# Ops Portal Vision & Architecture

Confirmed July 9, 2026. ops.itpropartner.com is where ITPP runs its business.

## Core Vision

"One page to do what I need to do" (Germaine). The ops portal is the single pane of glass for the entire IT Pro Partner business — monitoring, provisioning, customer lifecycle, billing, and infrastructure management.

RBAC ensures different users see different things on the same platform:
- **Admin (Germaine):** everything
- **Tech/Support:** tickets, server status, network health — no billing, no provisioning
- **Sales/Onboarding:** activation flow, order forms, provisioning status
- **Viewer:** read-only, limited scope
- **Tony:** DRE only (Debt Recovery Experts)

## Architecture Evolution

Phase 1 (current): FastAPI backend + static frontend at ops.itpropartner.com
Phase 2 (next): Actionable pages with service restart, backup trigger, DNS management
Phase 3 (future): Customer provisioning workflows, billing sync, automated activation

## Confirmed Integrations

Already connected: SyncroMSP, Cloudflare, Hetzner, netcup, Wasabi, admin-ai (LiteLLM)
In discussion: RingLogix, Stripe, UniFi, Hudu
Dropped: OpenRouter (already proxied through LiteLLM), OpenAI (LiteLLM already), Porkbun/Namecheap (Cloudflare sells domains at cost)

## Monitoring Stack

- Uptime-Kuma (existing on Hetzner Docker host) — embedded status page, has REST API
- Prometheus (Core, deployed) — metrics collection at 127.0.0.1:9090
- Grafana (Core, new) — dashboards at 127.0.0.1:3002 (port 3000 was taken by DocuSeal)
- node_exporter on all servers — OS metrics (installed on Core so far)
- VPS Threshold Alerts (deployed) — 80/90/95% RAM/disk/CPU alerts every 15 min via Telegram

## Hardware Standard (Jul 2026)

All new netcup servers: **RS 4000 G12** (12 dedicated EPYC 9645 cores, 32 GB DDR5 ECC RAM, 1 TB NVMe, ~$44/mo monthly billing in Manassas, VA).
Exceptions: Core (existing RS 2000, light ops layer), app1-bu (Hetzner CPX11, warm standby).