Architecture
Categories:
These diagrams render every page of the checked-in Drawio source. They describe the source document, not a live inventory or health check. Pages marked Archive retain the source’s historical classification. Open an image for its full-size SVG.
DC1
Vault
Flux
Forgejo
www
Threexui
DNS
Ingress
T3code
Truenas
Archive/Harvester
Archive/Opencode
Archive/Hermes
Archive/Proxmox
Archive/Harbor
Edit and regenerate
Open the canonical source with the pinned Drawio desktop tool:
bazel_agent bazel run //infra/arch
Regenerate the maintained SVGs after editing arch.drawio:
bazel_agent bazel run //infra/arch:update
bazel_agent bazel test //infra/arch:update_tests
The update target renders all 15 named pages in Bazel sandboxes with Drawio 30.2.6 web assets from the pinned desktop archive and the repository’s pinned headless Chrome. A pinned Liberation font set and isolated Fontconfig configuration keep text measurement independent of host fonts. The renderer loads only local assets, fails on missing pages and export errors, and records the source SHA-256 in each SVG. No display server, live infrastructure access, or runtime download is required. The freshness test compares rendered output with the maintained SVGs; documentation consumes those checked-in images.