outage, run
sudo wg-quick down wg0 && sudo wg-quick up wg0 on the NUC. core restart now kills active calls. Use core restart gracefully or module-specific reloads instead.- NUC NNI interface may not come up after reboot if the Tata CPE link is slow. Check
ip addr show enp86s0 and bring it up manually if needed: sudo ip link set enp86s0 up. - Tata media IPs are separate from the SBC IP. RTP comes from
10.79.167.0/28 and 10.79.167.48/28, not from 10.79.215.102. Firewall rules must allow both. - Always
chown asterisk:asterisk after copying config files to /etc/asterisk/. Asterisk runs as the asterisk user and cannot read root-owned files.