architecture.d2: - Split app into prod VPS (165.22.70.138) and homelab runner (192.168.0.109) - Add CrowdSec, Dozzle agent, pocket-tts (voice samples) - Valkey now shown as Asynq job queue in addition to presign cache - Add caddy-l4 Redis TCP proxy (:6380) to Caddy label - Add CI/CD node (Gitea Actions) with full job list incl. releases.json bake - Remove runner from prod app group (it runs on homelab only) - Watchtower: note runner is label-disabled on prod api-routing.d2: - Add /api/presign/* routes to backend (presign_be group) - Add /api/audio POST + status GET to both sk and be - Add /api/scrape/book and /api/scrape/book/range to scrape_sk - Catalogue: annotate Meilisearch vs legacy browse - Add Meilisearch filter/sort fields to storage node - Add Asynq queue note to Valkey storage node - Fix presign proxy: sk routes through be.presign_be, not directly to storage
209 lines
7.8 KiB
Plaintext
209 lines
7.8 KiB
Plaintext
direction: right
|
|
|
|
# ─── Legend ───────────────────────────────────────────────────────────────────
|
|
|
|
legend: Legend {
|
|
style.fill: "#fafafa"
|
|
style.stroke: "#d4d4d8"
|
|
|
|
pub: public {
|
|
style.fill: "#f0fdf4"
|
|
style.font-color: "#15803d"
|
|
style.stroke: "#86efac"
|
|
}
|
|
user: user auth {
|
|
style.fill: "#eff6ff"
|
|
style.font-color: "#1d4ed8"
|
|
style.stroke: "#93c5fd"
|
|
}
|
|
adm: admin only {
|
|
style.fill: "#fff7ed"
|
|
style.font-color: "#c2410c"
|
|
style.stroke: "#fdba74"
|
|
}
|
|
}
|
|
|
|
# ─── Client ───────────────────────────────────────────────────────────────────
|
|
|
|
client: Browser / iOS App {
|
|
shape: person
|
|
style.fill: "#fff9e6"
|
|
}
|
|
|
|
# ─── Caddy ────────────────────────────────────────────────────────────────────
|
|
|
|
caddy: Caddy :443 {
|
|
shape: rectangle
|
|
style.fill: "#f1f5f9"
|
|
label: "Caddy :443\ncustom build · caddy-l4 · caddy-ratelimit\nCrowdSec bouncer · security headers\nrate limiting · static error pages\nRedis TCP proxy :6380"
|
|
}
|
|
|
|
# ─── SvelteKit UI ─────────────────────────────────────────────────────────────
|
|
# All routes here pass through SvelteKit — auth is enforced server-side.
|
|
|
|
sk: SvelteKit UI :3000 {
|
|
style.fill: "#fef3c7"
|
|
|
|
auth: Auth {
|
|
style.fill: "#fde68a"
|
|
style.stroke: "#f59e0b"
|
|
label: "POST /api/auth/login\nPOST /api/auth/register\nPOST /api/auth/change-password\nGET /api/auth/session"
|
|
}
|
|
|
|
catalogue_sk: Catalogue {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "GET /api/catalogue-page (infinite scroll)\nGET /api/search"
|
|
}
|
|
|
|
book_sk: Book {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "GET /api/book/{slug}\nGET /api/chapter/{slug}/{n}\nGET /api/chapter-text-preview/{slug}/{n}"
|
|
}
|
|
|
|
scrape_sk: Scrape (admin) {
|
|
style.fill: "#fff7ed"
|
|
style.stroke: "#fdba74"
|
|
label: "GET /api/scrape/status\nGET /api/scrape/tasks\nPOST /api/scrape\nPOST /api/scrape/book\nPOST /api/scrape/book/range\nPOST /api/scrape/cancel/{id}"
|
|
}
|
|
|
|
audio_sk: Audio {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "POST /api/audio/{slug}/{n}\nGET /api/audio/status/{slug}/{n}\nGET /api/voices"
|
|
}
|
|
|
|
presign_sk: Presigned URLs (public) {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "GET /api/presign/chapter/{slug}/{n}\nGET /api/presign/audio/{slug}/{n}\nGET /api/presign/voice-sample/{voice}"
|
|
}
|
|
|
|
presign_user: Presigned URLs (user) {
|
|
style.fill: "#eff6ff"
|
|
style.stroke: "#93c5fd"
|
|
label: "GET /api/presign/avatar-upload/{userId}\nGET /api/presign/avatar/{userId}"
|
|
}
|
|
|
|
progress_sk: Progress {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "GET /api/progress\nPOST /api/progress/{slug}\nDELETE /api/progress/{slug}"
|
|
}
|
|
|
|
library_sk: Library {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "GET /api/library\nPOST /api/library/{slug}\nDELETE /api/library/{slug}"
|
|
}
|
|
|
|
comments_sk: Comments {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "GET /api/comments/{slug}\nPOST /api/comments/{slug}"
