Перейти к содержимому
Nawras Bukhari
Написать
Работы
InfrastructureПубличное

Infrastructure and mail systems

Infrastructure & DevOpsCybersecurityCloud Providers

Hosting, containers, mail, isolation, backup, monitoring

Infrastructure and reliability engineering

Контекст

Mail and sites were accumulated hosts. Failure was discovered by a user. Backup was a file on the same disk. Migration meant hope.

Граница системы

В системе

  • web hosting
  • mail (Mailcow)
  • Docker deployments
  • backup
  • restore tests
  • monitoring
  • migration

Вне системы

building the hosted applications themselves

Архитектура

Edge (Cloudflare/Nginx) in front of application containers and mail. Backups leave the machine. Monitoring is a separate channel from the thing it watches.

Production infrastructure for hosting and email: containers, dedicated servers, isolation between tenants, backup, migration, and monitoring.
  1. Cloudflare
  2. Nginx
  3. App containers
  4. Mailcow
  5. Storage
  6. Off-site backup
  7. Monitoring
  • Edge → compute → store
  • Monitoring is off the host
Опубликованная последовательность
  1. Cloudflare
  2. Nginx
  3. App containers
  4. Storage
  5. Off-site backup
  6. Mailcow
  7. Monitoring
Роли на схеме
  • внешний1
  • сервис2
  • хранилище2
  • интерфейс2

Счётчики из опубликованной записи. Они описывают структуру, а не измеренный результат.

Что отслеживается вне хоста?

edge

  • внешнийCloudflare
  • интерфейсNginx

runtime

  • сервисApp containers
  • сервисMailcow

persistence

  • хранилищеStorage

resilience

  • хранилищеOff-site backup

observation

  • интерфейсMonitoring
  1. CloudflareNginx
  2. NginxApp containers
  3. NginxMailcow
  4. App containersStorage
  5. MailcowStorage
  6. StorageOff-site backup
  7. NginxMonitoring
  8. MailcowMonitoring

Критические потоки

  1. DNS/edge

  2. reverse proxy

  3. app or mail container

  4. storage. Backup jobs copy off-box. Alerts fire from health checks, not from the app’s own uptime page alone.

Этапы

  • Tenant isolation
  • Mail
  • Containers
  • Off-site backup
  • Monitoring

Решения

01

Mail is a system

It gets isolation, backup, and monitoring like anything else that can take a company down.

02

Backups that have never been restored are not backups

Restore tests are scheduled work, not folklore.

03

Monitoring off the host

A box cannot be the only witness to its own death.

Когда что-то ломается

УсловиеОбнаружениеРеакция
Disk fillFilesystem alertsShed logs; block non-essential writes
Mail queue explosionQueue depthRate-limit outbound; inspect relay
Failed restore testScheduled restore jobPage; treat backup as broken
Certificate or DNS lapseExpiry monitorsRenew path; status page

Инфраструктура

  • Dedicated servers
  • Docker
  • Nginx
  • Mailcow
  • off-site backup
  • Cloudflare
  • uptime and log monitoring

Результат

Hosting and mail run as operated systems: isolated, backed up, watched, and movable.

Текущее состояние

In production. Migrations and capacity work follow the same topology.