3. Resources
3. Resources
Resource Overview
| Resource | Purpose |
|---|---|
| WireGuard config | Defines peers, keys, and WG addresses |
| Host firewall policy | Enforces WG-only ingress |
| Port inventory | Input for firewall planning |
Resource Tables
WireGuard Configuration Resources
| Resource | Type | Purpose | Dependencies | Validation |
|---|---|---|---|---|
| wg0.conf | Host config | WireGuard interface and peers | Keys, address plan | WG interface is active |
| private key | Secret | Host identity for WG | None | File permissions restricted |
| public key | Public data | Peer configuration | Private key | Published to peers |
Host Firewall Resources
| Resource | Type | Purpose | Dependencies | Validation |
|---|---|---|---|---|
| UFW policy | Host policy | Enforce WG-only ingress | wg0 active | Public/LAN blocked, WG allowed |
| Allowed ports list | Host data | Define port allowances | Service inventory | Matches intended services |
Port Inventory (from repo)
| Compose file | Service | Ports |
|---|---|---|
docker/pi-scrape.docker-compose.yml | api | ${PORT}:8245 |
docker/docker-compose.yml | db | 127.0.0.1:${ATS_DB_PORT}:5432 |
docker/docker-compose.yml | tenant_db | 127.0.0.1:${TENANT_DB_PORT}:5432 |
docker/docker-compose.yml | pgbouncer_transaction | 127.0.0.1:${DB_QUERY_POOLER_PORT}:${DB_QUERY_POOLER_PORT} |
docker/docker-compose.yml | pgbouncer_direct | 127.0.0.1:${DB_MGMT_PORT}:${DB_MGMT_PORT} |
docker/docker-compose.yml | frontend-web | 3033:3000 |
docker/docker-compose.yml | api-gateway | ${API_GATEWAY_PORT}:${API_GATEWAY_PORT} |
docker/docker-compose.yml | backend-main | ${BACKEND_MAIN_PORT}:${BACKEND_MAIN_PORT} |
docker/docker-compose.yml | integrations-gateway | ${INTEGRATION_GATEWAY_PORT}:${INTEGRATION_GATEWAY_PORT} |
docker/docker-compose.yml | auth-service | ${AUTH_SERVICE_PORT}:${AUTH_SERVICE_PORT} |
docker/docker-compose.yml | integrations-service | ${INTEGRATION_SERVICE_PORT}:${INTEGRATION_SERVICE_PORT} |
docker/docker-compose.yml | mailer | ${MAILER_PORT}:${MAILER_PORT} |
docker/docker-compose.yml | automation-service | ${AUTOMATION_SERVICE_PORT}:${AUTOMATION_SERVICE_PORT} |
docker/docker-compose.yml | notify | ${NOTIFY_PORT}:${NOTIFY_PORT} |
docker/docker-compose.yml | pi-analysis | ${PI_ANALYSIS_PORT}:${PI_ANALYSIS_PORT} |
docker/docker-compose.yml | kafka-broker-1 | 9092:9092 |
docker/docker-compose.yml | kafka-broker-2 | 9093:9093 |
docker/docker-compose.yml | kafka-broker-3 | 9094:9094 |
docker/docker-compose.yml | kafka-ui | ${KAFKA_UI_PORT:-8081}:8080 |
docker/docker-compose.yml | debezium | 8083:8083 |
docker/docker-compose.yml | minio | 9000:9000, 9001:9001 |
docker/docker-compose.yml | redis | ${REDIS_PORT}:6379 |
docker/postgres.docker-compose.yml | db | ${ATS_DB_PORT}:5432 |
docker/postgres.docker-compose.yml | tenant_db | ${TENANT_DB_PORT}:5432 |
docker/postgres.docker-compose.yml | pgbouncer_transaction | ${DB_QUERY_POOLER_PORT}:${DB_QUERY_POOLER_PORT} |
docker/postgres.docker-compose.yml | pgbouncer_direct | ${DB_MGMT_PORT}:5432 |
docker/postgres.docker-compose.yml | pgadmin | 5050:80 |
docker/dev.docker-compose.yml | db | ${PG_PORT}:5432 |
docker/dev.docker-compose.yml | tenant_db | ${TENANT_DB_PORT}:5432 |
docker/dev.docker-compose.yml | api-gateway | ${API_GATEWAY_PORT}:${API_GATEWAY_PORT} |
docker/dev.docker-compose.yml | backend-main | ${BACKEND_MAIN_PORT}:${BACKEND_MAIN_PORT} |
docker/dev.docker-compose.yml | dbaas | ${DBAAS_PORT}:${DBAAS_PORT} |
docker/dev.docker-compose.yml | redis | ${REDIS_PORT}:6379 |
docker/dev.docker-compose.yml | duplicati | 8200:8200 |
