From e1227844c10b9de24859d3f29db35085b7e423bc Mon Sep 17 00:00:00 2001 From: thesabear Date: Sun, 23 Aug 2026 10:46:23 +0300 Subject: [PATCH] README: replace Mermaid diagram with real drawio SVG export No more Mermaid, per standing rule - the architecture diagram is now a real image (assets/architecture-overview.svg), built and exported from the Nextcloud Diagramming app, fetched via WebDAV and validated as well-formed XML before committing. Ends the rendering-gap chase entirely since there's no live renderer involved anymore, just a static image. --- README.md | 41 +------------------------------- assets/architecture-overview.svg | 4 ++++ 2 files changed, 5 insertions(+), 40 deletions(-) create mode 100644 assets/architecture-overview.svg diff --git a/README.md b/README.md index 9b7b18f..a80a4ba 100644 --- a/README.md +++ b/README.md @@ -76,46 +76,7 @@ This repo is a sanitized showcase of the systems behind that platform — the ac ## Architecture at a glance -```mermaid -flowchart LR - Internet(["Internet"]) --> Edge["Edge Firewall"] - Edge --> LAN["LAN"] - - LAN --> DNS["Internal DNS
two zones"] - LAN --> Vault["Vault
PKI + secrets"] - DNS --> Vault - - Vault --> Apps["App Host
41 stacks"] - Vault --> Automation["Automation VM
Git + orchestration"] - LAN --> FileServer["File Server"] - DNS --> FileServer - LAN --> Automation - - Apps --> InternalProxy["Internal Proxy Zone"] - Apps --> SSO["SSO"] - - Vault --> EdgeProxy["User-Facing Proxy
mTLS"] - DNS --> EdgeProxy - Apps -.proxied.-> EdgeProxy - SSO -.auth.-> EdgeProxy - - Apps -.-> Monitoring["Monitoring"] - Automation -.-> Monitoring - FileServer -.-> Monitoring - EdgeProxy -.-> Monitoring - - Apps -.-> SecMon["Security Monitoring"] - Automation -.-> SecMon - FileServer -.-> SecMon - EdgeProxy -.-> SecMon - - classDef edge fill:#f8cecc,stroke:#b85450,color:#333 - classDef core fill:#dae8fc,stroke:#6c8ebf,color:#333 - classDef obs fill:#fff2cc,stroke:#d6b656,color:#333 - class Internet,Edge edge - class LAN,DNS,Vault,Apps,Automation,FileServer,InternalProxy,SSO,EdgeProxy core - class Monitoring,SecMon obs -``` +![Architecture Overview](assets/architecture-overview.svg) Solid arrows are real dependencies; dotted arrows are asynchronous telemetry reporting, not a blocking dependency. Full breakdown of all 8 traffic laws (ingress, east-west, secrets, DNS, observability, notifications, CI/CD, management) with the actual trust-boundary reasoning: [docs/architecture-overview.md](docs/architecture-overview.md). ## Systems diff --git a/assets/architecture-overview.svg b/assets/architecture-overview.svg new file mode 100644 index 0000000..6bda5dc --- /dev/null +++ b/assets/architecture-overview.svg @@ -0,0 +1,4 @@ + + + +
Internet
Edge Firewall
LAN
Internal DNS
two zones
Vault
PKI + secrets
File Server
User-Facing Proxy
mTLS
Automation VM
Git + orchestration
App Host
41 stacks
Monitoring
Security Monitoring
Internal Proxy Zone
SSO
proxies
auth
\ No newline at end of file