tant/manta-security
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
65 commits 1 branch 0 tags 394 KiB
  • Python 91%
  • Shell 9%
Find a file
Exact
tant 3b28daa98c cookbook: raw-compose install path (no Dokploy) 
For deploying Manta on fresh VPSes per the 3-VPS pattern (Edge / Vault /
Perimeter) without depending on Dokploy as the orchestrator.

- docs/COOKBOOK.md — step-by-step fresh install: prereqs, DNS, secrets,
  Vault bring-up order (Authentik → Vaultwarden → NetBird → Fleet),
  Perimeter, Edge SNI router, smoke tests, daily ops, multi-client
  deploy pattern, gotchas placeholder.
- infra/traefik/ — standalone Traefik for Vault + Perimeter; replicates
  Dokploy's bundled Traefik so existing compose labels (entrypoints,
  certresolver=letsencrypt-dns) work as-is. Cloudflare DNS-01 + wildcard.
- infra/traefik-edge/ — Edge VPS Traefik with TLS terminate for admin
  UIs and TCP passthrough for mitmproxy; routes.yml.example documents
  the SNI router pattern.
- scripts/init-secrets.sh — idempotent random-secret generator for .env;
  fills empty slots only, leaves filled values untouched.
- .env.example — single-source-of-truth template covering all client +
  Cloudflare + NetBird + Authentik + Vaultwarden + Fleet + mitmproxy +
  Grafana env vars; comments mark which are auto-generated vs manual.
- .gitignore — explicit negative for .env.example so the template tracks.
2026-06-27 15:53:38 +04:00
docs cookbook: raw-compose install path (no Dokploy) 2026-06-27 15:53:38 +04:00
infra cookbook: raw-compose install path (no Dokploy) 2026-06-27 15:53:38 +04:00
scripts cookbook: raw-compose install path (no Dokploy) 2026-06-27 15:53:38 +04:00
stacks fleet-patches: rewrite README for Dokploy native-build flow 2026-06-25 18:52:28 +04:00
.env.example cookbook: raw-compose install path (no Dokploy) 2026-06-27 15:53:38 +04:00
.gitignore cookbook: raw-compose install path (no Dokploy) 2026-06-27 15:53:38 +04:00
README.md Initial commit — Manta Plan B runbook + cleanup runbook 2026-04-25 20:48:08 +04:00
todo.md todo: yitcloud first client kicks production scope 2026-06-27 15:33:26 +04:00

README.md

Dự án triển khai giải pháp bảo mật cho một công ty/doanh nghiệp