|
|
}
|
|
}
|
|
|
|
# ─── Go Backend ───────────────────────────────────────────────────────────────
|
|
# Caddy proxies these paths directly — bypasses SvelteKit entirely.
|
|
|
|
be: Backend API :8080 {
|
|
style.fill: "#eef3ff"
|
|
|
|
health_be: Health / Version {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "GET /health\nGET /api/version"
|
|
}
|
|
|
|
scrape_be: Scrape admin (direct) {
|
|
style.fill: "#fff7ed"
|
|
style.stroke: "#fdba74"
|
|
label: "POST /scrape\nPOST /scrape/book\nPOST /scrape/book/range"
|
|
}
|
|
|
|
catalogue_be: Catalogue {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "GET /api/catalogue (Meilisearch)\nGET /api/browse (legacy MinIO cache)\nGET /api/ranking\nGET /api/cover/{domain}/{slug}"
|
|
}
|
|
|
|
book_be: Book / Chapter {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "GET /api/book-preview/{slug}\nGET /api/chapter-text/{slug}/{n}\nGET /api/chapter-markdown/{slug}/{n}\nPOST /api/reindex/{slug} ⚠ admin"
|
|
}
|
|
|
|
audio_be: Audio {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "POST /api/audio/{slug}/{n}\nGET /api/audio/status/{slug}/{n}\nGET /api/audio-proxy/{slug}/{n}\nGET /api/voices"
|
|
}
|
|
|
|
presign_be: Presigned URLs {
|
|
style.fill: "#f0fdf4"
|
|
style.stroke: "#86efac"
|
|
label: "GET /api/presign/chapter/{slug}/{n}\nGET /api/presign/audio/{slug}/{n}\nGET /api/presign/voice-sample/{voice}\nGET /api/presign/avatar-upload/{userId}\nGET /api/presign/avatar/{userId}"
|
|
}
|
|
}
|
|
|
|
# ─── Storage ──────────────────────────────────────────────────────────────────
|
|
|
|
storage: Storage {
|
|
style.fill: "#eaf7ea"
|
|
|
|
pb: PocketBase :8090 {
|
|
shape: cylinder
|
|
label: "auth · books · progress\ncomments · library\nscrape_jobs · audio_cache\nranking"
|
|
}
|
|
mn: MinIO :9000 {
|
|
shape: cylinder
|
|
label: "chapters · audio\navatars · catalogue (browse)"
|
|
}
|
|
ms: Meilisearch :7700 {
|
|
shape: cylinder
|
|
label: "index: books\nfilterable: status · genres\nsortable: rank · rating\n total_chapters · meta_updated"
|
|
}
|
|
vk: Valkey :6379 {
|
|
shape: cylinder
|
|
label: "presign URL cache (TTL ~55 min)\nAsynq job queue (runner)"
|
|
}
|
|
}
|
|
|
|
# ─── Caddy routing ────────────────────────────────────────────────────────────
|
|
|
|
client -> caddy: HTTPS :443
|
|
|
|
caddy -> sk: "/* (catch-all)\n→ SvelteKit enforces auth"
|
|
caddy -> be: "/health /scrape*\n/api/browse /api/catalogue /api/ranking\n/api/version /api/book-preview/*\n/api/chapter-text/* /api/chapter-markdown/*\n/api/reindex/* /api/cover/*\n/api/audio* /api/voices /api/presign/*"
|
|
caddy -> storage.mn: "/avatars/* /audio/* /chapters/*\n(presigned MinIO GETs)"
|
|
|
|
# ─── SvelteKit → Backend (server-side proxy) ──────────────────────────────────
|
|
|
|
sk.catalogue_sk -> be.catalogue_be: internal proxy
|
|
sk.book_sk -> be.book_be: internal proxy
|
|
sk.audio_sk -> be.audio_be: internal proxy
|
|
sk.presign_sk -> be.presign_be: internal proxy
|
|
sk.presign_user -> be.presign_be: internal proxy
|
|
|
|
# ─── SvelteKit → Storage (direct) ────────────────────────────────────────────
|
|
|
|
sk.auth -> storage.pb: sessions / users
|
|
sk.scrape_sk -> storage.pb: scrape job records
|
|
sk.progress_sk -> storage.pb
|
|
sk.library_sk -> storage.pb
|
|
sk.comments_sk -> storage.pb
|
|
|
|
# ─── Backend → Storage ────────────────────────────────────────────────────────
|
|
|
|
be.catalogue_be -> storage.ms: full-text search + facets
|
|
be.catalogue_be -> storage.pb: ranking records
|
|
be.catalogue_be -> storage.mn: cover presign
|
|
be.book_be -> storage.mn: chapter objects
|
|
be.book_be -> storage.pb: book metadata
|
|
be.audio_be -> storage.mn: audio presign
|
|
be.audio_be -> storage.vk: presign cache
|
|
be.presign_be -> storage.vk: check / set presign cache
|
|
be.presign_be -> storage.mn: generate presigned URL
|