shared/db-prisma/docker-compose.yml | db | ${ATS_DB_MGMT_PORT}:5432 |
shared/db-prisma/docker-compose.yml | tenant_db | ${TENANT_DB_MGMT_PORT}:5432 |
shared/db-prisma/docker-compose.yml | pgadmin | ${PGADMIN_PORT}:80 |
shared/db-prisma/docker-compose.yml | redis | ${REDIS_PORT}:6379 |
apps/backend/pi-mailsum/docker-compose.yml | api | ${PORT:-8074}:${PORT:-8074} |
platform/pnow-idp/docker-compose.yml | postgres | 5445:5432 |
platform/pnow-idp/docker-compose.yml | backstage | 7008:7008 |
apps/backend/pi-boolgen/docker-compose.yml | parser | ${PARSER_PORT:-8001}:8000 |
apps/backend/pi-boolgen/docker-compose.yml | validator | ${VALIDATOR_PORT:-8003}:8000 |
apps/backend/pi-boolgen/docker-compose.yml | generator | ${GENERATOR_PORT:-8002}:8000 |
apps/backend/pi-boolgen/docker-compose.yml | orchestrator | ${ORCHESTRATOR_PORT:-8004}:8000 |
apps/backend/pi-boolgen/docker-compose.yml | flower | ${FLOWER_PORT:-5555}:5555 |
apps/backend/leads-gen-service/docker-compose.yml | app | ${PORT}:3003, 6666:5555 |
apps/backend/leads-gen-service/docker-compose.yml | redis | ${REDIS_PORT}:6379 |
docs/v2/dev-docs/docker-compose.yml | dev-docs | 3031:3031 |
apps/backend/audit-service/docker-compose.yml | debezium | 8083:8083 |
apps/backend/audit-service/docker-compose.yml | audit-clickhouse | 8123:8123 |
apps/backend/audit-service/docker-compose.yml | tabix | ${TABIX_PORT:-8084}:80 |
apps/backend/audit-service/docker-compose.yml | audit-api-service | ${API_PORT:-8080}:${API_PORT:-8080} |
apps/backend/audit-service/docker-compose.yml | audit-activity-timeline-service | ${TIMELINE_API_PORT:-8090}:${TIMELINE_API_PORT:-8090} |
apps/backend/dbt-pipelines/docker-compose.yml | airflow-apiserver | ${AIRFLOW_API_SERVER_PORT}:${AIRFLOW_API_SERVER_PORT} |
apps/backend/dbt-pipelines/docker-compose.yml | airflow-flower | ${AIRFLOW_FLOWER_EXTERNAL_PORT}:${AIRFLOW_FLOWER_PORT} |
apps/backend/tasks-reminders/docker-compose.yml | tasks | 8080:8080 |
apps/backend/tasks-reminders/docker-compose.yml | reminders | 8090:8090 |
apps/backend/notify/docker-compose.yml | kafka | 9092:9092 |
apps/backend/automation-service/docker-compose.yml | kafka | ${KAFKA_EXTERNAL_PORT:-9092}:9092 |
apps/backend/automation-service/docker-compose.yml | kafka-ui | ${KAFKA_UI_PORT:-8080}:8080 |
apps/backend/automation-service/docker-compose.yml | automation_db | ${POSTGRES_PORT:-5446}:5432 |
apps/backend/mailer/docker-compose.yml | ollama | ${OLLAMA_PORT}:11434 |
apps/backend/mailer/docker-compose.yml | redis | ${REDIS_PORT}:6379 |
apps/backend/mailer/docker-compose.yml | redis-exporter | ${REDIS_EXPORTER_PORT}:9121 |
apps/backend/mailer/docker-compose.yml | node-exporter | ${NODE_EXPORTER_PORT}:9100 |
apps/backend/mailer/docker-compose.yml | bull-monitor | 3302:3000 |
apps/backend/mailer/docker-compose.yml | prometheus | ${PROMETHEUS_PORT}:9090 |
apps/backend/mailer/docker-compose.yml | grafana | ${MAILER_PORT}:3000 |
Dockerfile EXPOSE Inventory
| Dockerfile | EXPOSE |
|---|---|
apps/backend/pi-boolgen/services/parser/Dockerfile | 8000 |
apps/backend/pi-boolgen/services/validator/Dockerfile | 8000 |
apps/backend/pi-boolgen/services/orchestrator/Dockerfile | 8000 |
apps/backend/pi-boolgen/services/generator/Dockerfile | 8000 |
apps/backend/leads-gen-service/Dockerfile | 3003 |
docs/v2/dev-docs/Dockerfile.simple | 3031 |
docker/Dockerfile.pgbouncer | 5432 |
docker/Dockerfile | ${PORT} |
docker/Dockerfile.pi-scrape | 8245 |
docker/Dockerfile.pi-analysis | ${PORT} |
docker/Dockerfile.frontend | 3000 |
apps/backend/pi-mailsum/Dockerfile | 8074 |
End of Resources — RFC-WG-0001