Keith Casko
425 lines
18 KiB
HTML
425 lines
18 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
|
<meta name="description" content="ByteGeist infrastructure control plane — architecture, monitoring, delivery, security, and recovery evidence from Keith Casko's self-hosted cloud lab." />
|
|
<title>ByteGeist / Control Plane</title>
|
|
<link rel="icon" href="assets/images/bytegeist-logo.png" />
|
|
<link rel="preconnect" href="https://fonts.googleapis.com" />
|
|
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
|
|
<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet" />
|
|
<link rel="stylesheet" href="style.css" />
|
|
<script src="script.js" defer></script>
|
|
</head>
|
|
<body>
|
|
<div class="scanline" aria-hidden="true"></div>
|
|
|
|
<header class="control-bar">
|
|
<a class="wordmark" href="#overview" aria-label="ByteGeist control plane">
|
|
<img src="assets/images/bytegeist-logo.png" alt="" />
|
|
<span>BYTEGEIST</span>
|
|
<small>/ CONTROL PLANE</small>
|
|
</a>
|
|
|
|
<div class="control-state">
|
|
<span class="status-dot"></span>
|
|
<span>LAB CONFIGURATION / VERIFIED OCT 2026</span>
|
|
</div>
|
|
|
|
<nav aria-label="Control plane navigation">
|
|
<a href="#overview">Overview</a>
|
|
<a href="#topology">Topology</a>
|
|
<a href="#observability">Observability</a>
|
|
<a href="#services">Services</a>
|
|
<a href="#security">Security</a>
|
|
</nav>
|
|
|
|
<div class="clock" aria-label="Current local time">
|
|
<span id="local-time">--:--:--</span>
|
|
<small>AMERICA / DETROIT</small>
|
|
</div>
|
|
</header>
|
|
|
|
<main>
|
|
<section id="overview" class="command-grid">
|
|
<aside class="system-rail" aria-label="System status">
|
|
<div class="rail-heading">
|
|
<span>NODE</span>
|
|
<strong>BG-CORE-01</strong>
|
|
</div>
|
|
|
|
<dl class="rail-data">
|
|
<div><dt>Provider</dt><dd>Hetzner</dd></div>
|
|
<div><dt>OS</dt><dd>Ubuntu 24.04</dd></div>
|
|
<div><dt>Runtime</dt><dd>Docker</dd></div>
|
|
<div><dt>Region</dt><dd>EU-Central / HEL1</dd></div>
|
|
<div><dt>Ingress</dt><dd>NPM / TLS</dd></div>
|
|
<div><dt>Identity</dt><dd>Authentik</dd></div>
|
|
</dl>
|
|
|
|
<div class="rail-health">
|
|
<span>HOST TELEMETRY</span>
|
|
<strong>PROMETHEUS / NODE EXPORTER</strong>
|
|
</div>
|
|
|
|
<a href="https://wiki.casko.dev">OPEN RUNBOOKS <span>↗</span></a>
|
|
<a href="https://git.casko.dev">GIT SERVER <span>↗</span></a>
|
|
</aside>
|
|
|
|
<div class="overview-console">
|
|
<div class="console-label">
|
|
<span>INFRASTRUCTURE OVERVIEW</span>
|
|
<span id="refresh-indicator">CONNECTING TO TELEMETRY</span>
|
|
</div>
|
|
|
|
<div class="identity-block">
|
|
<div>
|
|
<p class="overline">SELF-HOSTED INFRASTRUCTURE ENVIRONMENT</p>
|
|
<h1>Personal cloud.<br />Operational by design.</h1>
|
|
</div>
|
|
<p class="operator-note">
|
|
A working infrastructure lab for identity, observability, delivery, security,
|
|
and recovery. Built and maintained as an evolving system—not a static demo.
