mirror of
https://github.com/phfroidmont/self-hosting.git
synced 2026-03-25 18:46:10 +01:00
No description
a6571d5f39
Replace the OpenVPN/OCServ path with a cleaner wstunnel-terminated WireGuard relay on :443, advertise/approve corporate subnet routes through Headscale, and add wsl DNS/route plumbing for tailnet access. |
||
|---|---|---|
| hardware | ||
| keys | ||
| modules | ||
| profiles | ||
| ssh_keys | ||
| terraform | ||
| .envrc | ||
| .gitignore | ||
| .sops.yaml | ||
| environment.nix | ||
| flake.lock | ||
| flake.nix | ||
| README.adoc | ||
| secrets.enc.yml | ||
| shell.nix | ||
| UNLICENSE | ||
[plantuml, format="png"]
----
skinparam componentStyle rectangle
cloud "Hetzner cloud" {
node "backend1" {
[Nextcloud]
[matrix-synapse]
[roundcube]
[dkuwiki]
[mumble]
[website-marie]
}
database "db1" {
[PostgreSQL]
}
}
frame "Hetzner dedicated" {
node "storage1" {
[jellyfin]
[torrents]
[mailserver]
[stb-website]
[monero node]
[jitsi-meet]
folder "filesystem" {
interface "nextcloud_data"
interface "media"
}
}
}
[Nextcloud] ---> [PostgreSQL]
[matrix-synapse] ---> [PostgreSQL]
[roundcube] ---> [PostgreSQL]
[Nextcloud] ...> nextcloud_data : sshfs
[jellyfin] ---> media
[torrents] ---> media
----