Arso Infrastructure

Command Center

Generated
2026-05-15T19:25:53+00:00
Secret values: never rendered.

Services

Tracked in catalog

Critical issues

P0/P1 endpoint/NAS failures

Warnings

Needs review

Known blockers

Expected until fixed

NAS

Restic: —

Needs attention

known_blocker · amgw · Arso Mail Gateway
SES production access disabled; review=DENIED

Endpoint checks

Service	Status	Latency ms	URL
UGREEN NAS	200	16	http://192.168.11.2:3000/infra/nas-health.json
Mission Control	200	12	http://192.168.11.2:3000/infra/nas-health.json
Baserow	200	166	https://br.vyn.to/api/settings/
Docmost	200	152	https://doc.vyn.to/api/auth/providers
n8n	200	136	https://n8n.vyn.to/healthz
Cloudflare Tunnel	200	15	http://192.168.11.2:3000/infra/nas-health.json
Arso Mail Gateway	200	43	https://mail-gateway.arso.dev/health
arso.solutions marketing	200	176	https://arso.solutions
app.arso.solutions	200	1459	https://app.arso.solutions
api.arso.solutions	200	129	https://api.arso.solutions/health
voice.arso.solutions	200	128	https://voice.arso.solutions/health
selfie.app API	200	48	https://api.selfie.app/health
selfie.app web	200	63	https://selfie.app
XOX.Agency	200	218	https://xox.agency
Arso.Agency	200	133	https://arso.agency
Models Showroom	200	282	https://models.arso.agency
Nextcloud	200	12	http://192.168.11.2:3000/infra/nas-health.json

Service catalog

Name	Type	Criticality	Platform	Backup coverage
UGREEN NAS	host	P0	UGREEN NAS / Docker	Local snapshots + Docker dumps + R2/restic
Mission Control	dashboard	P0	Next.js Docker	Docker compose + source under NAS backup
Baserow	database	P0	Docker all-in-one	Named volume tar + logical dump
Docmost	wiki	P0	Docker + Postgres + Redis + nginx proxy	Postgres dump + pgdata volume
n8n	automation	P1	Docker	n8n data volume + workflow/credential exports
Cloudflare Tunnel	tunnel	P0	cloudflared host network	Compose/config backup; token stored separately
Arso Mail Gateway	worker	P0	Cloudflare Worker + Queue + SES/Resend + Neon	Source on NAS + Neon schema/data
arso.solutions marketing	web	P1	Next.js NAS Docker behind tunnel	NAS source + Docker config
app.arso.solutions	saas	P1	Cloudflare/NAS app surface	Repo + Neon/R2 TBD
api.arso.solutions	api	P1	Cloudflare Worker/API	Repo + Neon
voice.arso.solutions	api	P1	Voice gateway	Repo + config
selfie.app API	api	P1	Cloudflare Worker + Neon	Repo + Neon
selfie.app web	web	P1	Web/mobile app	Repo + deployment artifacts
XOX.Agency	web	P2	Static/Vite nginx behind tunnel	NAS source + dist
Arso.Agency	web	P2	NAS static/nginx	NAS source
Models Showroom	web	P2	NAS/Convex models site	NAS source + Docker config
Arso.Agency model library	ops-data	P1	NAS file library	NAS source + backups
Nextcloud	storage	P3	Docker	warn until confirmed active

Secret inventory metadata

Key	Service	Status	Location
MAIL_GATEWAY_API_SECRET	AMGW	present	/Users/ppd/.hermes/secrets/arso-mail-gateway.env
MAIL_HASH_SECRET	AMGW	present	/Users/ppd/.hermes/secrets/arso-mail-gateway.env
AWS_SES_ACCESS_KEY_ID	AMGW/SES	present	/Users/ppd/.hermes/secrets/arso-mail-gateway.env
AWS_SES_SECRET_ACCESS_KEY	AMGW/SES	present	/Users/ppd/.hermes/secrets/arso-mail-gateway.env
RESEND_API_KEY	AMGW/Resend	present	/Users/ppd/.hermes/secrets/arso-mail-gateway.env
SNS_ALLOWED_TOPIC_ARN	AMGW/SES webhook	present	/Users/ppd/.hermes/secrets/arso-mail-gateway.env
CLOUDFLARE_API_TOKEN	Cloudflare DNS/tunnel	present	/Users/ppd/.hermes/secrets/cloudflare-arso-dns.env
NEON_API_KEY	Neon	present	/Users/ppd/.hermes/.env
TELEGRAM_BOT_TOKEN	Telegram alerts	present	/Users/ppd/.hermes/.env

