Skip to content
Wetopi Knowledge
Edge security — índice
Initializing search
wetopi-platform/wetopi-knowledge
Home
Platform
Infrastructure
Operations
Architecture
Agents
Decisions
Conceptos
Investigaciones
Records
Schema
None
Wetopi Knowledge
wetopi-platform/wetopi-knowledge
Home
Platform
Platform
Fichas de servicios
Knowledge Plane
RKE2
RKE2
RKE2 cluster (SVC-RKE2)
Cilium
Cilium
Cilium network (SVC-CILIUM)
Traefik
Traefik
Traefik edge (SVC-TRAEFIK-EDGE)
Wildcard dev *.d.wetopi.com (SVC-DEV-WILDCARD)
Argo CD (GitOps)
Argo CD (GitOps)
Argo CD (SVC-ARGOCD)
GitOps operation
Edge security (capas y operación)
Edge security (capas y operación)
Edge security & networking (SVC-EDGE-SECURITY)
Infisical (Vault)
Infisical (Vault)
Vault (SVC-VAULT)
Vault system
LiteLLM
LiteLLM
LiteLLM proxy (SVC-LITELLM)
Hindsight
Hindsight
Hindsight (memory.wetopi.net)
Memory plane
Observability
Observability
Observability suite (SVC-OBSERVABILITY)
BookStack (legacy readonly)
Registry (Zot, activo)
Registry (Zot, activo)
Zot registry OCI (SVC-REGISTRY)
GH Runner + buildkitd (SVC-GH-RUNNER)
Docs Runtime
Docs Runtime
Docs runtime (SVC-DOCS-RUNTIME)
Docs Site (legacy)
Docs Site (legacy)
Docs site (SVC-DOCS-SITE)
Edge
Edge
WAN edge v1 (SVC-EDGE)
Ceph CSI
Ceph CSI
Ceph CSI RBD (SVC-CEPH-CSI)
Cert Manager
Cert Manager
cert-manager (SVC-CERT-MANAGER)
Topología general
Infrastructure
Infrastructure
IaC Providers
OVH
OVH
OVH y red física
Physical Nodes
Physical Nodes
Nodos (inventario)
Proxmox
Proxmox
Proxmox cluster wetopi7
Ceph
Ceph
Ceph storage
Networking
Networking
Networking ficha
Operations
Operations
Onboarding
Runbooks
Runbooks
RKE2 apply (fases 0-G)
OpenTofu state loss recovery
Runbook: Observability apply (RUN-OBS-APPLY)
Onboarding nueva app por GitOps (RUN-NEW-APP-GITOPS)
Procedures
Procedures
PROC-DOCOPS-CLOSING-CHECKLIST
Objectives
WPDoctor (OBJ-WPDOCTOR-001)
Subdominios dev *.d.wetopi.com (OBJ-EDGE-DWETOPI-001)
app-manager en d (OBJ-APPMANAGER-WETOPI3-001)
Architecture
Architecture
Design
Design
Master architecture plan
Network & hosting architecture
Memory plane v1.1
AI-first harness plan
Bootstrap plan
Decisions log
Knowledge Plane pack v0.1
Knowledge Plane memoria técnica
Knowledge Plane architecture pack
Knowledge & Documentation Plane v0
WPDoctor ADR-0001 (architecture v1.0)
WPDoctor memoria técnica + pack
Security architecture ADR pack
Agents
Agents
Harness v3.1 governance
Hermes instances agents01
Hermes fleet
OBJ-HARNESS-V31-001
Decisions
Decisions
ADR-0001 — RKE2 node LAN
ADR-0002 — Bootstrap sizing
ADR-0003 — OpenTofu + Ansible
ADR-0004 — RKE2 API endpoint (VIP)
ADR-0005 — Cilium first addon
ADR-0006 — Edge v1 WAN exception
ADR-0007 — Ceph storage-native
ADR-0008 — Harness v3.1 governance
ADR-0009 — Secrets vault harness
ADR-0010 — Docs runtime channel
ADR-0011 — Docs webhook failsafe
ADR-0012 — Docs image channel retirement
ADR-0013 — Docs status liveness
ADR-0014 — Edge source-IP allowlist
ADR-0015 — Memory intent capture
ADR-0016 — Design IDs (no DES prefix)
ADR-0017 — WPDoctor Memoria Ejecutiva v1.0
ADR-0018 — WPDoctor durable orchestration + Activity + WebUI
ADR-0019 — Edge traffic & security architecture
ADR-0020 — Wildcard TLS *.d.wetopi.com
ADR-0021 — app-manager en d: adapter k8s nativo
Conceptos
Conceptos
CON-CROWDSEC — CrowdSec (Q3 del ADR-0019)
Investigaciones
Investigaciones
INV-001 — CrowdSec capa reactiva (Q3 ADR-0019)
Records
Records
Platform
Schema
Schema
document-types.md
frontmatter.md
naming.md
relations.md
None
Edge security
¶
SVC-EDGE-SECURITY — capas, componentes y operación
Back to top