9f819df4d9
Establish the design foundation for the heleosv2 multi-tenant hosting platform before any implementation code: - Monorepo skeleton: docs/, platform-infra/, site-templates/, deployments/, control-panel/ with orientation READMEs. - docs/: roadmap index, architecture + threat model, naming conventions, site profiles, provisioning workflow, backup & DR runbook, repo/GitOps layout, and the approved architecture plan. - docs/adr/: 9 ADRs recording the rationale for single-host Compose, Traefik edge, nginx+fpm split, shared MariaDB, ZFS-per-customer, decoupled backup streams, Forgejo, CLI-first, and SFTP-only. - Secrets hygiene: .gitignore (only *.enc.* committed) and .gitattributes (LF for scripts/Dockerfiles/YAML run on the Linux host). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
11 lines
450 B
Markdown
11 lines
450 B
Markdown
# platform-infra
|
||
|
||
Host baseline and platform services as code (Phase 1–2). Empty until then.
|
||
|
||
**Planned contents:**
|
||
- Ansible roles: ZFS pool/datasets, Docker, nftables (Docker-aware), SSH
|
||
hardening, egress filtering, automysqlbackup, ZFS snapshot/`send` jobs.
|
||
- Base compose projects: Traefik, shared MariaDB, Forgejo + registry,
|
||
Prometheus/Grafana/Loki, Uptime-Kuma.
|
||
|
||
See [../docs/07-repo-layout-gitops.md](../docs/07-repo-layout-gitops.md).
|