305 lines
4.8 KiB
Markdown
305 lines
4.8 KiB
Markdown
# Domains
|
|
|
|
## Overview
|
|
|
|
This document contains the public domains used by SilverLinux and the services they expose.
|
|
|
|
All public services are routed through Nginx Proxy Manager.
|
|
|
|
Verified proxy-host snapshot:
|
|
|
|
```text
|
|
2026-06-24
|
|
```
|
|
|
|
---
|
|
|
|
## Primary Domain
|
|
|
|
```text
|
|
silveressence.net
|
|
```
|
|
|
|
Used for:
|
|
|
|
* Public services
|
|
* Subdomains
|
|
* SSL certificates
|
|
|
|
---
|
|
|
|
## Nginx Proxy Manager Hosts
|
|
|
|
| ID | Domain | Forward target | SSL Force | HTTP/2 | HSTS | WebSocket | Access List | Status |
|
|
| --- | --- | --- | --- | --- | --- | --- | --- | --- |
|
|
| 1 | `portainer.silveressence.net` | `http://portainer:9000` | enabled | enabled | enabled | enabled | none | enabled |
|
|
| 2 | `git.silveressence.net` | `http://gitea:3000` | disabled | disabled | disabled | enabled | none | enabled |
|
|
| 3 | `meet.silveressence.net` | `http://jitsi-docker-jitsi-meet-aa76415-web-1:80` | disabled | disabled | disabled | enabled | none | enabled |
|
|
| 5 | `team.silveressence.net` | `http://openproject:80` | enabled | enabled | disabled | enabled | none | enabled |
|
|
| 6 | `nuget.silveressence.net` | `http://baget:80` | disabled | disabled | disabled | disabled | none | enabled |
|
|
| 8 | `dbgate.silveressence.net` | `http://dbgate:3000` | disabled | disabled | disabled | enabled | none | enabled |
|
|
|
|
All listed active inventory hosts have Block Exploits enabled.
|
|
|
|
---
|
|
|
|
## Additional Active Proxy Hosts
|
|
|
|
These proxy hosts were present and enabled in Nginx Proxy Manager during the 2026-06-24 snapshot, but are not part of the current core infrastructure service inventory.
|
|
|
|
| ID | Domain | Forward target | Reason |
|
|
| --- | --- | --- | --- |
|
|
| 7 | `cicd.silveressence.net` | `http://bobsAutowas:8080` | Active prototype deployment and test endpoint; may change frequently |
|
|
| 9 | `exactsyncer.silveressence.net` | `http://exact-syncer:8080` | Active client-facing demo for the Exact Online syncer application |
|
|
|
|
Action:
|
|
|
|
* Keep `cicd.silveressence.net` documented as a fast-changing prototype endpoint.
|
|
* Keep `exactsyncer.silveressence.net` documented as an intentional client-facing demo endpoint.
|
|
* Document owner, authentication model and exposure policy for active non-core endpoints.
|
|
|
|
Plane.so cleanup:
|
|
|
|
* Plane.so containers were removed.
|
|
* `plane.silveressence.net` was removed from Nginx Proxy Manager.
|
|
* The unused Plane.so SSL certificate was removed from the server.
|
|
|
|
---
|
|
|
|
## Proxy Hardening Review
|
|
|
|
Nginx Proxy Manager findings from the 2026-06-24 snapshot:
|
|
|
|
* `portainer.silveressence.net` has SSL Force, HTTP/2 and HSTS enabled.
|
|
* `team.silveressence.net` has SSL Force and HTTP/2 enabled.
|
|
* `git.silveressence.net`, `meet.silveressence.net`, `nuget.silveressence.net` and `dbgate.silveressence.net` do not have SSL Force enabled.
|
|
* No listed proxy host uses an Nginx Proxy Manager access list.
|
|
* DbGate is a high-sensitivity database administration interface and should be prioritized for SSL Force and an access restriction policy.
|
|
* Plane.so has been removed from containers, Nginx Proxy Manager and server certificate storage.
