Infrastruktur

3-Node Docker Swarm, CephFS 7 TiB, IKEv2-VPN — Transparenz für Betrieb.

3-Node Docker Swarm · CephFS 7 TiB · IKEv2-VPN · transparente Infrastruktur für Betrieb und Audit.

3
Swarm-Nodes
1 Manager · 2 Worker
7 TiB
CephFS
HEALTH_OK
IKEv2
VPN
active
7
Services
Definiert im Catalog

Server-Topologie

rz2-s-ccx13-01 159.69.119.51
Rolle: Swarm Manager · Ceph Monitor
Hetzner Cloud ccx13
💾 ZFS: 46 GB (37% nach Prune)
pces-portal-manager traefik portal-tables-manager
rz2-s-vibecoding01 142.132.196.228
Rolle: Swarm Worker · Ceph OSD
Hetzner Dedicated
VPN-Loopback: 172.18.254.251/32
💾 ZFS: 992 GB (1%)
rz2-s-vibecoding03 46.4.204.154
Rolle: Swarm Worker · Ceph OSD
Hetzner Dedicated
VPN-Loopback: 172.18.254.250/32
💾 ZFS: 992 GB (1%)

CephFS Storage-Cluster

Kapazität: 7.0 TiB repliziert
Genutzt: 1.8 GiB (0.02%)
Status: HEALTH_OK
Cluster-ID: 24caf746-300f-11f1-a817-01e1b7b0c912
✓ Persistente User-Homes für PCES-Container

IKEv2 VPN-Tunnel

Protokoll: IKEv2
Peer: Precitec Fortigate
Peer-IP: 85.115.17.50
Status: active
✓ Direkt-Zugang ins Precitec-Intranet aus PCES-Container

Service-Catalog

Service Domain Status
PCES Production coding.precitec.it active
PCES Stage coding-stage.precitec.it active
PCES Sandbox coding-sandbox.precitec.it planned
Docker Swarm — active
CephFS Storage — active
StrongSwan VPN — active
IIO Manual Portal node.iio.space/precitec active

Offene Known Errors

KE-PCES-002 Manager SNAT-Regeln fehlen medium open
KE-PCES-005 StrongSwan Handler hardcoded low open

Vollständige Known-Error-Liste: specs/sol/known-errors.yaml

Datenquellen: specs/infrastructure/compute-profile.yaml · specs/sol/service-catalog.yaml · specs/sol/known-errors.yaml · Zuletzt verifiziert: 2026-06-07 (SSH-Direct-Checks)

Generiert 2026-06-23 21:59 UTC · render-portal.py --tenant precitec · SSOT: projection.yaml