389 lines
5.8 KiB
Markdown
389 lines
5.8 KiB
Markdown
# SilverLinux Infrastructure Summary
|
|
|
|
Last Updated: 2026-06-25
|
|
|
|
## Overview
|
|
|
|
SilverLinux is the primary infrastructure server for Silver Solutions.
|
|
|
|
The platform hosts source control, project management, video conferencing, container management and supporting infrastructure services.
|
|
|
|
Monitoring, automated backups and restore validation are now operational.
|
|
|
|
---
|
|
|
|
## Public Services
|
|
|
|
| Service | URL |
|
|
| ----------- | ----------------------------------- |
|
|
| Gitea | https://git.silveressence.net |
|
|
| OpenProject | https://team.silveressence.net |
|
|
| Portainer | https://portainer.silveressence.net |
|
|
| Jitsi Meet | https://meet.silveressence.net |
|
|
| BaGet | https://nuget.silveressence.net |
|
|
| DbGate | https://dbgate.silveressence.net |
|
|
| Xray | Public tunneling endpoint |
|
|
|
|
---
|
|
|
|
## Running Services
|
|
|
|
### Gitea
|
|
|
|
Purpose:
|
|
|
|
* Git repositories
|
|
* Pull requests
|
|
* Issue tracking
|
|
* Gitea Actions enabled globally
|
|
* Self-hosted Actions runner operational
|
|
* NuGet package publishing to BaGet
|
|
|
|
Authentication:
|
|
|
|
* Local accounts
|
|
* Planned Google OAuth2
|
|
* Planned GitHub OAuth2
|
|
|
|
Email:
|
|
|
|
* SMTP configured
|
|
* Password reset supported
|
|
|
|
---
|
|
|
|
### OpenProject
|
|
|
|
Purpose:
|
|
|
|
* Project management
|
|
* Sprint planning
|
|
* Time tracking
|
|
* Roadmaps
|
|
* Team collaboration
|
|
|
|
Email:
|
|
|
|
* SMTP configured
|
|
* Notifications enabled
|
|
|
|
---
|
|
|
|
### Jitsi Meet
|
|
|
|
Purpose:
|
|
|
|
* Video conferencing
|
|
* Screen sharing
|
|
* Team meetings
|
|
|
|
Authentication:
|
|
|
|
* Internal authentication
|
|
* Guest access enabled
|
|
|
|
---
|
|
|
|
### PostgreSQL
|
|
|
|
Purpose:
|
|
|
|
* Shared database platform
|
|
* OpenProject database
|
|
* Gitea database
|
|
* Future application databases
|
|
|
|
---
|
|
|
|
### Microsoft SQL Server Express
|
|
|
|
Purpose:
|
|
|
|
* Support projects requiring Microsoft SQL Server
|
|
* Provide a private SQL Server 2022 Express platform
|
|
|
|
Access:
|
|
|
|
* Docker `internal` network only
|
|
* Port 1433 is not publicly exposed
|
|
|
|
Status:
|
|
|
|
* Operational
|
|
|
|
---
|
|
|
|
### Portainer
|
|
|
|
Purpose:
|
|
|
|
* Docker administration
|
|
* Stack deployment
|
|
* Container monitoring
|
|
|
|
---
|
|
|
|
### Nginx Proxy Manager
|
|
|
|
Purpose:
|
|
|
|
* Reverse proxy
|
|
* SSL certificate management
|
|
* Domain routing
|
|
|
|
---
|
|
|
|
### Monitoring Stack
|
|
|
|
Purpose:
|
|
|
|
* Metrics collection
|
|
* Monitoring dashboards
|
|
* Host and Docker visibility
|
|
* Backup metrics visibility
|
|
|
|
Components:
|
|
|
|
* Prometheus
|
|
* Grafana
|
|
* Node Exporter
|
|
* cAdvisor
|
|
|
|
Validated:
|
|
|
|
* Prometheus UI
|
|
* Prometheus targets
|
|
* Node Exporter
|
|
* cAdvisor
|
|
* Backup metrics
|
|
* Grafana datasource
|
|
|
|
Dashboards:
|
|
|
|
* Custom backup dashboard
|
|
* Custom system dashboard
|
|
* Docker monitoring dashboard
|
|
|
|
Status:
|
|
|
|
* Operational
|
|
|
|
---
|
|
|
|
### Automated Backup System
|
|
|
|
Purpose:
|
|
|
|
* Daily backup execution
|
|
* Archive generation
|
|
* HTML reporting
|
|
* Email notification
|
|
* Restore validation
|
|
* Prometheus backup metrics
|
|
|
|
Current version:
|
|
|
|
* Backup v2
|
|
|
|
Validated:
|
|
|
|
* Backup execution
|
|
* Restore archive extraction
|
|
* MSSQL backup integrity
|
|
* PostgreSQL backup
|
|
* Email notifications
|
|
* Cron automation
|
|
|
|
Status:
|
|
|
|
* Operational
|
|
|
