SolaceScanScout Explorer — Full Connection & Dependency Tree
Last Updated: 2026-02-09
Status: Evaluation / Reference
Scope: All connections, dependencies, and factors affecting the explorer SolaceScanScout (explorer.d-bis.org)
1. Identity & Deployment Model
Canonical: The live explorer is Blockscout on VMID 5000 with SolaceScanScout-branded frontend. The explorer-monorepo is the source of branding and an alternative tiered stack.
2. Full Dependency Tree (Top-Down)
3. Connection Matrix
| From |
To |
Protocol / Port |
Purpose |
| User |
76.53.10.36:443 |
HTTPS |
Public access to explorer.d-bis.org |
| UDM Pro |
192.168.11.167:80/443 |
TCP |
Port forward for NPMplus #1 |
| NPMplus #1 |
192.168.11.140:80 |
HTTP |
Proxy explorer web |
| NPMplus #1 |
192.168.11.140:4000 |
HTTP |
Proxy Blockscout API (if configured) |
| VMID 5000 (Blockscout) |
192.168.11.221:8545 |
HTTP |
Chain 138 RPC (block/tx indexing) |
| VMID 5000 (Blockscout) |
192.168.11.221:8546 |
WS |
Chain 138 WebSocket (if used) |
| Blockscout container |
postgres:5432 |
TCP |
Database (Docker network) |
4. Factors Affecting SolaceScanScout
4.1 Network & Routing
| Factor |
Impact |
Reference |
| DNS (explorer.d-bis.org → 76.53.10.36) |
Must resolve; Cloudflare proxied |
E2E runbook, NEXT_STEPS_RUN_* |
| UDM Pro port forward 76.53.10.36 → 192.168.11.167 |
If broken, no public access |
NETWORK_CONFIGURATION_MASTER.md |
| NPMplus proxy host for explorer.d-bis.org |
Must point to 192.168.11.140:80 (and optionally :4000) |
RPC_ENDPOINTS_MASTER.md, CLOUDFLARE_ROUTING_MASTER.md |
| SSL (Let's Encrypt) for explorer.d-bis.org |
Applied in NPMplus; avoid "connection isn't private" |
NEXT_STEPS_OPERATOR.md, REMAINING_TASKS_RUN_* |
4.2 Host & Storage (VMID 5000)
| Factor |
Impact |
Reference |
| r630-02 (192.168.11.12) up |
LXC 5000 must be running |
OPERATIONAL_RUNBOOKS.md |
| Thin pool (thin1) full |
"No space left on device", Blockscout/DB fail |
BLOCKSCOUT_FIX_RUNBOOK.md — migrate to thin5 |
| LXC 5000 start/stop |
Explorer offline when stopped |
pct start/stop 5000 |
4.3 Blockscout Stack (inside VMID 5000)
| Factor |
Impact |
Reference |
| Docker: blockscout, postgres |
Indexing and API depend on both |
BLOCKSCOUT_FIX_RUNBOOK.md |
PostgreSQL reachable as postgres |
Blockscout logs "postgres:5432: non-existing domain - :nxdomain" if broken |
BLOCKSCOUT_FIX_RUNBOOK.md |
| ECTO_USE_SSL / DATABASE_URL sslmode |
Migrations and runtime need sslmode=disable if DB has no SSL |
fix-blockscout-ssl-and-migrations.sh |
| ETHEREUM_JSONRPC_HTTP_URL |
Must point to working RPC (192.168.11.221:8545); wrong/down RPC → sync stop |
SOLACESCANSCOUT_REVIEW.md |
4.4 RPC (Chain 138)
| Factor |
Impact |
Reference |
| VMID 2201 (192.168.11.221) RPC up |
Blockscout indexer needs live RPC |
SOLACESCANSCOUT_REVIEW.md (fix applied 2026-01-30) |
| Block production (validators) |
Chain must be producing blocks for new data |
verify-explorer-and-block-production.sh, monitor-blockchain-health.sh |
4.5 Frontend / Branding
| Factor |
Impact |
Reference |
| /var/www/html/index.html on VMID 5000 |
SolaceScanScout branding; served at / |
deploy-frontend-to-vmid5000.sh, fix-nginx-serve-custom-frontend.sh |
| Nginx config (e.g. /etc/nginx/sites-available/blockscout) |
Root path must serve custom frontend; /api → Blockscout |
deploy-frontend-to-vmid5000.sh |
4.6 Optional: explorer-monorepo (Tiered Stack)
| Factor |
Impact |
Reference |
| EXECUTE_DEPLOYMENT.sh / deploy-tiered-architecture.sh |
Runs migrations, backend, tests (DB, Redis, RPC) |
explorer-monorepo/README.md |
| .env (explorer-monorepo): DB_*, RPC_URL, JWT_SECRET |
Tiered API and indexer use these |
ENVIRONMENT_TEMPLATE.env, RPC_URL=http://192.168.11.221:8545 |
| Docker Compose (postgres, redis, elasticsearch, indexer, api, frontend) |
Full stack alternative to Blockscout; not required for live site |
deployment/docker-compose.yml |
5. Verification Scripts & Docs
| Script / Doc |
Purpose |
scripts/verify/verify-explorer-and-block-production.sh |
Explorer HTTPS, Blockscout API, RPC, block production (LAN for API/block) |
scripts/verify/verify-end-to-end-routing.sh |
DNS, SSL, HTTPS for explorer.d-bis.org (optional Blockscout API; SKIP_BLOCKSCOUT_API=1 off-LAN) |
explorer-monorepo/scripts/e2e-test-explorer.sh |
Full E2E for explorer (SolaceScanScout content, APIs) from LAN |
scripts/verify-all-systems.sh |
Includes explorer homepage check (SolaceScanScout | Blockscout | <!DOCTYPE) |
docs/03-deployment/BLOCKSCOUT_FIX_RUNBOOK.md |
502, DB, migrations, thin pool, SSL, Forge verification |
docs/04-configuration/SOLACESCANSCOUT_REVIEW.md |
Navigation, sync status, RPC fix (250→2201), recommendations |
docs/05-network/E2E_CLOUDFLARE_DOMAINS_RUNBOOK.md |
E2E and Blockscout completion notes |
6. Summary Tree (One-Page)
7. Known Issues & Fixes (from docs)
| Issue |
Fix |
| Sync stopped (e.g. Jan 15, 2026) |
Point Blockscout RPC to working node (192.168.11.221); see SOLACESCANSCOUT_REVIEW.md |
| 502 / DB unreachable |
BLOCKSCOUT_FIX_RUNBOOK: fix-blockscout-ssl-and-migrations.sh, postgres DNS/connectivity |
| No space left on device |
Migrate VMID 5000 to thin5 (BLOCKSCOUT_FIX_RUNBOOK) |
| Explorer SSL warning |
NPMplus: Let's Encrypt for explorer.d-bis.org (NEXT_STEPS_OPERATOR.md) |
| Blockscout API unreachable off-LAN |
Use SKIP_BLOCKSCOUT_API=1 for E2E or run verify-explorer-and-block-production from LAN |
Last updated: 2026-02-09
Related: SOLACESCANSCOUT_REVIEW.md, BLOCKSCOUT_FIX_RUNBOOK.md, NETWORK_CONFIGURATION_MASTER.md, E2E_CLOUDFLARE_DOMAINS_RUNBOOK.md