docs: update infrastructure state and roadmap

SUMMARY.md

@@ -1,6 +1,6 @@
 # SilverLinux Infrastructure Summary
 
-Last Updated: 2026-06-22
+Last Updated: 2026-06-25
 
 ## Overview
 
@@ -8,6 +8,8 @@ SilverLinux is the primary infrastructure server for Silver Solutions.
 
 The platform hosts source control, project management, video conferencing, container management and supporting infrastructure services.
 
+Monitoring, automated backups and restore validation are now operational.
+
 ---
 
 ## Public Services
@@ -20,6 +22,7 @@ The platform hosts source control, project management, video conferencing, conta
 | Jitsi Meet  | https://meet.silveressence.net      |
 | BaGet       | https://nuget.silveressence.net     |
 | DbGate      | https://dbgate.silveressence.net    |
+| Xray        | Public tunneling endpoint           |
 
 ---
 
@@ -130,6 +133,73 @@ Purpose:
 
 ---
 
+### Monitoring Stack
+
+Purpose:
+
+* Metrics collection
+* Monitoring dashboards
+* Host and Docker visibility
+* Backup metrics visibility
+
+Components:
+
+* Prometheus
+* Grafana
+* Node Exporter
+* cAdvisor
+
+Validated:
+
+* Prometheus UI
+* Prometheus targets
+* Node Exporter
+* cAdvisor
+* Backup metrics
+* Grafana datasource
+
+Dashboards:
+
+* Custom backup dashboard
+* Custom system dashboard
+* Docker monitoring dashboard
+
+Status:
+
+* Operational
+
+---
+
+### Automated Backup System
+
+Purpose:
+
+* Daily backup execution
+* Archive generation
+* HTML reporting
+* Email notification
+* Restore validation
+* Prometheus backup metrics
+
+Current version:
+
+* Backup v2
+
+Validated:
+
+* Backup execution
+* Restore archive extraction
+* MSSQL backup integrity
+* PostgreSQL backup
+* Email notifications
+* Cron automation
+
+Status:
+
+* Operational
+
+---
+
 ### BaGet
 
 Purpose:
@@ -176,6 +246,25 @@ Status:
 
 ---
 
+### Xray
+
+Purpose:
+
+* Connectivity and tunneling layer
+* Improve stable access paths to SilverLinux
+
+Access:
+
+* Attached to `proxy`
+* Publishes `32443 -> 8080/tcp`
+* `xray_default` exists, but no running Xray container was attached to it in the 2026-06-24 runtime snapshot
+
+Status:
+
+* Operational
+
+---
+
 ## Shared Infrastructure
 
 ### Docker
@@ -191,6 +280,18 @@ Purpose:
 
 * Private communication between services
 
+### Proxy Network
+
+Purpose:
+
+* Public HTTP and HTTPS services through Nginx Proxy Manager
+
+### Isolated Networks
+
+Purpose:
+
+* Separate specialized stacks such as Jitsi, Xray and CI/CD runners where active runtime attachments support it
+
 ### Shared Secrets
 
 Location:
@@ -220,7 +321,7 @@ OpenProject is the primary project management platform.
 
 ### Plane.so Removed
 
-Plane.so was removed to reduce maintenance complexity and duplicate functionality.
+Plane.so was removed to reduce maintenance complexity and duplicate functionality. It is not used and will not be used. Its containers, Nginx Proxy Manager route and unused SSL certificate were removed.
 
 ### Centralized Secrets
 
@@ -230,27 +331,55 @@ All shared credentials are stored in:
 /srv/secrets/company.env
 ```
 
+### Xray Connectivity Layer
+
+Xray is classified as a tunneling and connectivity layer rather than an application backend.
+
+### Multi-Network Segmentation
+
+SilverLinux uses `internal`, `proxy` and isolated infrastructure networks to separate database, public and specialized stack traffic.
+
 ---
 
 ## Future Roadmap
 
-### Phase 1
+See:
 
-* Enable Google OAuth2
-* Enable GitHub OAuth2
-* Configure automated backups
+```text
+docs/roadmap.md
+```
 
-### Phase 2
+### Phase 1 - Immediate Impact
 
-* Expand package publishing to additional repositories
+* Loki logging
+* Redis
+* Authelia SSO
 
-### Phase 3
+Completed:
 
-* Deploy Sentry
+* Grafana + Prometheus
+* Node Exporter
+* cAdvisor
+* Backup metrics integration
 
-### Phase 4
+### Phase 2 - Security And Stability
 
-* Automated deployment to Windows IIS servers
+* CrowdSec
+* Sentry
+* Fail2Ban upgrade
+* Cloudflare rate limiting and WAF
+
+Completed:
+
+* Backup v2 automation
+* Restore validation
+
+### Phase 3 - Scale And Enterprise Services
+
+* SonarQube
+* Harbor Docker registry
+* Backstage portal
+* Nextcloud
 
 ---