diff --git a/assets/images/bytegeist-infrastructure-overview.svg b/assets/images/bytegeist-infrastructure-overview.svg
index 9e882fc..49b2b15 100644
--- a/assets/images/bytegeist-infrastructure-overview.svg
+++ b/assets/images/bytegeist-infrastructure-overview.svg
@@ -1 +1,36 @@
-²ø1šYì
\ No newline at end of file
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1200 750">
+<defs>
+  <filter id="shadow" x="-20%" y="-20%" width="140%" height="140%"><feDropShadow dx="0" dy="6" stdDeviation="8" flood-color="#10263d" flood-opacity=".12"/></filter>
+  <marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="8" markerHeight="8" orient="auto"><path d="M0 0 10 5 0 10Z" fill="#6587a5"/></marker>
+</defs>
+<rect width="1200" height="750" fill="#f7f9fb"/>
+<text x="600" y="75" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="42" font-weight="700" fill="#10263d">ByteGeist Infrastructure Overview</text>
+<text x="600" y="112" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="20" fill="#62748a">Hetzner-hosted services, routing, identity, and observability</text>
+<line x1="565" y1="136" x2="635" y2="136" stroke="#8fb3d0" stroke-width="4" stroke-linecap="round"/>
+<rect x="50" y="280" width="175" height="190" rx="18" fill="#fff" stroke="#b9c9d8" stroke-width="2" filter="url(#shadow)"/>
+<circle cx="137" cy="335" r="22" fill="#243f60"/><circle cx="104" cy="346" r="15" fill="#31577f"/><circle cx="170" cy="346" r="15" fill="#31577f"/>
+<path d="M105 390c0-25 15-39 32-39s32 14 32 39v12h-64z" fill="#243f60"/><path d="M78 393c0-18 11-30 26-30v39H78zM196 393c0-18-11-30-26-30v39h26z" fill="#31577f"/>
+<text x="137" y="432" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="20" font-weight="700" fill="#10263d">Internet / Users</text>
+<rect x="280" y="280" width="190" height="190" rx="18" fill="#183b67" stroke="#2f689d" stroke-width="2" filter="url(#shadow)"/>
+<path d="M375 322l38 18v32c0 32-22 51-38 61-16-10-38-29-38-61v-32z" fill="none" stroke="#b5e4ff" stroke-width="8"/>
+<rect x="360" y="362" width="30" height="29" rx="4" fill="#d8f0ff"/><path d="M366 362v-10c0-12 18-12 18 0v10" fill="none" stroke="#d8f0ff" stroke-width="6"/>
+<text x="375" y="425" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="22" font-weight="700" fill="#fff">Cloudflare</text><text x="375" y="451" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="16" fill="#a8c8df">DNS + TLS</text>
+<line x1="225" y1="375" x2="270" y2="375" stroke="#6587a5" stroke-width="4" marker-end="url(#arrow)"/><line x1="470" y1="375" x2="520" y2="375" stroke="#6587a5" stroke-width="4" marker-end="url(#arrow)"/>
+<rect x="535" y="180" width="615" height="390" rx="22" fill="#fff" stroke="#c4d4e2" stroke-width="2" filter="url(#shadow)"/>
+<rect x="575" y="220" width="58" height="15" rx="5" fill="#31577f"/><rect x="575" y="243" width="58" height="15" rx="5" fill="#243f60"/>
+<text x="660" y="237" font-family="Segoe UI,Arial,sans-serif" font-size="24" font-weight="700" fill="#10263d">Hetzner VPS</text><text x="660" y="263" font-family="Segoe UI,Arial,sans-serif" font-size="16" fill="#62748a">Ubuntu + Docker</text>
+<rect x="560" y="290" width="565" height="245" rx="18" fill="#fbfcfe" stroke="#b9cfe0" stroke-width="2" stroke-dasharray="7 7"/>
+<text x="843" y="315" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="15" fill="#62748a">Services (Docker)</text>
+<rect x="585" y="350" width="135" height="95" rx="15" fill="#183b67" stroke="#2f689d"/>
+<circle cx="652" cy="378" r="7" fill="#d8f0ff"/><circle cx="625" cy="407" r="7" fill="#d8f0ff"/><circle cx="679" cy="407" r="7" fill="#d8f0ff"/>
+<path d="M647 384l-17 18M657 384l17 18M632 407h40" stroke="#d8f0ff" stroke-width="3"/>
+<text x="652" y="433" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="16" font-weight="700" fill="#fff">Reverse Proxy</text>
+<rect x="765" y="335" width="150" height="65" rx="12" fill="#f6f8fb" stroke="#cbd7e2"/><text x="840" y="375" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="17" font-weight="600" fill="#10263d">Authentik</text>
+<rect x="935" y="335" width="150" height="65" rx="12" fill="#f6f8fb" stroke="#cbd7e2"/><text x="1010" y="375" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="17" font-weight="600" fill="#10263d">Gitea</text>
+<rect x="765" y="415" width="320" height="58" rx="12" fill="#f6f8fb" stroke="#cbd7e2"/><text x="925" y="451" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="17" font-weight="600" fill="#10263d">Woodpecker CI</text>
+<rect x="765" y="488" width="95" height="55" rx="12" fill="#f6f8fb" stroke="#cbd7e2"/><text x="812" y="521" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="15" font-weight="600" fill="#10263d">Grafana</text>
+<rect x="875" y="488" width="105" height="55" rx="12" fill="#f6f8fb" stroke="#cbd7e2"/><text x="927" y="521" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="15" font-weight="600" fill="#10263d">Prometheus</text>
+<rect x="995" y="488" width="90" height="55" rx="12" fill="#f6f8fb" stroke="#cbd7e2"/><text x="1040" y="521" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="15" font-weight="600" fill="#10263d">Loki</text>
+<path d="M720 383H750V368H755M720 397H755M720 414H742V443H755M720 428H740V515H755" fill="none" stroke="#7ea3c2" stroke-width="3" marker-end="url(#arrow)"/>
+<text x="600" y="650" text-anchor="middle" font-family="Segoe UI,Arial,sans-serif" font-size="16" fill="#62748a">Public services routed through reverse proxy; monitoring and identity handled internally.</text>
+</svg>
\ No newline at end of file