Add Edge01 Server Book

2026-08-03 15:38:36 -04:00
parent 038bd4492c
commit 8b0e4a4678
10 changed files with 200 additions and 0 deletions
@@ -0,0 +1,16 @@
+# Backups
+
+Backup software:
+
+- Restic
+
+Schedule:
+
+- Nightly backup
+- Weekly retention
+
+Protected data:
+
+- Docker runtime
+- Databases
+- Configuration
@@ -0,0 +1,23 @@
+# Build Edge01
+
+## Phase 1
+
+- Create VPS
+- Install Debian
+- Update system
+- Install Docker
+- Install Git
+
+## Phase 2
+
+- Clone infrastructure repository
+- Restore secrets
+- Restore Docker configuration
+
+## Phase 3
+
+- Start Docker stacks
+- Verify networking
+- Verify WireGuard
+- Verify backups
+- Verify public services
@@ -0,0 +1,11 @@
+# Changelog
+
+## 2026-08-03
+
+- Added Caddy configuration to Git
+- Added Rspamd configuration to Git
+- Added Gitea configuration to Git
+- Added Portainer configuration to Git
+- Standardized Docker stack layout
+- Removed duplicate Voyager Git repository
+- Created Edge01 Server Book
@@ -0,0 +1,22 @@
+# Network
+
+## Public Interface
+
+208.113.210.193
+
+## WireGuard
+
+172.31.255.1/30
+
+## Docker Networks
+
+- proxy
+- gitea-internal
+- rspamd-internal
+
+## Public DNS
+
+- edge01.zerafa.com
+- git.zerafa.com
+- portainer.zerafa.com
+- rspamd.zerafa.com
@@ -0,0 +1,10 @@
+# Operations
+
+Routine Tasks
+
+- Update Debian
+- Update Docker images
+- Verify backups
+- Verify certificates
+- Review logs
+- Commit infrastructure changes to Git
@@ -0,0 +1,13 @@
+# Recovery Checklist
+
+- [ ] Build VPS
+- [ ] Install Debian
+- [ ] Install Docker
+- [ ] Clone Git repositories
+- [ ] Restore secrets
+- [ ] Restore Docker runtime
+- [ ] Restore databases
+- [ ] Start containers
+- [ ] Verify networking
+- [ ] Verify public services
+- [ ] Verify backups
@@ -0,0 +1,12 @@
+# Restore Edge01
+
+## Restore Order
+
+1. Restore operating system
+2. Restore Docker configuration
+3. Restore runtime data
+4. Restore PostgreSQL
+5. Restore Gitea repositories
+6. Restore Redis
+7. Start containers
+8. Verify services
@@ -0,0 +1,11 @@
+# Security
+
+Components
+
+- UFW
+- Fail2Ban
+- WireGuard
+- TLS certificates
+- Docker isolation
+
+Secrets are never stored in Git.
@@ -0,0 +1,9 @@
+# Services
+
+| Service | Purpose | Configuration | Runtime Data | Backup |
+|----------|----------|---------------|--------------|--------|
+| Caddy | Reverse proxy | Git | Certificates | Yes |
+| Gitea | Git server | Git | PostgreSQL + repositories | Yes |
+| Rspamd | Mail filtering | Git | Redis + Bayes | Yes |
+| Portainer | Docker management | Git | Database | Yes |
+| Voyager | Infrastructure dashboard | Git | Runtime JSON | Yes |