From 3ccf5cc2b1ec14ecb21dc5a8fc2059172aed46be Mon Sep 17 00:00:00 2001 From: thesabear Date: Wed, 26 Aug 2026 09:56:15 +0300 Subject: [PATCH] assets: fix floating label background color in README diagrams Edge-label captions were using an ambient light-dark() background that didn't match Gitea's actual dark theme. Fixed to a plain rgb(13,17,23), matching the corrected CLAUDE.md diagram convention. --- assets/architecture-overview.svg | 2 +- assets/trust-boundaries-blast-radius.svg | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/assets/architecture-overview.svg b/assets/architecture-overview.svg index 6bda5dc..188188c 100644 --- a/assets/architecture-overview.svg +++ b/assets/architecture-overview.svg @@ -1,4 +1,4 @@ -
Internet
Edge Firewall
LAN
Internal DNS
two zones
Vault
PKI + secrets
File Server
User-Facing Proxy
mTLS
Automation VM
Git + orchestration
App Host
41 stacks
Monitoring
Security Monitoring
Internal Proxy Zone
SSO
proxies
auth
 \ No newline at end of file +
Internet
Edge Firewall
LAN
Internal DNS
two zones
Vault
PKI + secrets
File Server
User-Facing Proxy
mTLS
Automation VM
Git + orchestration
App Host
41 stacks
Monitoring
Security Monitoring
Internal Proxy Zone
SSO
proxies
auth
 \ No newline at end of file diff --git a/assets/trust-boundaries-blast-radius.svg b/assets/trust-boundaries-blast-radius.svg index e0386eb..9f33787 100644 --- a/assets/trust-boundaries-blast-radius.svg +++ b/assets/trust-boundaries-blast-radius.svg @@ -1,4 +1,4 @@ -
pfSense
Edge Firewall + Public HAProxy
Proxmox Node A
day-to-day applications
Internal Caddy
app-to-app zone
Docker Apps
LXC host, most of the fleet's stacks
Proxmox Node B
trust & sensitive infrastructure
Caddy VM
browser zone, mTLS
Vault + Technitium DNS
trust backbone
public traffic (direct, bypasses everything else)
app-to-app traffic
browser traffic
issues certs
issues certs
 \ No newline at end of file +
pfSense
Edge Firewall + Public HAProxy
Proxmox Node A
day-to-day applications
Internal Caddy
app-to-app zone
Docker Apps
LXC host, most of the fleet's stacks
Proxmox Node B
trust & sensitive infrastructure
Caddy VM
browser zone, mTLS
Vault + Technitium DNS
trust backbone
public traffic (direct, bypasses everything else)
app-to-app traffic
browser traffic
issues certs
issues certs
 \ No newline at end of file