|
|
</p>
|
|
</div>
|
|
|
|
<div class="metric-board" aria-label="Live infrastructure telemetry">
|
|
<article class="metric metric-primary">
|
|
<span>CPU LOAD</span>
|
|
<strong id="cpu-value" class="metric-value">--</strong><small>%</small>
|
|
<p>PROMETHEUS / NODE EXPORTER</p>
|
|
</article>
|
|
<article class="metric">
|
|
<span>MEMORY</span>
|
|
<strong id="memory-value" class="metric-value">--</strong><small>%</small>
|
|
<p>PROMETHEUS / NODE EXPORTER</p>
|
|
</article>
|
|
<article class="metric">
|
|
<span>HOST UPTIME</span>
|
|
<strong id="uptime-value" class="metric-value">--</strong>
|
|
<p>NODE EXPORTER</p>
|
|
</article>
|
|
<article class="metric">
|
|
<span>RUNNING CONTAINERS</span>
|
|
<strong id="containers-value" class="metric-value">--</strong>
|
|
<p>CADVISOR VIA PROMETHEUS</p>
|
|
</article>
|
|
<article class="metric">
|
|
<span>SCRAPE TARGETS</span>
|
|
<strong id="targets-value" class="metric-value">--</strong>
|
|
<p>PROMETHEUS TARGET HEALTH</p>
|
|
</article>
|
|
<article class="metric">
|
|
<span>TELEMETRY</span>
|
|
<strong id="telemetry-value" class="metric-value">CONNECTING</strong>
|
|
<p>PROMETHEUS / CADVISOR</p>
|
|
</article>
|
|
</div>
|
|
|
|
<div class="operations-window">
|
|
<div class="window-bar">
|
|
<span>GRAFANA / BYTEGEIST OPERATIONS</span>
|
|
<a href="assets/images/portfolio-grafana-operations.png" target="_blank">FULL RES ↗</a>
|
|
</div>
|
|
<img src="assets/images/portfolio-grafana-operations.png" alt="Grafana operations dashboard snapshot from the ByteGeist monitoring stack" />
|
|
<p class="evidence-note">CAPTURED OCT 2026 · GRAFANA OPERATIONS SNAPSHOT · LIVE VALUES ABOVE REFRESH EVERY 15s</p>
|
|
</div>
|
|
</div>
|
|
|
|
<aside class="activity-panel">
|
|
<div class="panel-title">
|
|
<span>OPERATIONAL CAPABILITIES</span>
|
|
<small>DOCUMENTED</small>
|
|
</div>
|
|
<ol class="event-list">
|
|
<li>
|
|
<span class="event-ok">DEPLOY</span>
|
|
<p>Automated deployment through Woodpecker CI</p>
|
|
</li>
|
|
<li>
|
|
<span class="event-info">AUTH</span>
|
|
<p>OIDC authentication through Authentik</p>
|
|
</li>
|
|
<li>
|
|
<span class="event-ok">BACKUP</span>
|
|
<p>Persistent data backup and documented recovery procedures</p>
|
|
</li>
|
|
<li>
|
|
<span class="event-warn">SEC</span>
|
|
<p>CrowdSec threat detection and decision evidence</p>
|
|
</li>
|
|
<li>
|
|
<span class="event-info">TLS</span>
|
|
<p>Certificate and HTTPS management through the reverse proxy</p>
|
|
</li>
|
|
<li>
|
|
<span class="event-info">DNS</span>
|
|
<p>Domain routing and service exposure</p>
|
|
</li>
|
|
</ol>
|
|
|
|
<div class="deployment-status">
|
|
<span>CI/CD WORKFLOW</span>
|
|
<strong>WOODPECKER</strong>
|
|
<p>Git-based build, verification, and deployment pipeline</p>
|
|
<div><i></i><i></i><i></i><i></i></div>
|
|
</div>
|
|
|
|
<div class="terminal-mini" aria-label="Operational stack summary">
|
|
<p><span>$</span> observability stack</p>
|
|
<p class="terminal-output">prometheus · loki · grafana · alloy</p>
|
|
<p><span>$</span> delivery stack</p>
|
|
<p class="terminal-output">gitea · woodpecker<span class="cursor">_</span></p>
|
|
</div>
|
|
</aside>
|
|
</section>
|
|
|
|
<section id="topology" class="module topology-module">
|
|
<header class="module-header">
