docs: update infrastructure state and roadmap

docs/server.md

@@ -70,6 +70,15 @@ Purpose:
 
 * Firewall management
 
+### Monitoring Stack
+
+Purpose:
+
+* Metrics collection
+* Monitoring dashboards
+* Host metrics
+* Docker container metrics
+
 ---
 
 ## Docker Networks
@@ -103,6 +112,45 @@ Examples:
 
 ---
 
+### jitsi-docker-jitsi-meet-aa76415_meet.jitsi
+
+Purpose:
+
+Isolated Jitsi communication cluster.
+
+Examples:
+
+* jitsi-web
+* jitsi-jvb
+* jitsi-jicofo
+* jitsi-prosody
+
+---
+
+### xray_default
+
+Purpose:
+
+Compose-created tunneling and connectivity network for Xray.
+
+Examples:
+
+* No running containers were attached in the 2026-06-24 runtime snapshot
+
+---
+
+### gitea-runner_default
+
+Purpose:
+
+Default Compose network for the Gitea Actions runner stack.
+
+Examples:
+
+* gitea-runner
+
+---
+
 ## Running Services
 
 * PostgreSQL
@@ -115,6 +163,11 @@ Examples:
 * Gitea Actions Runner
 * Microsoft SQL Server 2022 Express
 * DbGate
+* Xray
+* Prometheus
+* Grafana
+* Node Exporter
+* cAdvisor
 
 ---
 
@@ -139,6 +192,8 @@ Contains:
 /srv/docker/gitea-runner
 /srv/docker/mssql
 /srv/docker/dbgate
+/srv/docker/xray
+/srv/docker/monitoring
 ```
 
 ---
@@ -257,6 +312,59 @@ silverlinux-runner
 
 ---
 
+### Xray
+
+```text
+/srv/docker/xray
+```
+
+Network:
+
+```text
+proxy
+```
+
+Published port:
+
+```text
+0.0.0.0:32443 -> 8080/tcp
+```
+
+Image:
+
+```text
+ghcr.io/xtls/xray-core:latest
+```
+
+Runtime note:
+
+The `xray_default` network exists, but the running `xray` container was attached only to `proxy` in the 2026-06-24 runtime snapshot.
+
+---
+
+### Monitoring Stack
+
+```text
+/srv/docker/monitoring
+```
+
+Components:
+
+* Prometheus
+* Grafana
+* Node Exporter
+* cAdvisor
+
+Validated:
+
+* Prometheus targets
+* Grafana Prometheus datasource
+* Backup metrics
+* Host metrics
+* Docker metrics
+
+---
+
 ## SSH Access
 
 Primary user:
@@ -283,6 +391,7 @@ Implemented:
 * PostgreSQL not exposed publicly
 * MSSQL port 1433 not exposed publicly
 * Database administration is available only through authenticated HTTPS access to DbGate
+* Xray is not attached to the private database network and is monitored as a tunneling endpoint
 * OpenID disabled in Gitea
 
 ---
@@ -329,4 +438,5 @@ Recovery priorities:
 * docs/security.md
 * docs/backups.md
 * docs/services.md
+* docs/network.md
 * docs/domains.md