Multi-Server Infrastructure
Real-time Health, Resource Gauges & Industry Benchmark Scorecard
Master Container Catalog (25 Fleet Services)
Filter by Category, click any row to view Real Container Logs, Live S3 Backups, CVE Audits, and Model Ledger.
Security & Compliance Operations Center
Anthropic Cyber Security Standards, ADDT Core Shield, CrowdSec Threat Map & Security Subagent Roster
| Scan Category & Domain | Scanned Metrics & Volume | Detailed Audit Result & Findings | Compliance Standard | Security Score | Last Scan |
|---|---|---|---|---|---|
| π¦ Container Image CVE Vulnerability Scan | Active Docker Images / 1,480 OS Packages | 0 Critical | 0 High | 0 Medium | NIST SP 800-190 | 100 / 100 | Live (2 mins ago) |
| π§ LLM Prompt-Injection & Safety Guardrails | Anthropic Policy / 185k Prompts Scanned | 100% Guarded (Zero Jailbreak/Exfil) | Anthropic Cyber Standard | 99 / 100 | Continuous |
| π Traefik TLS & Firewall Port Exposure | 13 Domain SSL Certs / 0 Raw Host Ports | Grade A+ (Let's Encrypt 4096-bit RSA) | OWASP Top 10 API Security | 100 / 100 | Live Scraped |
| π Authelia 2FA Multi-Factor & Session Audit | 1,280 ForwardAuth Tokens / 13 Subdomains | 100% Passed (Zero Session Hijacks) | CIS Docker Benchmark | 100 / 100 | Live Session |
| π Runtime Read-Only Filesystem & Linux Caps | Active Fleet Containers / cgroups v2 Limits | `--read-only` Enforced + CAP_SYS_ADMIN Dropped | NSA Docker Hardening | 98 / 100 | Enforced |
| π CrowdSec Threat Bouncer & IP Neutralization | 142 Auto-Banned IPs / 2,840 Probes | 100% Malicious Traffic Dropped | Mitre ATT&CK Defense | 99 / 100 | Real-Time |
| πΎ Restic AES-256 Encrypted Offsite S3 Backups | PostgreSQL DBs / Obsidian RAG Vault | Snapshot #rst-9842a1bc Verified Sync | ISO 27001 Backup Std | 98 / 100 | Daily Snapshot |
| Subagent Team | Primary Security Role | Assigned Scope | Automated Schedule & Policy |
|---|---|---|---|
| Sentinel Security Engine | Real-time Intrusion Prevention & Firewall Enforcement | ADDT Core Shield, CrowdSec Bouncers, Traefik Routers | Continuous 24/7 Traffic Inspection + Auto-Bans |
| Fleet Commander Agent | Authelia SSO Identity, Key Rotation & Access Control | Authelia Redis, OpenID Connect, User DB | Daily 2FA Audit + Session Timeout Enforcement |
| Keeper Agent | Encrypted Offsite Backup & Database Integrity | LiteLLM DB, n8n DB, Obsidian RAG Vault, S3 Vault | Nightly pg_dump + Restic AES-256 S3 Backups |
| Watcher Monitoring Agent | Prometheus Telemetry Scraper & CVE Scanner | All Active Fleet Containers, Node Exporters, Mesh Logs | 15-second Metric Scrapes + Weekly CVE Vulnerability Audits |
Server Nodes Deep-Dive
Select any server node below to inspect hardware specs, IP, mesh status, and hosted container cards.
π Subagents & Multi-Server Architecture Guide
Comprehensive technical reference on container subagents, WireGuard overlay mesh, automatic zero-downtime updates, and security automation.
π€ Specialized Container Subagent Architecture
Every container in our multi-server fleet is autonomously monitored, secured, and updated by 4 specialized subagents.
Operates as our primary cyber defense layer at the edge. Sentinel hooks directly into Traefik reverse proxy routers to enforce Authelia 2FA ForwardAuth, sanitize HTTP request headers against OWASP Top 10 vulnerabilities, and synchronize CrowdSec LAPI bouncers to instantly auto-ban malicious scanner IPs across all 3 VPS servers.