|
|
<div>
|
|
<span class="module-id">SYS.01</span>
|
|
<h2>Infrastructure topology</h2>
|
|
</div>
|
|
<p>Traffic, identity, workloads, telemetry, and recovery paths documented for the Hetzner host.</p>
|
|
<div class="module-state"><i></i> DOCUMENTED</div>
|
|
</header>
|
|
|
|
<div class="topology-layout">
|
|
<div class="stack-index">
|
|
<div>
|
|
<span>EDGE</span>
|
|
<strong>Nginx Proxy Manager</strong>
|
|
<small>TLS termination / routing</small>
|
|
</div>
|
|
<div>
|
|
<span>IDENTITY</span>
|
|
<strong>Authentik</strong>
|
|
<small>OIDC / SSO / 2FA</small>
|
|
</div>
|
|
<div>
|
|
<span>COMPUTE</span>
|
|
<strong>Docker Compose</strong>
|
|
<small>Containerized workloads</small>
|
|
</div>
|
|
<div>
|
|
<span>TELEMETRY</span>
|
|
<strong>Prometheus + Loki</strong>
|
|
<small>Metrics / logs / alerts</small>
|
|
</div>
|
|
</div>
|
|
<figure class="system-map">
|
|
<a href="assets/images/bytegeist-architecture-v5.svg" target="_blank">
|
|
<img src="assets/images/bytegeist-architecture-v5.svg" alt="ByteGeist infrastructure architecture diagram including the live Prometheus telemetry path" />
|
|
</a>
|
|
<figcaption>
|
|
<span>BYTEGEIST-CLOUD / REV 05</span>
|
|
<span>LIVE TELEMETRY PATH INCLUDED</span>
|
|
</figcaption>
|
|
</figure>
|
|
</div>
|
|
</section>
|
|
|
|
<section id="observability" class="module evidence-module">
|
|
<header class="module-header">
|
|
<div>
|
|
<span class="module-id">OBS.02</span>
|
|
<h2>Monitoring stack</h2>
|
|
</div>
|
|
<p>Host metrics, container telemetry, centralized logs, and independent uptime checks.</p>
|
|
<div class="module-state"><i></i> STACK DOCUMENTED</div>
|
|
</header>
|
|
|
|
<div class="evidence-grid">
|
|
<figure class="evidence evidence-wide">
|
|
<figcaption>
|
|
<span>LOG PIPELINE</span>
|
|
<strong>Loki / Grafana Alloy</strong>
|
|
<small>Container output searchable by service and host</small>
|
|
</figcaption>
|
|
<a href="assets/images/portfolio-grafana-logs.png" target="_blank">
|
|
<img src="assets/images/portfolio-grafana-logs.png" alt="Centralized logs snapshot in Grafana" />
|
|
</a>
|
|
<p class="evidence-note">CAPTURED OCT 2026 · LOGGING EVIDENCE SNAPSHOT · VALUES SHOWN ARE FROM CAPTURE TIME</p>
|
|
</figure>
|
|
|
|
<div class="coverage-matrix">
|
|
<div class="panel-title"><span>MONITORING COVERAGE</span><small>CONFIGURED</small></div>
|
|
<ul>
|
|
<li><span>Host metrics</span><i>CONFIGURED</i></li>
|
|
<li><span>Container metrics</span><i>CONFIGURED</i></li>
|
|
<li><span>Application logs</span><i>CONFIGURED</i></li>
|
|
<li><span>Endpoint uptime</span><i>CONFIGURED</i></li>
|
|
<li><span>Resource alerts</span><i>CONFIGURED</i></li>
|
|
<li><span>Security events</span><i>CONFIGURED</i></li>
|
|
</ul>
|
|
<div class="stack-list">
|
|
<span>Grafana</span><span>Prometheus</span><span>Loki</span>
|
|
<span>Alloy</span><span>Node Exporter</span><span>cAdvisor</span>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<section id="services" class="module services-module">
|
|
<header class="module-header">
|
|
<div>
|
|
<span class="module-id">APP.03</span>
|
|
<h2>Service inventory</h2>
|
|
</div>
|
|
<p>Core applications represented in the internal service portal configuration.</p>
|
|
<div class="module-state"><i></i> LAST VERIFIED OCT 2026</div>
