silverlinux-infra/docs/server.md

Server Information

Overview

SilverLinux is the primary self-hosted infrastructure server for Silver Solutions.

The server hosts source control, project management, collaboration, communication and supporting infrastructure services.

---

Host Information

Property	Value
Hostname	silverlinux
Provider	OVH
Operating System	Ubuntu Server 24.04 LTS
Public IP	51.255.83.140

---

Hardware

Resource	Value
CPU	Intel Xeon-D 1520
Memory	32 GB RAM
Storage	2 × 480 GB SSD RAID1

---

Installed Software

Docker

Purpose:

• Container hosting
• Service isolation
• Deployment management

Docker Compose

Purpose:

• Multi-container application deployment
• Service management

PostgreSQL

Purpose:

• Primary PostgreSQL database platform

Microsoft SQL Server Express

Purpose:

• Private SQL Server platform for compatible applications

Fail2Ban

Purpose:

• SSH brute-force protection

UFW

Purpose:

• Firewall management

Monitoring Stack

Purpose:

• Metrics collection
• Monitoring dashboards
• Host metrics
• Docker container metrics

---

Docker Networks

internal

Purpose:

Private communication between services.

Examples:

• Gitea → PostgreSQL
• OpenProject → PostgreSQL

---

proxy

Purpose:

Public-facing services behind Nginx Proxy Manager.

Examples:

• Gitea
• OpenProject
• Jitsi Meet
• Portainer
• DbGate

---

jitsi-docker-jitsi-meet-aa76415_meet.jitsi

Purpose:

Isolated Jitsi communication cluster.

Examples:

• jitsi-web
• jitsi-jvb
• jitsi-jicofo
• jitsi-prosody

---

xray_default

Purpose:

Compose-created tunneling and connectivity network for Xray.

Examples:

• No running containers were attached in the 2026-06-24 runtime snapshot

---

gitea-runner_default

Purpose:

Default Compose network for the Gitea Actions runner stack.

Examples:

• gitea-runner

---

Running Services

• PostgreSQL
• Gitea
• OpenProject
• Jitsi Meet
• Portainer
• Nginx Proxy Manager
• BaGet
• Gitea Actions Runner
• Microsoft SQL Server 2022 Express
• DbGate
• Xray
• Prometheus
• Grafana
• Node Exporter
• cAdvisor
• Sentry
• Nextcloud

---

Directory Structure

Docker Services

/srv/docker

Contains:

/srv/docker/gitea
/srv/docker/openproject
/srv/docker/postgres
/srv/docker/jitsi
/srv/docker/portainer
/srv/docker/nginx-proxy-manager
/srv/docker/baget
/srv/docker/gitea-runner
/srv/docker/mssql
/srv/docker/dbgate
/srv/docker/xray
/srv/docker/monitoring
/srv/docker/nextcloud
/srv/docker/sentry

---

Shared Secrets

Infisical

Contains:

• SMTP credentials
• Database passwords
• Application secrets
• MSSQL SA password
• DbGate password
• Future OAuth credentials

Legacy note:

• /srv/secrets/company.env is no longer part of the active secret model and should be removed if it still exists.

---

Backups

/srv/backups

Suggested structure:

/srv/backups/daily
/srv/backups/weekly
/srv/backups/monthly

---

Service Data Locations

Gitea

/srv/docker/gitea/data

---

OpenProject

/srv/docker/openproject/assets

---

PostgreSQL

/srv/docker/postgres/data

---

Microsoft SQL Server Express

/srv/docker/mssql/data

---

DbGate

/srv/docker/dbgate/data

---

Nginx Proxy Manager

/srv/docker/nginx-proxy-manager/data
/srv/docker/nginx-proxy-manager/letsencrypt

---

Jitsi

/srv/docker/jitsi

---

BaGet

/srv/docker/baget/data

---

Gitea Actions Runner

/srv/docker/gitea-runner

Runner:

silverlinux-runner

---

Xray

/srv/docker/xray

Network:

proxy

Published port:

0.0.0.0:32443 -> 8080/tcp

Image:

ghcr.io/xtls/xray-core:latest

Runtime note:

The xray_default network exists, but the running xray container was attached only to proxy in the 2026-06-24 runtime snapshot.

---

Nextcloud

/srv/docker/nextcloud

Volumes:

nextcloud_nextcloud_data
nextcloud_nextcloud_db

Domain:

cloud.silveressence.net

Runtime note:

The 2026-07-08 runtime snapshot showed nextcloud, nextcloud-db and nextcloud-redis running with no host-published ports. The web container is routed through Nginx Proxy Manager on the proxy network; PostgreSQL and Redis stay on nextcloud_nextcloud_internal.

---

Sentry

Deployment:

Upstream Sentry self-hosted install.sh

Install directory:

/srv/docker/sentry

Domain:

sentry.silveressence.net

Network:

sentry-self-hosted_default

Public entry:

sentry-self-hosted-nginx-1
0.0.0.0:9000 -> 80/tcp

Runtime note:

Sentry is available through Nginx Proxy Manager at https://sentry.silveressence.net. It is maintained as an upstream self-hosted Sentry deployment and is the exception to the standard SilverLinux slcompose and Infisical service model.

---

Monitoring Stack

/srv/docker/monitoring

Components:

• Prometheus
• Grafana
• Node Exporter
• cAdvisor

Validated:

• Prometheus targets
• Grafana Prometheus datasource
• Backup metrics
• Host metrics
• Docker metrics

---

SSH Access

Primary user:

ubuntu

Authentication:

• SSH key authentication
• Root login disabled

---

Security

Implemented:

• UFW enabled
• Fail2Ban enabled
• Shared secrets stored outside Git repositories
• SSL certificates managed through Nginx Proxy Manager
• PostgreSQL not exposed publicly
• MSSQL port 1433 not exposed publicly
• Nextcloud PostgreSQL and Redis not exposed publicly
• Sentry backing services not exposed publicly
• Database administration is available only through authenticated HTTPS access to DbGate
• Xray is not attached to the private database network and is monitored as a tunneling endpoint
• OpenID disabled in Gitea

---

Email

Sender address:

noreply@silveressence.net

SMTP credentials are stored in:

Infisical

Used by:

• Gitea
• OpenProject
• Nextcloud

---

Disaster Recovery

This repository should contain enough information to rebuild the SilverLinux environment from scratch.

Recovery priorities:

1. Restore secrets
2. Restore PostgreSQL
3. Restore Nginx Proxy Manager
4. Restore Gitea
5. Restore OpenProject
6. Restore remaining services

---

Related Documentation

• docs/secrets.md
• docs/security.md
• docs/backups.md
• docs/services.md
• docs/network.md
• docs/domains.md