Containers
Services
Authentik
Woodpecker
Platform Overview
ByteGeist uses Nginx Proxy Manager for routing, Authentik for identity, Grafana and Prometheus for monitoring, Loki and Alloy for logs, and Woodpecker for automation.
Infrastructure
Ubuntu 24.04, Docker, Docker Compose, Portainer, and Nginx Proxy Manager.
Identity
Centralized SSO using Authentik, OAuth2, OIDC, Forward Auth, and 2FA.
Observability
Grafana dashboards, Prometheus metrics, Loki logs, Node Exporter, and cAdvisor.
Security Controls
SSH Hardening
Password authentication disabled. ED25519 key-only access enforced.
Threat Detection
Fail2Ban and CrowdSec detect brute-force attempts and automatically block attackers.
Access Control
Services protected with Authentik SSO, 2FA, HTTPS, and reverse proxy policies.
Automation & CI/CD
Woodpecker CI is integrated with Gitea to run automated pipelines when code is pushed. The first test pipeline successfully cloned a repository, executed build steps, and returned exit code 0.
Documentation & Recovery
ByteGeist includes disaster recovery documentation, backup validation, service inventory, restore procedures, and operational notes for maintaining the platform.