From 2d94331c4a2b5e6cb2ddbd74172e836f816c7254 Mon Sep 17 00:00:00 2001 From: keith Date: Sun, 21 Jun 2026 01:34:59 +0000 Subject: [PATCH] Update index.html --- index.html | 243 ++++++++++++++++++++++++++++++++++++++++------------- 1 file changed, 185 insertions(+), 58 deletions(-) diff --git a/index.html b/index.html index 205c0f2..5fce015 100644 --- a/index.html +++ b/index.html @@ -8,99 +8,226 @@
-
-
25+

Containers

+
26

Containers

20+

Services

SSO

Authentik

CI/CD

Woodpecker

-
-

Platform Overview

+
+

What is ByteGeist?

- ByteGeist uses Nginx Proxy Manager for routing, Authentik for identity, Grafana and - Prometheus for monitoring, Loki and Alloy for logs, and Woodpecker for automation. + ByteGeist Cloud is a self-hosted infrastructure platform built to practice real-world + Linux administration, Docker operations, networking, identity management, monitoring, + logging, security hardening, backup planning, disaster recovery, and CI/CD automation.

+
-
-
-

Infrastructure

-

Ubuntu 24.04, Docker, Docker Compose, Portainer, and Nginx Proxy Manager.

-
-
-

Identity

-

Centralized SSO using Authentik, OAuth2, OIDC, Forward Auth, and 2FA.

-
-
-

Observability

-

Grafana dashboards, Prometheus metrics, Loki logs, Node Exporter, and cAdvisor.

-
+
+
+

Architecture

+

Platform Design

+

+ Traffic flows through Nginx Proxy Manager, authentication is centralized through + Authentik, and services are monitored, logged, backed up, and documented. +

+
+ +
+ ByteGeist architecture diagram +
+
+ +
+
+

Operations

+

Monitoring & Logging

+

+ Grafana, Prometheus, Loki, Alloy, Node Exporter, and cAdvisor provide visibility + into system health, container workloads, and infrastructure logs. +

+
+ +
+
+ Grafana operations dashboard +
+

Infrastructure Monitoring

+

System health, uptime, memory, CPU, disk usage, and container metrics in Grafana.

+
+
+ +
+ Grafana logs dashboard +
+

Centralized Logging

+

Loki and Grafana provide searchable logs for containers and infrastructure troubleshooting.

+
+
-

Security Controls

-
-
-

SSH Hardening

-

Password authentication disabled. ED25519 key-only access enforced.

-
-
-

Threat Detection

-

Fail2Ban and CrowdSec detect brute-force attempts and automatically block attackers.

-
-
-

Access Control

-

Services protected with Authentik SSO, 2FA, HTTPS, and reverse proxy policies.

-
+
+

Security

+

Identity & Threat Detection

+

+ Authentik provides single sign-on and access control while Fail2Ban and CrowdSec + detect and block hostile traffic. +

+
+ +
+
+ Authentik application portal +
+

Centralized Identity

+

SSO, OAuth2, OIDC, Forward Auth, and 2FA protect access to internal services.

+
+
+ +
+ CrowdSec security decisions +
+

Threat Detection

+

CrowdSec detects brute-force behavior and creates firewall decisions to block attackers.

+
+
-
-

Automation & CI/CD

-

- Woodpecker CI is integrated with Gitea to run automated pipelines when code is pushed. - The first test pipeline successfully cloned a repository, executed build steps, and returned exit code 0. -

+
+
+

Development

+

Git Hosting & CI/CD

+

+ Gitea hosts the code and infrastructure repositories while Woodpecker CI runs automated + pipelines triggered by repository activity. +

+
+ +
+
+ Gitea dashboard +
+

Self-Hosted Git

+

Gitea manages source code, project history, documentation, and infrastructure repositories.

+
+
+ +
+ Woodpecker successful pipeline +
+

CI/CD Automation

+

Woodpecker successfully runs automated pipelines connected to Gitea repositories.

+
+
+
-
-

Documentation & Recovery

-

- ByteGeist includes disaster recovery documentation, backup validation, service inventory, - restore procedures, and operational notes for maintaining the platform. -

+
+
+

Service Portal

+

Centralized Dashboard

+

+ Dashy acts as the launchpad for the environment, organizing infrastructure, + observability, development, security, tools, and user services. +

+
+ +
+
+ Dashy dashboard overview +
+

Operations Portal

+

Quick access to core infrastructure, observability, and development services.

+
+
+ +
+ Dashy service catalog +
+

Service Catalog

+

Organized access to security tools, utilities, file management, and public sites.

+
+
+
+
+ +
+
+

Recovery

+

Documentation & Disaster Recovery

+

+ ByteGeist includes documented restore procedures, backup validation, service inventory, + DNS information, and recovery priorities. +

+
+ +
+ ByteGeist disaster recovery documentation +
+
+ +
+

Skills Demonstrated

+
+ Linux Administration + Docker + Docker Compose + Reverse Proxies + SSL/TLS + DNS + SSO + OAuth2 / OIDC + Monitoring + Centralized Logging + CI/CD + Security Hardening + Threat Detection + Backup Strategy + Disaster Recovery + Technical Documentation +
\ No newline at end of file