|
|
</header>
|
|
|
|
<div class="service-layout">
|
|
<div class="service-table" role="table" aria-label="Service inventory">
|
|
<div class="service-row service-head" role="row">
|
|
<span>Service</span><span>Role</span><span>Access</span><span>State</span>
|
|
</div>
|
|
<div class="service-row"><strong>Gitea</strong><span>Source control</span><span>SSO</span><i>CONFIGURED</i></div>
|
|
<div class="service-row"><strong>Wiki.js</strong><span>Documentation</span><span>SSO</span><i>CONFIGURED</i></div>
|
|
<div class="service-row"><strong>Dashy</strong><span>Service portal</span><span>SSO</span><i>CONFIGURED</i></div>
|
|
<div class="service-row"><strong>Vaultwarden</strong><span>Secrets</span><span>DIRECT</span><i>CONFIGURED</i></div>
|
|
<div class="service-row"><strong>Stirling PDF</strong><span>Document tools</span><span>SSO</span><i>CONFIGURED</i></div>
|
|
<div class="service-row"><strong>IT Tools</strong><span>Utilities</span><span>SSO</span><i>CONFIGURED</i></div>
|
|
<div class="service-row"><strong>Uptime Kuma</strong><span>Availability</span><span>SSO</span><i>CONFIGURED</i></div>
|
|
</div>
|
|
|
|
<figure class="portal-shot">
|
|
<figcaption>
|
|
<span>SERVICE PORTAL</span>
|
|
<small>Dashy / internal access layer</small>
|
|
</figcaption>
|
|
<a href="assets/images/portfolio-cloud-dashboard-overview.png" target="_blank">
|
|
<img src="assets/images/portfolio-cloud-dashboard-overview.png" alt="ByteGeist Dashy service portal snapshot" />
|
|
</a>
|
|
<p class="evidence-note">CAPTURED OCT 2026 · SERVICE PORTAL CONFIGURATION SNAPSHOT</p>
|
|
</figure>
|
|
</div>
|
|
</section>
|
|
|
|
<section class="module devops-module">
|
|
<header class="module-header">
|
|
<div>
|
|
<span class="module-id">DEV.04</span>
|
|
<h2>Delivery pipeline</h2>
|
|
</div>
|
|
<p>Git-based workflows from repository change to automated deployment.</p>
|
|
<div class="module-state"><i></i> PIPELINE EVIDENCE</div>
|
|
</header>
|
|
|
|
<div class="pipeline">
|
|
<div class="pipeline-flow" aria-label="Deployment pipeline">
|
|
<div><span>01</span><strong>COMMIT</strong><small>Gitea repository</small></div>
|
|
<b>→</b>
|
|
<div><span>02</span><strong>BUILD</strong><small>Woodpecker runner</small></div>
|
|
<b>→</b>
|
|
<div><span>03</span><strong>VERIFY</strong><small>Static checks</small></div>
|
|
<b>→</b>
|
|
<div><span>04</span><strong>DEPLOY</strong><small>Docker host</small></div>
|
|
</div>
|
|
|
|
<div class="pipeline-shots">
|
|
<figure>
|
|
<figcaption>GITEA / REPOSITORIES · OCT 2026 SNAPSHOT</figcaption>
|
|
<a href="assets/images/portfolio-gitea-dashboard.png" target="_blank">
|
|
<img src="assets/images/portfolio-gitea-dashboard.png" alt="Gitea repositories dashboard" />
|
|
</a>
|
|
</figure>
|
|
<figure>
|
|
<figcaption>WOODPECKER / PIPELINE · DEPLOYMENT EVIDENCE</figcaption>
|
|
<a href="assets/images/portfolio-woodpecker-pipeline.png" target="_blank">
|
|
<img src="assets/images/portfolio-woodpecker-pipeline.png" alt="Successful Woodpecker CI pipeline" />
|
|
</a>
|
|
</figure>
|
|
</div>
|
|
</div>
|
|
</section>
|
|
|
|
<section id="security" class="module security-module">
|
|
<header class="module-header">
|
|
<div>
|
|
<span class="module-id">SEC.05</span>
|
|
<h2>Identity & perimeter</h2>
|
|
