Add Edge01 Server Book

2026-08-03 15:38:36 -04:00
parent 038bd4492c
commit 8b0e4a4678
10 changed files with 200 additions and 0 deletions
@@ -0,0 +1,73 @@
+# Edge01 Server Book
+
+## Overview
+
+Edge01 is the public-facing infrastructure server for the Zerafa environment.
+
+It provides:
+
+- Reverse proxy (Caddy)
+- Git hosting (Gitea)
+- Mail filtering (Rspamd)
+- Container management (Portainer)
+- Voyager infrastructure dashboard
+- WireGuard gateway
+- Automated Restic backups
+
+---
+
+## Platform
+
+| Item | Value |
+|------|-------|
+| Hostname | edge01 |
+| Operating System | Debian GNU/Linux 13 (Trixie) |
+| Virtualization | KVM |
+| Runtime | Docker Compose |
+| Public IP | 208.113.210.193 |
+
+---
+
+## Public Services
+
+| Service | URL |
+|---------|-----|
+| Voyager | https://edge01.zerafa.com |
+| Gitea | https://git.zerafa.com |
+| Portainer | https://portainer.zerafa.com |
+| Rspamd | https://rspamd.zerafa.com |
+
+---
+
+## Docker Stacks
+
+- Caddy
+- Gitea
+- Portainer
+- Rspamd
+
+---
+
+## Documentation
+
+- docs/BUILD.md
+- docs/RESTORE.md
+- docs/SERVICES.md
+- docs/NETWORK.md
+- docs/BACKUP.md
+- docs/SECURITY.md
+- docs/OPERATIONS.md
+- docs/RECOVERY-CHECKLIST.md
+- docs/CHANGELOG.md
+
+---
+
+## Git Repositories
+
+Infrastructure
+
+    /opt/git/infrastructure
+
+Applications
+
+    /opt/git/voyager
@@ -0,0 +1,16 @@
+# Backups
+
+Backup software:
+
+- Restic
+
+Schedule:
+
+- Nightly backup
+- Weekly retention
+
+Protected data:
+
+- Docker runtime
+- Databases
+- Configuration
@@ -0,0 +1,23 @@
+# Build Edge01
+
+## Phase 1
+
+- Create VPS
+- Install Debian
+- Update system
+- Install Docker
+- Install Git
+
+## Phase 2
+
+- Clone infrastructure repository
+- Restore secrets
+- Restore Docker configuration
+
+## Phase 3
+
+- Start Docker stacks
+- Verify networking
+- Verify WireGuard
+- Verify backups
+- Verify public services
@@ -0,0 +1,11 @@
+# Changelog
+
+## 2026-08-03
+
+- Added Caddy configuration to Git
+- Added Rspamd configuration to Git
+- Added Gitea configuration to Git
+- Added Portainer configuration to Git
+- Standardized Docker stack layout
+- Removed duplicate Voyager Git repository
+- Created Edge01 Server Book
@@ -0,0 +1,22 @@
+# Network
+
+## Public Interface
+
+208.113.210.193
+
+## WireGuard
+
+172.31.255.1/30
+
+## Docker Networks
+
+- proxy
+- gitea-internal
+- rspamd-internal
+
+## Public DNS
+
+- edge01.zerafa.com
+- git.zerafa.com
+- portainer.zerafa.com
+- rspamd.zerafa.com
@@ -0,0 +1,10 @@
+# Operations
+
+Routine Tasks
+
+- Update Debian
+- Update Docker images
+- Verify backups
+- Verify certificates
+- Review logs
+- Commit infrastructure changes to Git
@@ -0,0 +1,13 @@
+# Recovery Checklist
+
+- [ ] Build VPS
+- [ ] Install Debian
+- [ ] Install Docker
+- [ ] Clone Git repositories
+- [ ] Restore secrets
+- [ ] Restore Docker runtime
+- [ ] Restore databases
+- [ ] Start containers
+- [ ] Verify networking
+- [ ] Verify public services
+- [ ] Verify backups
@@ -0,0 +1,12 @@
+# Restore Edge01
+
+## Restore Order
+
+1. Restore operating system
+2. Restore Docker configuration
+3. Restore runtime data
+4. Restore PostgreSQL
+5. Restore Gitea repositories
+6. Restore Redis
+7. Start containers
+8. Verify services
@@ -0,0 +1,11 @@
+# Security
+
+Components
+
+- UFW
+- Fail2Ban
+- WireGuard
+- TLS certificates
+- Docker isolation
+
+Secrets are never stored in Git.
@@ -0,0 +1,9 @@
+# Services
+
+| Service | Purpose | Configuration | Runtime Data | Backup |
+|----------|----------|---------------|--------------|--------|
+| Caddy | Reverse proxy | Git | Certificates | Yes |
+| Gitea | Git server | Git | PostgreSQL + repositories | Yes |
+| Rspamd | Mail filtering | Git | Redis + Bayes | Yes |
+| Portainer | Docker management | Git | Database | Yes |
+| Voyager | Infrastructure dashboard | Git | Runtime JSON | Yes |