adaf9c2b74
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 1370019@bnt-lap001 Assistant-Session: d462dd63-16de-4189-ae70-b9cd6566bf87
61 lines
2.3 KiB
YAML
61 lines
2.3 KiB
YAML
kind: substrate-reef
|
|
reef_id: reef-railiance
|
|
repo: reef-railiance
|
|
ownership_repo: railiance-infra
|
|
substrate_kind: server-group
|
|
lifecycle_state: active
|
|
criticality: high
|
|
primary_rail: rail-kubernetes
|
|
hosted_rails:
|
|
- rail-kubernetes
|
|
- rail-knative
|
|
current_members:
|
|
- Railiance01
|
|
source_documents:
|
|
- repo: railiance-master
|
|
path: docs/reef-first-wave-rollout.md
|
|
- repo: railiance-master
|
|
path: docs/reef-substrate-model.md
|
|
- repo: railiance-infra
|
|
path: docs/reef-first-wave-source-map.md
|
|
compatibility_notes:
|
|
- Railiance01 is the first current member of the grouped home reef.
|
|
- Additional Railiance home servers should join this reef when they share the same substrate boundary.
|
|
- Split the grouped reef later if member lifecycle, access, or workload-placement policy diverges.
|
|
exposure:
|
|
posture: public
|
|
grants:
|
|
- port: 80
|
|
reason: Public HTTP ingress, ACME challenges, and HTTPS redirects for approved application hostnames
|
|
approved_on: "2026-08-15"
|
|
residual_risk_owner: railiance-infra
|
|
- port: 443
|
|
reason: Public TLS ingress for approved application hostnames
|
|
approved_on: "2026-08-15"
|
|
residual_risk_owner: railiance-infra
|
|
- port: 2224
|
|
reason: HostEurope Nydus provider agent required by the platform
|
|
approved_on: "2026-08-15"
|
|
residual_risk_owner: railiance-infra
|
|
- hostname: forgejo.coulomb.social
|
|
reason: Canonical git forge, OCI registry, and npm registry for the estate
|
|
approved_on: "2026-08-15"
|
|
residual_risk_owner: railiance-infra
|
|
- hostname: app.coulomb.social
|
|
reason: Public Coulomb Social web application on Railiance01
|
|
approved_on: "2026-08-15"
|
|
residual_risk_owner: railiance-apps
|
|
- hostname: reuse.coulomb.social
|
|
reason: Public federation and reuse landing surface on Railiance01
|
|
approved_on: "2026-08-15"
|
|
residual_risk_owner: railiance-apps
|
|
- hostname: vergabe-teilnahme.coulomb.social
|
|
reason: Invited Vergabe pilot with isolated demo-company path; user selected hostname
|
|
and added DNS
|
|
approved_on: '2026-09-12'
|
|
residual_risk_owner: railiance-apps
|
|
- hostname: users.coulomb.social
|
|
reason: Canonical User Engine tenant administration and onboarding portal; user
|
|
added DNS
|
|
approved_on: '2026-09-12'
|
|
residual_risk_owner: rapp-user-engine
|