chore(docs+infra): update roadmap, improve home server plan, and archive outdated reports

- Adjusted infrastructure roadmap to use VM instead of nested LXC for Docker hosting, enhancing isolation and compatibility.
- Clarified multi-architecture CI/CD setup with native ARM64 builds and QEMU-based x86_64 builds.
- Updated documentation to include backup and offline-first strategies.
- Archived outdated session logs and reports for better file organization.
This commit is contained in:
2026-02-06 20:49:47 +01:00
parent c8d19f7911
commit c51773a4c7
23 changed files with 41 additions and 28 deletions
+11 -8
View File
@@ -67,13 +67,16 @@ Wir validieren die gesamte Architektur-Kette (Frontend -> Gateway -> Service ->
2. **System Hardening:** Keycloak Production-Config (kein `start-dev`).
3. **Reporting / Printing:** (Vorgemerkt)
* Anforderung: PDF-Generierung für Startlisten, Ergebnislisten, Dressur-Protokolle (personalisiert).
* Architektur-Entscheidung ausstehend: Dezentral (pro Service) vs. Zentraler Reporting-Service.
* Architektur-Entscheidung: Dezentraler Microservice (wegen Resource-Bursts).
* Technologie-Evaluierung: JasperReports, Thymeleaf + Flying Saucer, etc.
4. **Infrastructure Setup (Home-Server):**
* Hardware: Minisforum MS-R1 (ARM64).
* OS: Debian 12 (Bookworm).
* Hypervisor: **Incus** (LXC/LXD Fork) für Container & VMs.
* Services:
* `infra-gitea` (LXC): Gitea + Actions Runner (ARM64 Native Builds).
* `docker-host-prod` (LXC, nesting=true): Docker Host für Meldestelle-Stack.
* Networking: Cloudflare Tunnel (kein Port-Forwarding).
* Hardware: Minisforum MS-R1 (ARM64, 12 Cores, 10G LAN).
* OS: Debian 12 (Vendor Variant) als Host.
* Hypervisor: **Incus** (LXC/LXD Fork).
* Virtualization Strategy:
* `infra-gitea` (LXC Container): Gitea + Actions Runner (Native ARM Builds).
* `docker-host-prod` (VM): Debian VM als Docker Host für den Meldestelle-Stack (Isolation, keine Nesting-Probleme).
* CI/CD: **Multi-Arch Support** (Native ARM64 Builds + x86_64 via `docker buildx` & QEMU).
* Networking: Cloudflare Tunnel (Remote Access).
* Local Discovery: DNS/mDNS Strategie für Offline-Szenarien (Main-App als lokaler Anchor).
* Backup: Automatisierte Snapshots auf externe USB-SSD.