mere-mortal:infra
Differences
This shows you the differences between two versions of the page.
| mere-mortal:infra [2026/09/24 18:52] – external edit 127.0.0.1 | mere-mortal:infra [2026/09/24 18:52] (current) – external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| + | ====== Infrastructure & Deployment ===== | ||
| + | |||
| + | **Table of Contents** | ||
| + | |||
| + | {{toc}} | ||
| + | |||
| + | ===== Server ===== | ||
| + | |||
| + | * Host: kimsufi.flyfucker.fr | ||
| + | * IP: 5.196.88.17 | ||
| + | * SSH: fatal@5.196.88.17: | ||
| + | * Hardware: Intel Atom N2800 (4 threads @ 1.86GHz), 3.2 GB RAM, 757 GB disk | ||
| + | * Note: Old CPU does not support SSE4.2 — Node.js 22 apps will crash with " | ||
| + | |||
| + | ===== Architecture ===== | ||
| + | |||
| + | * nginx (Docker, alpine) — reverse proxy on ports 80/443, terminates TLS, routes to backends | ||
| + | * All services run in separate containers on an internal Docker network | ||
| + | * No ports exposed to host except 80/443 on the nginx container | ||
| + | |||
| + | ===== TLS Certificates ===== | ||
| + | |||
| + | * Issuer: Let's Encrypt (R3) | ||
| + | * Type: Single certificate with wildcard SAN for *.mere-mortal.net | ||
| + | * Valid until: **19 December 2026** | ||
| + | * Auto-renewal: | ||
| + | * Cert path on host: / | ||
| + | |||
| + | ===== Domains ===== | ||
| + | |||
| + | All subdomains point to 5.196.88.17 via DNS A records: | ||
| + | |||
| + | * **wiki.mere-mortal.net** → DokuWiki | ||
| + | * **dokuwiki.mere-mortal.net** → DokuWiki (alias) | ||
| + | * keepass.mere-mortal.net → KeeWeb | ||
| + | * privatebin.mere-mortal.net → PrivateBin | ||
| + | * shaarli.mere-mortal.net → Shaarli | ||
| + | * kuma.mere-mortal.net → Uptime Kuma | ||
| + | * revodb.mere-mortal.net → NocoDB | ||
| + | * game.mere-mortal.net → Solitaire game (static) | ||
| + | |||
| + | ===== Docker Compose ===== | ||
| + | |||
| + | The stack is defined in / | ||
| + | |||
| + | Current services: | ||
| + | |||
| + | | Service | Image | Container | Port | Subdomain | | ||
| + | |---|---|---|---|---| | ||
| + | | nginx | nginx: | ||
| + | | DokuWiki | linuxserver/ | ||
| + | | KeeWeb | ghcr.io/ | ||
| + | | PrivateBin | privatebin/ | ||
| + | | Shaarli | shaarli/ | ||
| + | | Uptime Kuma | louislam/ | ||
| + | | NocoDB | nocodb/ | ||
| + | | Solitaire | (static files) | — | — | game/ | | ||
| + | |||
| + | ===== Directory Layout ===== | ||
| + | |||
| + | / | ||
| + | ├── docker-compose.yml | ||
| + | ├── nginx/ | ||
| + | │ | ||
| + | │ | ||
| + | │ | ||
| + | │ | ||
| + | │ | ||
| + | │ | ||
| + | │ | ||
