automation-bot 6b3bea7f6f docs: fix architecture-overview.md drift (WAN rule count, LAN enforcement mechanism) ...

Live-verification found two real inaccuracies: WAN now passes 4 things
inbound (NetBird's STUN forward was added, undocumented), and the "third
fix" LAN-to-LAN narrative credited pfSense's ruleset when the actual
enforcement for host-to-host traffic is each host's own firewalld (pfSense
never sees same-subnet traffic on this flat LAN). Refreshed the WAN rules
screenshot and reworded the boundary table + narrative to match. Also
cleaned up the "Other Six Traffic Laws" table formatting per feedback.

2026-09-18 11:48:37 +03:00

..

architecture-overview-trust-depth.svg

docs: rename diagram assets to doc-prefixed scheme, update exports

2026-08-27 23:48:41 +03:00

architecture-overview.svg

assets: fix edge-label white-line rendering artifact in remaining 7 diagrams

2026-08-29 19:08:50 +03:00

cron-scheduler-heatmap.png

docs: replace terminal output with real heatmap screenshots in cron-scheduler.md

2026-08-28 00:52:50 +03:00

cron-scheduler-no-fixed-time.png

docs: replace terminal output with real heatmap screenshots in cron-scheduler.md

2026-08-28 00:52:50 +03:00

cron-scheduler-table.png

cron-scheduler: add the raw NocoDB table screenshot

2026-08-28 20:47:50 +03:00

dashy-soc-board-acknowledge.svg

docs: rewrite dashy-soc-board.md with real verified evidence

2026-08-28 09:58:49 +03:00

dashy-soc-board-vault-panel.png

docs: refresh Dashy Vault panel screenshot post-root-token-retirement

2026-09-05 13:27:31 +03:00

dashy-soc-board.png

docs: add real SOC Board screenshot and Copy Debug Prompt finding

2026-08-28 10:13:39 +03:00

disaster-recovery-layers.svg

docs: rewrite disaster-recovery.md following the full standing process in order

2026-08-28 11:06:40 +03:00

disaster-recovery-upgrades.svg

docs: rewrite disaster-recovery.md following the full standing process in order

2026-08-28 11:06:40 +03:00

dns-naming-reverse-zone.png

dns-naming: fix fabricated command syntax, add real reverse-zone screenshot

2026-08-28 21:29:23 +03:00

dns-naming-zones.svg

docs: rewrite dns-naming.md with real evidence and diagram

2026-08-28 09:08:06 +03:00

firewall-and-network-docker-bypass.svg

assets: fix edge-label white-line rendering artifact in remaining 7 diagrams

2026-08-29 19:08:50 +03:00

gitea-collaborators-automation-bot.png

sso-and-identity: verify against live-checked KB, expand real depth, add evidence

2026-08-26 11:54:29 +03:00

gitea-deploy-keys.png

sso-and-identity: verify against live-checked KB, expand real depth, add evidence

