nex/docs/deployment.md

flowchart LR

%% ============ Internet ============
subgraph WAN[🌐 Internet / Cloud]
extDNS[(📡 Public DNS)]
extGit[(☁️ Externe registries / Git)]
end

%% ============ LAN 192.168.1.x ============
subgraph LAN[🏠 LAN 192.168.1.0/24]
hub[🛜 Router / Gateway\nhub.lan\n192.168.1.1]

    subgraph core[💻 Hoofdserver / Desktop\nTour / hephaestus / ollama / dokku.lan\n192.168.1.159]
      traefik[🚦 Traefik\nReverse Proxy]
      gitea[📚 Gitea\n git.appmodel.nl]
      dokku[🐳 Dokku\nPaaS / build]
      auctionFE[🧱 Auction Frontend\n auction.appmodel.nl]
      aupiAPI[🧱 Auction Backend API\n aupi.appmodel.nl]
      mi50[🧠 MI50 / Ollama\nAI workloads]
    end

    subgraph infraDNS[🧭 Infra & DNS\nodroid / dns.lan\n192.168.1.163]
      adguard[🧭 AdGuard Home\nDNS / *.lan / *.appmodel.nl]
      artifactory[📦 Artifactory]
      runner[⚙️ Build runners]
    end

    subgraph ha[🏡 Home Automation\nha.lan\n192.168.1.193]
      hass[🏠 Home Assistant]
    end

    atlas[🧱 atlas.lan\n192.168.1.100\n]

    iot1[📺 hof-E402NA\n192.168.1.214]
    iot2[🎧 S380HB\n192.168.1.59]
    iot3[📟 ecb5faa56c90\n192.168.1.49]
    iot4[❓ Unknown\n192.168.1.240]
end

%% ============ Tether subnet ============
subgraph TETHER[📶 Tether subnet 192.168.137.0/24]
hermes[🛰️ hermes.lan\n192.168.137.239\nworker / node]
plato[🛰️ plato.lan\n192.168.137.163\nworker / node]
end

%% ============ Verkeer ============

%% Basis LAN connecties
hub --- core
hub --- infraDNS
hub --- ha
hub --- atlas
hub --- iot1
hub --- iot2
hub --- iot3
hub --- iot4

%% WAN koppeling
hub --> WAN
infraDNS --> WAN

%% DNS-resolutie
core --> adguard
ha --> adguard
atlas --> adguard
TETHER --> adguard

%% Websites / reverse proxy
extDNS --> traefik
traefik --> gitea
traefik --> auctionFE
traefik --> aupiAPI
traefik --> dokku

%% App flow
auctionFE --> aupiAPI
aupiAPI --> adguard

%% AI workloads
core --> mi50

%% Tether workers
core --- TETHER