diff --git a/README.md b/README.md index 9b7b18f..a80a4ba 100644 --- a/README.md +++ b/README.md @@ -76,46 +76,7 @@ This repo is a sanitized showcase of the systems behind that platform — the ac ## Architecture at a glance -```mermaid -flowchart LR - Internet(["Internet"]) --> Edge["Edge Firewall"] - Edge --> LAN["LAN"] - - LAN --> DNS["Internal DNS
two zones"] - LAN --> Vault["Vault
PKI + secrets"] - DNS --> Vault - - Vault --> Apps["App Host
41 stacks"] - Vault --> Automation["Automation VM
Git + orchestration"] - LAN --> FileServer["File Server"] - DNS --> FileServer - LAN --> Automation - - Apps --> InternalProxy["Internal Proxy Zone"] - Apps --> SSO["SSO"] - - Vault --> EdgeProxy["User-Facing Proxy
mTLS"] - DNS --> EdgeProxy - Apps -.proxied.-> EdgeProxy - SSO -.auth.-> EdgeProxy - - Apps -.-> Monitoring["Monitoring"] - Automation -.-> Monitoring - FileServer -.-> Monitoring - EdgeProxy -.-> Monitoring - - Apps -.-> SecMon["Security Monitoring"] - Automation -.-> SecMon - FileServer -.-> SecMon - EdgeProxy -.-> SecMon - - classDef edge fill:#f8cecc,stroke:#b85450,color:#333 - classDef core fill:#dae8fc,stroke:#6c8ebf,color:#333 - classDef obs fill:#fff2cc,stroke:#d6b656,color:#333 - class Internet,Edge edge - class LAN,DNS,Vault,Apps,Automation,FileServer,InternalProxy,SSO,EdgeProxy core - class Monitoring,SecMon obs -``` +![Architecture Overview](assets/architecture-overview.svg) Solid arrows are real dependencies; dotted arrows are asynchronous telemetry reporting, not a blocking dependency. Full breakdown of all 8 traffic laws (ingress, east-west, secrets, DNS, observability, notifications, CI/CD, management) with the actual trust-boundary reasoning: [docs/architecture-overview.md](docs/architecture-overview.md). ## Systems diff --git a/assets/architecture-overview.svg b/assets/architecture-overview.svg new file mode 100644 index 0000000..6bda5dc --- /dev/null +++ b/assets/architecture-overview.svg @@ -0,0 +1,4 @@ + + + +
Internet
Edge Firewall
LAN
Internal DNS
two zones
Vault
PKI + secrets
File Server
User-Facing Proxy
mTLS
Automation VM
Git + orchestration
App Host
41 stacks
Monitoring
Security Monitoring
Internal Proxy Zone
SSO
proxies
auth
\ No newline at end of file