silverlinux-infra/docs/domains.md

Domains

Overview

This document contains the public domains used by SilverLinux and the services they expose.

All public services are routed through Nginx Proxy Manager.

Verified proxy-host snapshot:

2026-06-24, with Nextcloud and Sentry evidence added from 2026-07-08 server output

---

Primary Domain

silveressence.net

Used for:

• Public services
• Subdomains
• SSL certificates

---

Nginx Proxy Manager Hosts

ID	Domain	Forward target	SSL Force	HTTP/2	HSTS	WebSocket	Access List	Status
1	portainer.silveressence.net	http://portainer:9000	enabled	enabled	enabled	enabled	none	enabled
2	git.silveressence.net	http://gitea:3000	disabled	disabled	disabled	enabled	none	enabled
3	meet.silveressence.net	http://jitsi-docker-jitsi-meet-aa76415-web-1:80	disabled	disabled	disabled	enabled	none	enabled
5	team.silveressence.net	http://openproject:80	enabled	enabled	disabled	enabled	none	enabled
6	nuget.silveressence.net	http://baget:80	disabled	disabled	disabled	disabled	none	enabled
8	dbgate.silveressence.net	http://dbgate:3000	disabled	disabled	disabled	enabled	none	enabled
12	sentry.silveressence.net	http://sentry-self-hosted-nginx-1:80	enabled	enabled	disabled	enabled	none	enabled
13	cloud.silveressence.net	http://nextcloud:80	disabled	disabled	disabled	enabled	none	enabled

All listed active inventory hosts have Block Exploits enabled.

---

Additional Active Proxy Hosts

These proxy hosts were present and enabled in Nginx Proxy Manager during the 2026-06-24 snapshot, but are not part of the current core infrastructure service inventory.

ID	Domain	Forward target	Reason
7	cicd.silveressence.net	http://bobsAutowas:8080	Active prototype deployment and test endpoint; may change frequently
9	exactsyncer.silveressence.net	http://exact-syncer:8080	Active client-facing demo for the Exact Online syncer application

Action:

• Keep cicd.silveressence.net documented as a fast-changing prototype endpoint.
• Keep exactsyncer.silveressence.net documented as an intentional client-facing demo endpoint.
• Document owner, authentication model and exposure policy for active non-core endpoints.

Plane.so cleanup:

• Plane.so containers were removed.
• plane.silveressence.net was removed from Nginx Proxy Manager.
• The unused Plane.so SSL certificate was removed from the server.

---

Proxy Hardening Review

Nginx Proxy Manager findings from the 2026-06-24 snapshot:

• portainer.silveressence.net has SSL Force, HTTP/2 and HSTS enabled.
• team.silveressence.net has SSL Force and HTTP/2 enabled.
• sentry.silveressence.net has SSL Force, HTTP/2, WebSocket and Block Exploits enabled; HSTS is disabled.
• git.silveressence.net, meet.silveressence.net, nuget.silveressence.net, dbgate.silveressence.net and cloud.silveressence.net do not have SSL Force enabled.
• No listed proxy host uses an Nginx Proxy Manager access list.
• DbGate is a high-sensitivity database administration interface and should be prioritized for SSL Force and an access restriction policy.
• Nextcloud stores private files and should be prioritized for SSL Force, HTTP/2 and HSTS.
• Plane.so has been removed from containers, Nginx Proxy Manager and server certificate storage.

---

Domain Details

Gitea

Domain:

git.silveressence.net

Purpose:

• Source control
• Git repositories
• Pull requests
• Issue tracking

Container:

gitea

---

OpenProject

Domain:

team.silveressence.net

Purpose:

• Project management
• Work packages
• Time tracking
• Team collaboration

Container:

openproject

---

Jitsi Meet

Domain:

meet.silveressence.net

Purpose:

• Video conferencing
• Team meetings
• Customer meetings

Container Stack:

jitsi-docker-jitsi-meet-aa76415-web-1

---

Portainer

Domain:

portainer.silveressence.net

Purpose:

• Docker management
• Infrastructure administration

Container:

portainer

---

BaGet

Domain:

nuget.silveressence.net

Purpose:

• Private NuGet package hosting

Container:

baget

Routing:

Nginx Proxy Manager -> baget:80

Status:

Active

---

Exact Syncer Demo

Domain:

exactsyncer.silveressence.net

Purpose:

• Demo .NET 9 Blazor application for Exact Online integration
• Provides a UI for connecting Exact webhooks and observing sync behavior
• Syncs main division changes to dependent sub-divisions

Behavior:

• When the main division record (Relation 1) changes, divisions 2–10 add or update the same relation data
• Demonstrates how Exact Online master/sub-division sync works in practice

Container:

exact-syncer

Routing:

Nginx Proxy Manager -> exact-syncer:8080

Notes:

• Demo version intended for client evaluation
• Can be recreated as a bespoke customer instance on request

Status:

Operational demo

---

BobAutoWas Exact Syncer Instance

Domain:

cicd.silveressence.net

Purpose:

• Client-specific Exact Syncer instance for BobAutoWas
• Customer recreation of the Exact Syncer demo application
• Provides the same webhook-driven division sync behavior

Behavior:

• Mirrors Exact Syncer demo functionality for BobAutoWas
• Supports client evaluation and live preview of the integration

Container:

bobsAutowas

Routing:

Nginx Proxy Manager -> bobsAutowas:8080

Status:

Active client instance

---

DbGate

Domain:

dbgate.silveressence.net

Purpose:

• HTTPS database administration portal

Container:

dbgate

Routing:

Nginx Proxy Manager -> dbgate:3000

Status:

Active

---

Sentry

Domain:

sentry.silveressence.net

Purpose:

• Error tracking and observability
• Event ingestion endpoint
• Sentry web UI

Container:

sentry-self-hosted-nginx-1

Routing:

Nginx Proxy Manager -> sentry-self-hosted-nginx-1:80

Status:

Active

Runtime note:

Sentry was installed through the upstream self-hosted install.sh and is available at https://sentry.silveressence.net. Nginx Proxy Manager proxy host 12 forwards the domain to http://sentry-self-hosted-nginx-1:80. The 2026-07-08 database query showed SSL Force enabled, HTTP/2 enabled, HSTS disabled, HSTS subdomains disabled, WebSocket enabled, Block Exploits enabled and no access list.

---

Nextcloud

Domain:

cloud.silveressence.net

Purpose:

• Private cloud storage
• File sharing
• Team document storage

Container:

nextcloud

Routing:

Nginx Proxy Manager -> nextcloud:80

Status:

Active

Runtime note:

Nginx Proxy Manager proxy host 13 is enabled and forwards cloud.silveressence.net to http://nextcloud:80. The 2026-07-08 database query showed SSL Force disabled, HTTP/2 disabled, HSTS disabled, WebSocket enabled, Block Exploits enabled and no access list.

---

DNS

DNS records should point to:

51.255.83.140

Server:

SilverLinux

---

SSL Certificates

SSL certificates are managed through:

Nginx Proxy Manager

Certificate data location:

/srv/docker/nginx-proxy-manager/letsencrypt

---

Routing

Internet ↓ Nginx Proxy Manager ↓ Service Container

Examples:

git.silveressence.net
    ↓
gitea

team.silveressence.net
    ↓
openproject

meet.silveressence.net
    ↓
jitsi

portainer.silveressence.net
    ↓
portainer

---

Related Documentation

• docs/server.md
• docs/security.md
• docs/network.md
• nginx-proxy-manager/README.md