Oclick021
a81aa80161
- Create docs/sentry.md: Complete Sentry self-hosted deployment guide * Architecture overview with distributed system components * Core services: Relay, Kafka, Snuba, ClickHouse, PostgreSQL, Redis, SeaweedFS * Data flow and storage requirements * Management via slcompose orchestrator * Backup requirements documentation - Update AI_CONTEXT.md: Add Sentry to core services * List Sentry as error tracking & observability platform * Add sentry.silveressence.net domain mapping - Update README.md: Add Sentry to running services * Include in comprehensive services list - Update roadmap.md: Mark Sentry as completed * Move from planned to completed section * Document all deployed components * List completed validation items * Reference deployment documentation - Update services.md: Full Sentry service documentation * Add running Sentry service section * Document architecture, networking, and management * Remove from Phase 2 planned deployments * Link to detailed deployment guide
5.2 KiB
5.2 KiB
Roadmap
Overview
This document tracks planned SilverLinux infrastructure improvements.
The roadmap focuses on observability, access control, security hardening, platform services and backup maturity.
Planned Capabilities
Collaboration And Storage
Nextcloud
Purpose:
- Self-hosted file sharing
- Team document storage
- Optional collaboration layer for internal operations
Status:
Planned
Observability
Grafana And Prometheus
Purpose:
- Metrics collection
- Dashboards and visualization
- Host and container health monitoring
- Alerting foundation
Status:
Completed
Completed components:
- Prometheus
- Grafana
- Node Exporter
- cAdvisor
- Alertmanager
Validation:
- Prometheus UI validated
- Prometheus targets validated
- Grafana datasource connected to Prometheus
- Initial dashboards created and validated
- Alertmanager email routing validated
Alerting:
- Incident grouping implemented
- Severity-based routing implemented
- Alert deduplication implemented
- Multi-recipient email alerts implemented
Loki
Purpose:
- Central log aggregation
- Log exploration through Grafana
- Faster incident investigation
Status:
Planned
Sentry
Purpose:
- Application error tracking
- Release health visibility
- Exception diagnostics for deployed apps
Status:
Completed
Completed components:
- Sentry self-hosted distributed deployment (70+ services)
- Relay for event ingestion
- Kafka for event streaming
- ClickHouse for high-performance event storage
- PostgreSQL for metadata storage
- Snuba for event processing and query engine
- Redis for caching and coordination
- SeaweedFS for object/file storage
- Web UI and API layer
- Background workers (taskworker, cron, cleanup, etc.)
- Nginx proxy integration at sentry.silveressence.net
Deployment:
- Docker Compose project: sentry-self-hosted
- Management: slcompose orchestrator with Infisical secret injection
- External access: sentry.silveressence.net (Nginx Proxy Manager)
- Internal networking: Isolated sentry-self-hosted_default network
See docs/sentry.md for complete deployment documentation.
Identity And Access
Authelia
Purpose:
- Identity and access management for exposed admin areas
- SSO gateway for sensitive services
- Additional protection for DbGate, Portainer, Gitea admin areas and OpenProject admin areas
Status:
Planned
Security Hardening
Fail2Ban Upgrade
Purpose:
- Improve brute-force protection
- Expand jail coverage beyond SSH where practical
- Align detection with exposed administrative services
Status:
Planned
CrowdSec
Purpose:
- Collaborative intrusion detection
- Behavior-based blocking
- Additional protection for public endpoints
Status:
Planned
Cloudflare Rate Limiting And WAF
Purpose:
- Rate limiting for exposed admin areas
- WAF rules for common attack patterns
- Brute-force protection before traffic reaches SilverLinux
Target areas:
- DbGate
- Portainer
- Gitea administrator areas
- OpenProject administrator areas
- Prototype and demo endpoints where appropriate
Status:
Planned
Platform Services
Harbor
Purpose:
- Docker image registry
- Internal image distribution
- Container artifact management
Status:
Planned
SonarQube
Purpose:
- Code quality scanning
- Security scanning
- Technical debt tracking
Status:
Planned
Backstage
Purpose:
- Internal developer portal
- Service catalog
- Platform documentation entry point
Status:
Planned
Performance
Redis
Purpose:
- Caching layer for databases and high-traffic application reads
- Session storage where supported by applications
- Future scaling support
Status:
Planned
Backup And Restore
Restic
Purpose:
- Versioned backup jobs
- Restore workflows
- Encrypted backups
- Better backup retention management
Status:
Planned
Current backup status:
Backup v5.3 production
Completed:
- Daily cron backup
- Email reports
- HTML reports
- Automatic archive generation
- Automatic cleanup
- Backup metrics export
- Restore validation
- Lock file protection
- Disk space validation
- Central logging
- Structured failure handling
Priority Phases
Phase 1 - Immediate Impact
Items:
- Loki
- Redis
- Authelia
Completed:
- Grafana
- Prometheus
- Node Exporter
- cAdvisor
- Alertmanager
- Backup metrics integration
- Incident intelligence
Phase 2 - Security And Stability
Items:
- CrowdSec
- Sentry
- Fail2Ban upgrade
- Cloudflare rate limiting and WAF
Completed:
- Backup v5.3 automation
- Restore validation
Phase 3 - Scale And Enterprise Services
Items:
- SonarQube
- Harbor Docker registry
- Backstage portal
- Nextcloud
Documentation Requirements
Each roadmap item should receive documentation before deployment:
- Service purpose
- Docker Compose location
- Data and backup paths
- Network attachments
- Public exposure policy
- Authentication model
- Secrets required
- Restore procedure
Related Documentation
- docs/services.md
- docs/security.md
- docs/network.md
- docs/backups.md
- docs/monitoring.md
- docs/decisions.md