</div>
|
|
<p>Central authentication, protected services, and documented hostile-traffic detection controls.</p>
|
|
<div class="module-state"><i></i> CONTROLS DOCUMENTED</div>
|
|
</header>
|
|
|
|
<div class="security-layout">
|
|
<figure class="auth-shot">
|
|
<figcaption>
|
|
<span>AUTHENTIK</span>
|
|
<small>Protected applications / OIDC / 2FA policy</small>
|
|
</figcaption>
|
|
<a href="assets/images/portfolio-authentik-applications.png" target="_blank">
|
|
<img src="assets/images/portfolio-authentik-applications.png" alt="Authentik protected applications configuration snapshot" />
|
|
</a>
|
|
<p class="evidence-note">CAPTURED OCT 2026 · IDENTITY CONFIGURATION EVIDENCE</p>
|
|
</figure>
|
|
|
|
<div class="security-data">
|
|
<div class="security-score">
|
|
<span>ACCESS POSTURE</span>
|
|
<strong>HARDENED</strong>
|
|
<small>KEY-ONLY SSH / SSO / TLS</small>
|
|
</div>
|
|
<ul>
|
|
<li><span>OIDC providers</span><strong>CONFIGURED</strong></li>
|
|
<li><span>Forward-auth apps</span><strong>CONFIGURED</strong></li>
|
|
<li><span>2FA policy</span><strong>ENFORCED</strong></li>
|
|
<li><span>Public SSH password</span><strong>DISABLED</strong></li>
|
|
</ul>
|
|
</div>
|
|
|
|
<figure class="crowdsec-shot">
|
|
<figcaption>
|
|
<span>CROWDSEC / SECURITY EVIDENCE</span>
|
|
<small>Threat detection and firewall-decision history</small>
|
|
</figcaption>
|
|
<a href="assets/images/portfolio-crowdsec-decisions.png" target="_blank">
|
|
<img src="assets/images/portfolio-crowdsec-decisions.png" alt="CrowdSec firewall decision evidence snapshot" />
|
|
</a>
|
|
<p class="evidence-note">CAPTURED OCT 2026 · SECURITY EVIDENCE SNAPSHOT · NOT A LIVE DECISION FEED</p>
|
|
</figure>
|
|
</div>
|
|
</section>
|
|
|
|
<section class="module recovery-module">
|
|
<header class="module-header">
|
|
<div>
|
|
<span class="module-id">DR.06</span>
|
|
<h2>Recovery state</h2>
|
|
</div>
|
|
<p>Configuration in Git, persistent data backups, and an explicit rebuild sequence.</p>
|
|
<div class="module-state"><i></i> RUNBOOK DOCUMENTED</div>
|
|
</header>
|
|
|
|
<div class="recovery-layout">
|
|
<div class="recovery-sequence">
|
|
<div><span>01</span><strong>Provision host</strong><small>Ubuntu / firewall / SSH</small></div>
|
|
<div><span>02</span><strong>Restore config</strong><small>Git / Compose / secrets</small></div>
|
|
<div><span>03</span><strong>Restore data</strong><small>Volumes / databases</small></div>
|
|
<div><span>04</span><strong>Validate edge</strong><small>DNS / TLS / identity</small></div>
|
|
</div>
|
|
<figure>
|
|
<a href="assets/images/portfolio-wiki-disaster-recovery.png" target="_blank">
|
|
<img src="assets/images/portfolio-wiki-disaster-recovery.png" alt="ByteGeist disaster recovery runbook documentation snapshot" />
|
|
</a>
|
|
<p class="evidence-note">CAPTURED OCT 2026 · DOCUMENTED RECOVERY PROCEDURE</p>
|
|
</figure>
|
|
</div>
|
|
</section>
|
|
</main>
|
|
|
|
<footer>
|
|
<div class="footer-mark">
|
|
<img src="assets/images/bytegeist-logo.png" alt="" />
|
|
<div><strong>BYTEGEIST</strong><span>KEITH CASKO / INFRASTRUCTURE LAB</span></div>
|
|
</div>
|
|
<p>PLAIN HTML / CSS / JAVASCRIPT</p>
|
|
<p>VERIFICATION: <span class="status-text">OCT 2026</span></p>
|
|
</footer>
|
|
</body>
|
|
</html>
|