Skip to main content

Recently Updated Pages

Chapter 17 — Maintenance & Patching

Infrastructure Maintenance & Patching

17.1 Current State and Scope As-built patching is unmanaged: no unattended-upgrades confirmation,...

Updated 1 month ago by SBS Admin

Chapter 15 — Capacity & Scaling

Infrastructure Capacity & Scaling

15.1 Philosophy and Scope Capacity planning at this fleet size is not autoscaling — it is knowing...

Updated 1 month ago by SBS Admin

Chapter 14 — Backup & Disaster Recovery

Infrastructure Backup & Disaster Recovery

14.1 Current State and Scope As of 2026-07-18, tier 1 (DigitalOcean Backups) is enabled on the dr...

Updated 1 month ago by SBS Admin

Chapter 13 — Audit Infrastructure

Infrastructure Audit Infrastructure

13.1 Purpose and Distinction from Operational Logging This chapter specifies the evidentiary tier...

Updated 1 month ago by SBS Admin

Chapter 12 — Observability

Infrastructure Observability

12.1 Current State and Scope Prometheus + Grafana 13.1.0 + nginx/TLS on  monitor-servers, serving...

Updated 1 month ago by SBS Admin

Chapter 11 — Supply-Chain Controls

Infrastructure Supply-Chain Controls

11.1 Current State and Scope As-built supply-chain posture is minimal but deliberately clean so f...

Updated 1 month ago by SBS Admin

Chapter 10 — Infrastructure as Code

Infrastructure Infrastructure as Code

10.1 Current State and Scope As of 2026-07-18 no IaC exists: all resources to date (droplets, DNS...

Updated 1 month ago by SBS Admin

Chapter 9 — Identity & Access

Infrastructure Identity & Access

9.1 Current State and Scope As of 2026-07-18 no IdP integration exists: Grafana and BookStack run...

Updated 1 month ago by SBS Admin

Chapter 8 — Secrets Management

Infrastructure Secrets Management

8.1 Current State and Scope As of 2026-07-18 no secrets manager is deployed. Credential state is ...

Updated 1 month ago by SBS Admin

Chapter 7 — Storage & Data Layer

Infrastructure Storage & Data Layer

7.1 Data Layer Overview Three engines serve the Platform, each with a distinct role; nothing else...

Updated 1 month ago by SBS Admin

Chapter 6 — Compute & Application Layer

Infrastructure Compute & Application Layer

6.1 Compute Model The Platform runs on a small fixed droplet fleet with containerized workloads u...

Updated 1 month ago by SBS Admin

Chapter 5 — TLS & Edge Security

Infrastructure TLS & Edge Security

5.1 Edge Model Every public surface is fronted by an nginx reverse proxy terminating TLS on the d...

Updated 1 month ago by SBS Admin

Chapter 4 — DNS & Domain Architecture

Infrastructure DNS & Domain Architecture

4.1 Domain and Registrar sbsdash.com is the sole Platform domain. Registrar-level state is a secu...

Updated 1 month ago by SBS Admin

Chapter 3 — Network Architecture

Infrastructure Network Architecture

3.1 VPC Design Target: two dedicated VPC networks, one per environment, both in NYC2, no peering:...

Updated 1 month ago by SBS Admin

Chapter 2 — Infrastructure Overview

Infrastructure Infrastructure Overview

2.1 DigitalOcean Account Structure The Platform operates under a single dedicated DigitalOcean ac...

Updated 1 month ago by SBS Admin

Chapter 1 — Introduction & Scope

Infrastructure Introduction & Scope

1.1 Document Purpose This document (LH-SBS-INF-001) is the authoritative infrastructure specifica...

Updated 1 month ago by SBS Admin