justin/new-site
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update docs + add 3 SVG flowcharts

Browse source 
New diagrams:
- business-flow.svg: acquisition → check → order → filing → delivery
- technical-architecture.svg: full Docker stack, data tier, external services
- order-flow.svg: detailed worker pipeline with eSign gate and handler map

Updated docs:
- infrastructure.md: DocServer, email servers, backup server sections
- architecture.md: linked to new SVGs, updated date

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
justin 2026-05-07 09:17:36 -05:00
parent c127cdd908
commit 9c1b1387cb
5 changed files with 619 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

29
docs/infrastructure.md
View file

@ -1,6 +1,6 @@
# Infrastructure
**Last updated:** 2026-04-06
**Last updated:** 2026-05-07
## Production Server — Linux VM
@ -14,7 +14,7 @@
| Disk | 232 GB SSD |
| Network | Bridged, static IP |
## Proxmox VM — Windows (DocServer) — NOT YET PROVISIONED
## Windows DocServer VM
| Resource | Spec |
|----------|------|
@ -22,10 +22,29 @@
| vCPU | 2 |
| RAM | 4 GB |
| Disk | 40 GB SSD |
| Software | Microsoft Office 2021 |
| Service | DocServer on port 5050 |
| Software | Microsoft Office 2021 + Python 3.12 |
| Service | docserver_worker.py (polls MinIO, converts via Word COM) |
The Windows VM will provide high-fidelity DOCX-to-PDF conversion via Office 2021. DocServer exposes a REST API on port 5050. LibreOffice on the Linux VM serves as a fallback.
Pixel-perfect DOCX→PDF conversion via Microsoft Word. Worker polls MinIO `to-convert/` bucket, converts via Word COM, uploads PDF to `converted/`. No HTTP server needed — MinIO is the transport. Requires RDP login after reboot (Word COM needs interactive session). LibreOffice headless is the automatic fallback.
## Email Servers
| IP | Hostname | PTR | Role |
|----|----------|-----|------|
| 207.174.124.15 | co.carrierone.com | co.carrierone.com | Carbonio — transactional email, mailboxes |
| 207.174.124.22 | cp.carrierone.com | cp.carrierone.com | HestiaCP — DNS, Exim4 MTA, .ca domain provisioning |
| 207.174.124.71 | perfwest.performancewest.net | perfwest.performancewest.net | Postfix + OpenDKIM — Listmonk campaign sending |
All three have DKIM (2048-bit RSA), SPF (`-all` hard fail), and DMARC (`p=quarantine`).
## Backup Server
| Resource | Spec |
|----------|------|
| IP | 207.174.124.50 |
| Type | LXC container |
| Role | Off-site backup destination |
| Schedule | PG 4x/day, MariaDB daily, MinIO daily, Forgejo daily |
## External Infrastructure Dependencies