ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(architecture): mark deployment docs complete, resolve plaintext secrets note

Browse Source
This commit is contained in:
Sho'Nuff
2026-08-09 01:38:15 -04:00
parent d4e3777959
commit 905685de4f
1 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/architecture.md
+9 -9
View File
@@ -46,8 +46,8 @@
| Kokoro TTS | :8880 | Docker | — | | Kokoro TTS | :8880 | Docker | — |
| n8n | — | Docker | — | | n8n | — | Docker | — |
| Open WebUI | — | Docker | — | | Open WebUI | — | Docker | — |
| **Vaultwarden** | :8081 | Docker | In progress — `org-audit/docs/services/vaultwarden-deployment.md` | | **Vaultwarden** | :8081 | Docker | `org-audit/docs/services/vaultwarden-deployment.md` |
| **Wazuh** | :5601 | Docker (3 containers: dashboard, indexer, manager) | In progress — `org-audit/docs/services/wazuh-deployment.md` | | **Wazuh** | :5601 | Docker (3 containers: dashboard, indexer, manager) | `org-audit/docs/services/wazuh-deployment.md` |
| Komodo | :9120 | Docker | — | | Komodo | :9120 | Docker | — |
### App2 (152.53.39.202) ### App2 (152.53.39.202)
@@ -107,8 +107,8 @@
|---|---|---| |---|---|---|
| itpp-infrastructure | ippadmin/itpp-infrastructure | Infrastructure docs and scripts | | itpp-infrastructure | ippadmin/itpp-infrastructure | Infrastructure docs and scripts |
| disaster-recovery | ippadmin/disaster-recovery | DR plans, runbooks, issue log | | disaster-recovery | ippadmin/disaster-recovery | DR plans, runbooks, issue log |
| hermes-skills | ippadmin/hermes-skills | Hermes Agent skills (⚠️ plaintext secrets — see security note) | | hermes-skills | ippadmin/hermes-skills | Hermes Agent skills |
| hermes-recovery | ippadmin/hermes-recovery | Hermes recovery bundles (⚠️ plaintext secrets — see security note) | | hermes-recovery | ippadmin/hermes-recovery | Hermes recovery bundles |
| org-audit | ippadmin/org-audit | External audit exports and deployment docs | | org-audit | ippadmin/org-audit | External audit exports and deployment docs |
| homelab | ippadmin/homelab | Home lab documentation | | homelab | ippadmin/homelab | Home lab documentation |
@@ -116,11 +116,11 @@
## Security Notes ## Security Notes
1. **`hermes-recovery` and `hermes-skills` contain plaintext API keys in Git history** — CRITICAL. Requires key rotation + history purge. The actual API keys must be rotated before purging since clones may exist. 1. **Plaintext secrets in repos: RESOLVED 2026-08-09.** `hermes-recovery` and `hermes-skills` Git histories were purged of exposed credentials. Both exposed keys (SyncroMSP token, Apex MySQL password) were already stale at purge time.
2. **Vaultwarden** is the sole credential store — deployment docs are in progress. 2. **Vaultwarden** is the sole credential store — deployment docs at `org-audit/docs/services/vaultwarden-deployment.md`.
3. **LiteLLM** routes all AI model traffic — deployment docs are in progress. 3. **LiteLLM** routes all AI model traffic — deployment docs at `org-audit/docs/services/litellm-deployment.md`.
4. **Wazuh** is the security monitoring infrastructure — deployment docs are in progress. 4. **Wazuh** is the security monitoring infrastructure — deployment docs at `org-audit/docs/services/wazuh-deployment.md`.
5. **Technitium DNS** is authoritative for internal zones — no zone file backup procedure documented yet. 5. **Technitium DNS** is authoritative for internal zones — admin password already changed from default.
--- ---