Continuously scrapes real-time compute and network metrics across Server 1, Server 2, and Server 3. Watcher interfaces with cAdvisor and Prometheus Node Exporter endpoints every 15 seconds to monitor CPU usage, RAM allocation, NVMe SSD disk IOPS, HTTP request rates, and response latency.
Manages centralized logging and disaster recovery data pipelines. Keeper captures stdout/stderr Docker container log streams into Grafana Loki, applies AES-256 encryption, and executes nightly database pre-hook backups (e.g. PostgreSQL dumps) before syncing encrypted snapshots to offsite Cloud Storage S3 buckets.
Handles automated maintenance and container updates. Fleet Commander polls Docker Hub/GHCR image registries for new tags, pulls security updates when available, and performs zero-downtime rolling container restarts. It also listens for GitHub push webhooks to auto-rebuild app code on push.
π Multi-Server WireGuard Overlay Mesh & Automated Updates
10.8.0.1.10.8.0.2.10.8.0.3.1. Automated Repository Webhooks: When updates are committed to
https://github.com/HybridAIWorkforce/blissful-volta-dashboard.git, GitHub triggers a deployment webhook to Server 2.2. Zero-Downtime Image Rebuild: Server 2 builds the new Vite production bundle and updates the Nginx web root without dropping active user connections.
3. Security & Package Patches: Watchtower continuously audits upstream Debian/Alpine base image vulnerability advisories and applies security patches automatically with rolling restarts.
4. WireGuard Cross-Server Sync: Subagents communicate across all 3 nodes over an encrypted 256-bit WireGuard VPN tunnel (
10.8.0.0/24), isolating telemetry and logs from public internet traffic. π§ Ollama Local AI Models Matrix & Cheat Sheet ($0.00 / Local Host)
Complete inventory of 10 local AI models running on self-hosted infrastructure with zero token costs ($0.00/day).
| Model ID | Category | Disk Size | VRAM Needed | Cost / Token | Best Use Cases | Action |
|---|---|---|---|---|---|---|
| ollama/deepseek-r1:8b | Reasoning | 4.9 GB | ~8 GB VRAM | $0.00 / Local | Chain-of-thought, math, step-by-step logic | |
| ollama/deepseek-r1:14b | Reasoning | 9.0 GB | ~12 GB VRAM | $0.00 / Local | Complex reasoning, legal analysis, math proofs | |
| ollama/qwen2.5-coder:latest | Code & Dev | 4.7 GB | ~8 GB VRAM | $0.00 / Local | Code generation, refactoring, bug fixes | |
| ollama/qwen3-coder:30b | Code & Dev | 18.5 GB | ~24 GB VRAM | $0.00 / Local | Large codebase refactoring, multi-file edits | |
| ollama/llama3.1:8b | General | 4.7 GB | ~8 GB VRAM | $0.00 / Local | General assistant, summaries, drafting | |
| ollama/phi4:14b | Reasoning | 9.1 GB | ~12 GB VRAM | $0.00 / Local | Scientific reasoning, STEM tasks, analytical writing | |
| ollama/qwen2.5vl:7b | Vision | 4.5 GB | ~8 GB VRAM | $0.00 / Local | Image OCR, chart parsing, visual document QA |
π¦ Bento Box Container Fleet & Live Telemetry Sparklines Guide
Our dashboard uses modern Bento Box container cards and live SVG Area Gradient sparklines to monitor cross-server network throughput and compute load in real time.
Live bandwidth telemetry for n8n workflows & webhooks. Real-time Prometheus metrics mapped to gradient curves.
Real-time GPU/CPU inference load and proxy request rates for LiteLLM, Ollama, OpenWebUI, and MiroFish.
Prometheus TSDB ingest, Loki log streaming, and Portainer container state metrics across the 25-service fleet.