|
|
|
|
---
|
|
|
|
## Domain Details
|
|
|
|
### Gitea
|
|
|
|
Domain:
|
|
|
|
```text
|
|
git.silveressence.net
|
|
```
|
|
|
|
Purpose:
|
|
|
|
* Source control
|
|
* Git repositories
|
|
* Pull requests
|
|
* Issue tracking
|
|
|
|
Container:
|
|
|
|
```text
|
|
gitea
|
|
```
|
|
|
|
---
|
|
|
|
### OpenProject
|
|
|
|
Domain:
|
|
|
|
```text
|
|
team.silveressence.net
|
|
```
|
|
|
|
Purpose:
|
|
|
|
* Project management
|
|
* Work packages
|
|
* Time tracking
|
|
* Team collaboration
|
|
|
|
Container:
|
|
|
|
```text
|
|
openproject
|
|
```
|
|
|
|
---
|
|
|
|
### Jitsi Meet
|
|
|
|
Domain:
|
|
|
|
```text
|
|
meet.silveressence.net
|
|
```
|
|
|
|
Purpose:
|
|
|
|
* Video conferencing
|
|
* Team meetings
|
|
* Customer meetings
|
|
|
|
Container Stack:
|
|
|
|
```text
|
|
jitsi-docker-jitsi-meet-aa76415-web-1
|
|
```
|
|
|
|
---
|
|
|
|
### Portainer
|
|
|
|
Domain:
|
|
|
|
```text
|
|
portainer.silveressence.net
|
|
```
|
|
|
|
Purpose:
|
|
|
|
* Docker management
|
|
* Infrastructure administration
|
|
|
|
Container:
|
|
|
|
```text
|
|
portainer
|
|
```
|
|
|
|
---
|
|
|
|
### BaGet
|
|
|
|
Domain:
|
|
|
|
```text
|
|
nuget.silveressence.net
|
|
```
|
|
|
|
Purpose:
|
|
|
|
* Private NuGet package hosting
|
|
|
|
Container:
|
|
|
|
```text
|
|
baget
|
|
```
|
|
|
|
Routing:
|
|
|
|
```text
|
|
Nginx Proxy Manager -> baget:80
|
|
```
|
|
|
|
Status:
|
|
|
|
```text
|
|
Active
|
|
```
|
|
|
|
---
|
|
|
|
### DbGate
|
|
|
|
Domain:
|
|
|
|
```text
|
|
dbgate.silveressence.net
|
|
```
|
|
|
|
Purpose:
|
|
|
|
* HTTPS database administration portal
|
|
|
|
Container:
|
|
|
|
```text
|
|
dbgate
|
|
```
|
|
|
|
Routing:
|
|
|
|
```text
|
|
Nginx Proxy Manager -> dbgate:3000
|
|
```
|
|
|
|
Status:
|
|
|
|
```text
|
|
Active
|
|
```
|
|
|
|
---
|
|
|
|
## DNS
|
|
|
|
DNS records should point to:
|
|
|
|
```text
|
|
51.255.83.140
|
|
```
|
|
|
|
Server:
|
|
|
|
```text
|
|
SilverLinux
|
|
```
|
|
|
|
---
|
|
|
|
## SSL Certificates
|
|
|
|
SSL certificates are managed through:
|
|
|
|
```text
|
|
Nginx Proxy Manager
|
|
```
|
|
|
|
Certificate data location:
|
|
|
|
```text
|
|
/srv/docker/nginx-proxy-manager/letsencrypt
|
|
```
|
|
|
|
---
|
|
|
|
## Routing
|
|
|
|
Internet
|
|
↓
|
|
Nginx Proxy Manager
|
|
↓
|
|
Service Container
|
|
|
|
Examples:
|
|
|
|
```text
|
|
git.silveressence.net
|
|
↓
|
|
gitea
|
|
|
|
team.silveressence.net
|
|
↓
|
|
openproject
|
|
|
|
meet.silveressence.net
|
|
↓
|
|
jitsi
|
|
|
|
portainer.silveressence.net
|
|
↓
|
|
portainer
|
|
```
|
|
|
|
---
|
|
|
|
## Related Documentation
|
|
|
|
* docs/server.md
|
|
* docs/security.md
|
|
* docs/network.md
|
|
* nginx-proxy-manager/README.md
|