Infrastructure
- OS: FreeBSD
- SSO (Authentication & Authorization): Ory (Kratos, Hydra, Keto, Oathkeeper) and Styx
- CA: step-ca
- Monitoring: Thanos, Prometheus
- Logging: Loki, Promtail
- DNS: PowerDNS, Unbound, DNSDist, PowerDNS-Admin
- Frontend: nginx + varnish + haproxy
- Many jails!
- Backups to S3 with restic
- Shell scripts & erlang/rust for admin!
Jails
- Networking using
netgraph
(ng_bridge
,ng_eiface
)