Overview

Property Value
CT ID 131
Hostname cups
IP 192.168.144.66
OS Arch Linux
RAM 1024 MB
Disk 8 GB
Created 2026-06-01

Access

# SSH
ssh [email protected]
# Root password: pr1nt3r!cups

# Via Proxmox host
ssh jan@server 'sudo pct exec 131 -- bash'

# Web terminal (ttyd+tmux)
http://192.168.144.66:4711

# CUPS web UI (Cloudflare Tunnel + HTTPS)
https://printer.janvv.nl

Printers

HP ENVY Inspire 7900 (default)

Property Value
Queue name HP_ENVY_Inspire_7900
Make/Model HP ENVY Inspire 7900 series
IP 192.168.144.161
MAC 84:69:93:CF:1F:EA
CUPS URI hp:/net/ENVY_Inspire_7900_series?ip=192.168.144.161
IPP URI ipps://HP%20ENVY%20Inspire%207900%20series%20%5BCF1FEA%5D._ipps._tcp.local/
Driver hpcups 3.26.4 (drv:///hp/hpcups.drv/hp-envy_inspire_7900_series.ppd)
Services IPP (631), IPPS (443), JetDirect (9100), HTTP (80), HTTPS (443)

Printer is on the same LAN — direct IPP/jetdirect connectivity confirmed.

Default options

Option Value
PageSize A4
Duplex DuplexNoTumble (long-edge)
ColorModel RGB (color)

Available options

Category Options
PageSize A4, A4.Duplex, A4.FB, Letter, Letter.Duplex, Legal, A5, A6, B5, JB5, Photo (4x6, 5x7, 2L), Envelopes (C5, C6, DL, Monarch), Custom
ColorModel RGB, CMYGray, KGray
Duplex None, DuplexNoTumble (long-edge), DuplexTumble (short-edge)
MediaType Plain, FastGlossy, Coated, Coated1, Coated2, Brochure, Brochure1, Brochure3
OutputMode Normal, FastDraft, Best, Photo
InputSlot Auto, PhotoTray, Upper

Command-line printing

# Print PDF (system default printer)
lp document.pdf

# Print with explicit options
lp -o PageSize=A4 -o Duplex=DuplexNoTumble document.pdf

# Print B&W
lp -o ColorModel=KGray document.pdf

# Check queue
lpstat -t

# Show completed jobs
lpstat -W completed

Notes

  • hpcups driver deprecation warning: CUPS warns "Printer drivers are deprecated and will stop working in a future version of CUPS." The driverless IPP URI exists (ipps://...) but was not used because hpcups provides full printer-specific options (ink levels, quality modes). If CUPS drops driver support, switch to the driverless path: lpadmin -p HP_ENVY_Inspire_7900 -v "ipps://HP%20ENVY%20Inspire%207900%20series%20%5BCF1FEA%5D._ipps._tcp.local/" -m everywhere -E
  • Ghostscript filter chain: PDF jobs pass through Ghostscript (cfFilterChain: ghostscript) before reaching the printer. This adds processing overhead but works reliably.
  • hplip hp-makeuri SyntaxWarning: hp-makeuri emits a SyntaxWarning about deprecated escape sequences — harmless, cosmetic only.

Services

  • SSH (sshd): enabled, running
  • ttyd (web terminal): port 4711, with tmux persistence
  • CUPS: port 631, enabled and running
  • Avahi (mDNS/DNS-SD): enabled and running (printer discovery)

CUPS Configuration

Property Value
Version 2.4.19
Listen *:631 (all interfaces) + /run/cups/cups.sock
ServerAlias printer.janvv.nl + * (allow proxy)
Web Interface Enabled
Browsing Yes (DNS-SD)
Encryption DefaultEncryption Never (Cloudflare handles TLS)
Auth Basic, @SYSTEM for admin
LAN Access Allow @LOCAL on all Location blocks
HP Drivers hplip 3.26.4 (hpcups)

Admin credentials

CUPS admin uses Linux system accounts:

# Add a CUPS admin (must be in the 'sys' group on Arch)
useradd -m -G sys,lp cupsadmin
passwd cupsadmin

The root user (root / pr1nt3r!cups) can also administer CUPS via the web UI at http://192.168.144.66:631/admin.

Remote access

CUPS web UI is accessible from the LAN at http://192.168.144.66:631. Admin pages require authentication.

Cloudflare Tunnel (primary external access):

Hostname Backend Purpose
https://printer.janvv.nl 192.168.144.66:631 CUPS web UI
  • DNS: CNAME → 7f8118c7-bd1c-424b-bc6c-31cb5dd3f929.cfargotunnel.com (proxied)
  • TLS: terminated at Cloudflare edge
  • CUPS config: ServerAlias * to accept proxied hostnames, DefaultEncryption Never since Cloudflare handles TLS

Caddy reverse proxy (on CT 127, /home/jan/homelab-docker/lanproxy/Caddyfile):

printer.janvv.nl {
    tls {
        dns cloudflare {env.CLOUDFLARE_API_TOKEN}
    }
    encode zstd gzip
    reverse_proxy 192.168.144.66:631
}

SSH tunnel (alternative): ssh -L 631:192.168.144.66:631 jan@server

Printer auto-discovery

The HP ENVY Inspire 7900 series printer (192.168.144.161) is auto-discovered via Avahi DNS-SD and shows up in lpinfo -v under dnssd:// and ipps:// URIs.

Restart CUPS

ssh jan@server 'sudo pct exec 131 -- systemctl restart cups'

Network

  • Static IP: 192.168.144.66/23
  • Gateway: 192.168.144.1
  • DNS: 192.168.144.20 (Pi-hole), 1.1.1.1 (fallback)
  • IPv6: configured but not routable (IPv4-only mirror workaround applied)

Notes

  • Cloned from template 902 (lxc-base) on 2026-06-01
  • Pacman configured with IPv4-only XferCommand due to non-routable IPv6
  • System fully updated (pacman -Syu) as of creation
  • Firewall pitfall: firewall=1 on net0 broke outbound internet even though pve-firewall is disabled. Changed to firewall=0.