2026-08-26 11:54:29 +03:00

homelab-inventory-dashy-page.png

docs: add homelab-inventory — the machine-derived fleet inventory layer

2026-09-07 08:22:29 +03:00

homelab-inventory-nocodb-hardware.png

docs: add homelab-inventory — the machine-derived fleet inventory layer

2026-09-07 08:22:29 +03:00

homelab-inventory-nocodb-services.png

docs: add homelab-inventory — the machine-derived fleet inventory layer

2026-09-07 08:22:29 +03:00

homelab-inventory-nocodb-vms.png

docs: add homelab-inventory — the machine-derived fleet inventory layer

2026-09-07 08:22:29 +03:00

homelab-inventory-pipeline.svg

docs: add homelab-inventory — the machine-derived fleet inventory layer

2026-09-07 08:22:29 +03:00

iac-pipeline-ansible-stages.svg

iac-pipeline.md: full 7-step audit

2026-08-29 08:21:38 +03:00

iac-pipeline-tools-flow.svg

assets: fix edge-label white-line rendering artifact in remaining 7 diagrams

2026-08-29 19:08:50 +03:00

netbird-zero-trust-edge-path.svg

netbird-zero-trust.md: new doc for the zero-trust mesh overlay

2026-09-01 00:21:06 +03:00

netbird-zero-trust-mesh-topology.svg

netbird-zero-trust.md: new doc for the zero-trust mesh overlay

2026-09-01 00:21:06 +03:00

netbird-zero-trust-peers.png

netbird-zero-trust.md: new doc for the zero-trust mesh overlay

2026-09-01 00:21:06 +03:00

netbird-zero-trust-policies.png

netbird-zero-trust.md: new doc for the zero-trust mesh overlay

2026-09-01 00:21:06 +03:00

notifications-fan-in-fan-out.svg

notifications.md: full 7-step audit

2026-08-29 07:49:33 +03:00

notifications-mosquitto-logs.png

notifications.md: full 7-step audit

2026-08-29 07:49:33 +03:00

notifications-node-red-flow.png

notifications.md: full 7-step audit

2026-08-29 07:49:33 +03:00

observability-log-fanout.svg

observability.md: full 7-step audit, first pass this session

2026-08-28 23:44:06 +03:00

observability-logs-detail.png

observability.md: full 7-step audit, first pass this session

2026-08-28 23:44:06 +03:00

observability-logs-overview.png

observability.md: full 7-step audit, first pass this session

2026-08-28 23:44:06 +03:00

observability-metrics-dashboard.png

observability.md: full 7-step audit, first pass this session

2026-08-28 23:44:06 +03:00

observability-pipeline.svg

assets: fix edge-label white-line rendering artifact in remaining 7 diagrams

2026-08-29 19:08:50 +03:00

orchestration-app-update-topology.png

orchestration: add real evidence for hyper2 special case, self-update timer, and 2 real screenshots

2026-08-28 22:08:23 +03:00

orchestration-flow-list.png

orchestration: refresh for the public-docs-drift flow (14→15)

2026-09-07 09:02:14 +03:00

orchestration-flow-patterns.svg

orchestration: refresh for the public-docs-drift flow (14→15)

2026-09-07 09:02:14 +03:00

orchestration-kestra-kv-store.png

orchestration.md: fix the Kestra identity claim, add live evidence

2026-09-05 08:31:54 +03:00

pfsense-aliases-ip.png

architecture-overview: verify against Trilium, fix inaccurate dependency graph, add real evidence

2026-08-25 21:58:42 +03:00

pfsense-aliases-ports.png

architecture-overview: verify against Trilium, fix inaccurate dependency graph, add real evidence

2026-08-25 21:58:42 +03:00

pfsense-rules-lan-anti-lockout.png

architecture-overview: verify against Trilium, fix inaccurate dependency graph, add real evidence

2026-08-25 21:58:42 +03:00

pfsense-rules-lan-catchall-deny.png

architecture-overview: verify against Trilium, fix inaccurate dependency graph, add real evidence

2026-08-25 21:58:42 +03:00

pfsense-rules-lan-core-services.png

architecture-overview: verify against Trilium, fix inaccurate dependency graph, add real evidence

2026-08-25 21:58:42 +03:00

pfsense-rules-lan-observability.png

architecture-overview: verify against Trilium, fix inaccurate dependency graph, add real evidence

2026-08-25 21:58:42 +03:00

pfsense-rules-lan-ssh-fanout.png

architecture-overview: verify against Trilium, fix inaccurate dependency graph, add real evidence

2026-08-25 21:58:42 +03:00

pfsense-rules-wan.png

docs: fix architecture-overview.md drift (WAN rule count, LAN enforcement mechanism)

2026-09-18 11:48:37 +03:00

readme-trust-boundaries-blast-radius.svg

assets: fix edge-label white-line rendering artifact in remaining 7 diagrams

2026-08-29 19:08:50 +03:00

readme-zero-trust-model.svg

README.md: use a dedicated zero-trust diagram, stop reusing the doc's

2026-09-01 00:57:20 +03:00

registry-and-build-cheap-check.svg

docs: rewrite registry-and-build.md with real evidence and diagram

2026-08-28 08:33:37 +03:00

registry-and-build-packages.png

docs: rewrite registry-and-build.md with real evidence and diagram

2026-08-28 08:33:37 +03:00

secret-distribution-flows.svg

docs: add the SSH Certificate Flow as its own contract, not folded into #1

2026-09-05 09:36:19 +03:00

secrets-and-pki-cert-rebuild-hook.png

secrets-and-pki: add real evidence for the asymmetric-trust and cert-renewal claims

2026-08-28 21:48:09 +03:00

secrets-and-pki-lifecycle.svg

assets: fix edge-label white-line rendering artifact in remaining 7 diagrams

2026-08-29 19:08:50 +03:00

security-monitoring-alert-flow.svg

docs: update security-monitoring alert-flow diagram

2026-08-28 08:05:07 +03:00

security-monitoring-compliance-gate.svg

docs: rewrite security-monitoring.md with real evidence and diagrams

2026-08-28 08:01:04 +03:00

security-monitoring-sca-dashboard.png

security-monitoring: add real evidence for the queue-overflow fix and SCA score

2026-08-28 21:56:10 +03:00

sso-and-identity-oidc-cross-zone-redirect.svg

docs: sanitize real domain names out of OIDC diagram

2026-08-28 00:21:08 +03:00

vault-acl-policies.png

docs: refresh ACL policies screenshot with the vault-provisioner policy

2026-09-05 12:49:48 +03:00

vault-agent-reload.png

secret-distribution: verify against live-checked KB, fix diagram, add real evidence

2026-08-26 01:23:22 +03:00

vault-audit-log-hashed.png

secrets-and-pki: add real Vault evidence, expand access model

2026-08-26 00:15:14 +03:00

vault-secrets-engines.png

docs: document the Vault SSH certificate authority in secrets-and-pki

2026-09-05 09:19:54 +03:00