| Feld | Wert |
|---|---|
| Site | RZ (Hetzner ESXi) |
| Hypervisor host | ESXi-RZ |
| Rolle | Service-Tier PROD für RZ — Identity + Apps + Wiki + LDAP-Outpost |
| OS | Debian 12.x |
| Primary IP | 10.200.0.101 (VLAN 200 SVC) |
| DNS-intern | vm-rz-svc-prod-01.rz.blackreset.internal |
| Compose-Root | /opt/<service>/{compose.yml,.env,data/} (siehe memory/policy_compose_layout) |
| Last-changed | 2026-05-04 |
| Stack | Public-URL | DB-Backend | Notes |
|---|---|---|---|
| Authentik | auth.blackreset.com | vm-rz-db-01 PG authentik |
OIDC + LDAP-Outpost (389/636) — sole IDP. Siehe services/authentik. |
| Wiki.js | wiki.blackreset.com | vm-rz-db-01 PG wikijs |
OIDC via Authentik. Siehe services/wiki. |
| GitLab CE 18.11.2 | gitlab.blackreset.com | vm-rz-db-01 PG gitlabhq_production |
OIDC + LDAP. Siehe services/gitlab (geplant). |
| Nextcloud 33.0.x | nextcloud.blackreset.com | vm-rz-db-01 PG nextcloud |
OIDC + LDAP. Siehe services/nextcloud (geplant). |
| pgAdmin | pgadmin.blackreset.com | self (SQLite) | OIDC grp-pgadmin-admin. Port 8091. |
| Vaultwarden | (geplant) vault.blackreset.com | vm-rz-db-01 PG vaultwarden |
Geplant. |
| portainer-agent | (LAN) | — | Mgmt-Endpoint für home-hosted Portainer. |
policies/acme-challenge)/opt/authentik/, /opt/wiki/, /opt/gitlab/, /opt/nextcloud/, /opt/pgadmin/data/ je Service (Compose-Layout-Policy).env mode 0600 — keine Werte in Wiki-Pagesvm-hm-backup-01, GFS)./opt/<svc>/data/) sind im VM-Image enthalten.