From 6fccce3bddc1d2e742221cdf802f24e5aaeb4696 Mon Sep 17 00:00:00 2001 From: thesabear Date: Sun, 23 Aug 2026 01:07:42 +0300 Subject: [PATCH] updates --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 84ff4c5..9b7b18f 100644 --- a/README.md +++ b/README.md @@ -118,7 +118,7 @@ flowchart LR ``` Solid arrows are real dependencies; dotted arrows are asynchronous telemetry reporting, not a blocking dependency. Full breakdown of all 8 traffic laws (ingress, east-west, secrets, DNS, observability, notifications, CI/CD, management) with the actual trust-boundary reasoning: [docs/architecture-overview.md](docs/architecture-overview.md). -## **## Systems** +## Systems ### 🔐 Secrets & PKI A self-hosted Vault cluster is both the certificate authority and the secret store for every host in the fleet — every TLS certificate, every database password, every API key traces back to this one system. Nothing reaches Vault directly; a local agent on each host authenticates itself and renders what that host needs to disk. Replaced an earlier setup where secrets sat in plaintext inside git.