AMGW

2026-05-12-cloudflare-email-service-v1version

DENIEDSES review

6messages

0SES 24h sent

Backups

{
  "checked_at": "2026-05-06T18:17:05.067198+00:00",
  "status": "ok",
  "summary": "Backup coverage for critical NAS data, Docker app data, cloud/restic, and restore drills.",
  "items": [
    {
      "area": "/volume2/Arso",
      "source": "/volume2/Arso",
      "local_snapshot": "latest snapshot 6.8h old",
      "docker_dump": "n/a",
      "cloud": "restic tier1 configured",
      "restore_drill": "restic small-file proof",
      "status": "ok",
      "notes": "Business/work source-of-truth."
    },
    {
      "area": "Docker configs",
      "source": "/volume1/docker",
      "local_snapshot": "snapshot 1464.7h old",
      "docker_dump": "compose tarballs 0.0h old",
      "cloud": "included in restic tier1",
      "restore_drill": "compose tar listing",
      "status": "ok",
      "notes": "Fresh compose tarballs are the immediate restore source; rsync snapshot refreshes daily."
    },
    {
      "area": "Baserow",
      "source": "docker volume baserow_baserow_data",
      "local_snapshot": "volume/config protected",
      "docker_dump": "volume 0.0h old; SQL 0.0h old",
      "cloud": "dumps included in restic",
      "restore_drill": "OK",
      "status": "ok",
      "notes": "Volume tar is primary fallback; SQL dump added when embedded DB allows it."
    },
    {
      "area": "Docmost",
      "source": "docmost-db + pgdata volume",
      "local_snapshot": "compose/config protected",
      "docker_dump": "pgdata 0.0h old; SQL 0.0h old",
      "cloud": "dumps included in restic",
      "restore_drill": "OK",
      "status": "ok",
      "notes": "Wiki/runbooks protected by DB dump."
    },
    {
      "area": "n8n",
      "source": "/volume1/docker/n8n/data",
      "local_snapshot": "bind data archive",
      "docker_dump": "data 0.0h old; workflows yes; encrypted creds yes",
      "cloud": "dumps included in restic",
      "restore_drill": "OK",
      "status": "ok",
      "notes": "Credentials are encrypted; keep n8n encryption key in data backup."
    },
    {
      "area": "Mission Control",
      "source": "/volume1/docker/convex/mission-control",
      "local_snapshot": "Docker config snapshot",
      "docker_dump": "compose/source tarball",
      "cloud": "included via /volume1/docker",
      "restore_drill": "HTTP 200 probe",
      "status": "ok",
      "notes": "Infra dashboard rebuilt after backup matrix addition."
    },
    {
      "area": "Cloudflare Tunnel",
      "source": "/volume1/docker/cloudflared",
      "local_snapshot": "compose snapshot",
      "docker_dump": "compose/config tarball",
      "cloud": "manual/API config runbook",
      "restore_drill": "container running probe",
      "status": "ok",
      "notes": "Compose-managed and image pinned. Do not print tunnel tokens."
    },
    {
      "area": "Nextcloud",
      "source": "/volume1/docker/nextcloud + volumes",
      "local_snapshot": "compose/config only",
      "docker_dump": "not yet app-specific",
      "cloud": "not tier1",
      "restore_drill": "not configured",
      "status": "warn",
      "notes": "Only harden if still used; can be large."
    }
  ]
}

Model ops

179models

179missing main.png

71legacy JPG refs

143missing ref tokens

TLS

Host	Status	Days	Expires/Error
api.arso.solutions	ok	78	2026-08-02T09:47:47+00:00
api.selfie.app	ok	73	2026-07-28T12:14:44+00:00
app.arso.solutions	ok	78	2026-08-02T09:47:47+00:00
arso.agency	ok	57	2026-07-12T00:54:50+00:00
arso.solutions	ok	78	2026-08-02T09:47:47+00:00
br.vyn.to	ok	72	2026-07-26T21:07:57+00:00
doc.vyn.to	ok	72	2026-07-26T21:07:57+00:00
mail-gateway.arso.dev	ok	84	2026-08-08T18:49:25+00:00
mc.vyn.to	ok	72	2026-07-26T21:07:57+00:00
models.arso.agency	ok	57	2026-07-12T00:54:50+00:00
n8n.vyn.to	ok	72	2026-07-26T21:07:57+00:00
selfie.app	ok	73	2026-07-28T11:31:46+00:00
voice.arso.solutions	ok	78	2026-08-02T09:47:47+00:00
xox.agency	ok	63	2026-07-18T13:02:21+00:00