Architecture

Rendered infrastructure architecture diagrams

These diagrams render every page of the checked-in Drawio source. They describe the source document, not a live inventory or health check. Pages marked Archive retain the source’s historical classification. Open an image for its full-size SVG.

DC1

DC1 infrastructure diagram

Vault

Vault infrastructure diagram

Flux

Flux infrastructure diagram

Forgejo

Forgejo infrastructure diagram

www

www infrastructure diagram

Threexui

Threexui infrastructure diagram

DNS

DNS infrastructure diagram

Ingress

Ingress infrastructure diagram

T3code

T3code infrastructure diagram

Truenas

Truenas infrastructure diagram

Archive/Harvester

Archive/Harvester infrastructure diagram

Archive/Opencode

Archive/Opencode infrastructure diagram

Archive/Hermes

Archive/Hermes infrastructure diagram

Archive/Proxmox

Archive/Proxmox infrastructure diagram

Archive/Harbor

Archive/Harbor infrastructure diagram

Edit and regenerate

Open the canonical source with the pinned Drawio desktop tool:

bazel_agent bazel run //infra/arch

Regenerate the maintained SVGs after editing arch.drawio:

bazel_agent bazel run //infra/arch:update
bazel_agent bazel test //infra/arch:update_tests

The update target renders all 15 named pages in Bazel sandboxes with Drawio 30.2.6 web assets from the pinned desktop archive and the repository’s pinned headless Chrome. A pinned Liberation font set and isolated Fontconfig configuration keep text measurement independent of host fonts. The renderer loads only local assets, fails on missing pages and export errors, and records the source SHA-256 in each SVG. No display server, live infrastructure access, or runtime download is required. The freshness test compares rendered output with the maintained SVGs; documentation consumes those checked-in images.