|
---
|
|
|
|
### BaGet
|
|
|
|
Purpose:
|
|
|
|
* Private NuGet package hosting
|
|
* Internal Silver.* package distribution
|
|
|
|
Access:
|
|
|
|
* Routed through Nginx Proxy Manager
|
|
* https://nuget.silveressence.net
|
|
|
|
---
|
|
|
|
### Gitea Actions Runner
|
|
|
|
Purpose:
|
|
|
|
* Execute Gitea Actions workflows
|
|
* Build and package Silver 2.0 libraries
|
|
* Publish NuGet packages to BaGet
|
|
|
|
Status:
|
|
|
|
* Global runner operational as `silverlinux-runner`
|
|
|
|
---
|
|
|
|
### DbGate
|
|
|
|
Purpose:
|
|
|
|
* Browser-based MSSQL and PostgreSQL administration
|
|
|
|
Access:
|
|
|
|
* https://dbgate.silveressence.net
|
|
* HTTPS through Nginx Proxy Manager
|
|
* Username and password required
|
|
|
|
Status:
|
|
|
|
* Operational
|
|
|
|
---
|
|
|
|
### Xray
|
|
|
|
Purpose:
|
|
|
|
* Connectivity and tunneling layer
|
|
* Improve stable access paths to SilverLinux
|
|
|
|
Access:
|
|
|
|
* Attached to `proxy`
|
|
* Publishes `32443 -> 8080/tcp`
|
|
* `xray_default` exists, but no running Xray container was attached to it in the 2026-06-24 runtime snapshot
|
|
|
|
Status:
|
|
|
|
* Operational
|
|
|
|
---
|
|
|
|
## Shared Infrastructure
|
|
|
|
### Docker
|
|
|
|
Purpose:
|
|
|
|
* Container hosting
|
|
* Service isolation
|
|
|
|
### Internal Network
|
|
|
|
Purpose:
|
|
|
|
* Private communication between services
|
|
|
|
### Proxy Network
|
|
|
|
Purpose:
|
|
|
|
* Public HTTP and HTTPS services through Nginx Proxy Manager
|
|
|
|
### Isolated Networks
|
|
|
|
Purpose:
|
|
|
|
* Separate specialized stacks such as Jitsi, Xray and CI/CD runners where active runtime attachments support it
|
|
|
|
### Shared Secrets
|
|
|
|
Location:
|
|
|
|
```text
|
|
/srv/secrets/company.env
|
|
```
|
|
|
|
Contains:
|
|
|
|
* SMTP credentials
|
|
* PostgreSQL passwords
|
|
* MSSQL SA password
|
|
* OpenProject secrets
|
|
* Future DbGate password
|
|
* Future OAuth secrets
|
|
|
|
This file must never be committed to Git.
|
|
|
|
---
|
|
|
|
## Architecture Decisions
|
|
|
|
### OpenProject Selected
|
|
|
|
OpenProject is the primary project management platform.
|
|
|
|
### Plane.so Removed
|
|
|
|
Plane.so was removed to reduce maintenance complexity and duplicate functionality. It is not used and will not be used. Its containers, Nginx Proxy Manager route and unused SSL certificate were removed.
|
|
|
|
### Centralized Secrets
|
|
|
|
All shared credentials are stored in:
|
|
|
|
```text
|
|
/srv/secrets/company.env
|
|
```
|
|
|
|
### Xray Connectivity Layer
|
|
|
|
Xray is classified as a tunneling and connectivity layer rather than an application backend.
|
|
|
|
### Multi-Network Segmentation
|
|
|
|
SilverLinux uses `internal`, `proxy` and isolated infrastructure networks to separate database, public and specialized stack traffic.
|
|
|
|
---
|
|
|
|
## Future Roadmap
|
|
|
|
See:
|
|
|
|
```text
|
|
docs/roadmap.md
|
|
```
|
|
|
|
### Phase 1 - Immediate Impact
|
|
|
|
* Loki logging
|
|
* Redis
|
|
* Authelia SSO
|
|
|
|
Completed:
|
|
|
|
* Grafana + Prometheus
|
|
* Node Exporter
|
|
* cAdvisor
|
|
* Backup metrics integration
|
|
|
|
### Phase 2 - Security And Stability
|
|
|
|
* CrowdSec
|
|
* Sentry
|
|
* Fail2Ban upgrade
|
|
* Cloudflare rate limiting and WAF
|
|
|
|
Completed:
|
|
|
|
* Backup v2 automation
|
|
* Restore validation
|
|
|
|
### Phase 3 - Scale And Enterprise Services
|
|
|
|
* SonarQube
|
|
* Harbor Docker registry
|
|
* Backstage portal
|
|
* Nextcloud
|
|
|
|
---
|
|
|
|
## Mission
|
|
|
|
Provide a secure, reliable and self-hosted platform for software development and business operations within Silver Solutions.
|