Solanasis Service Inventory

Last updated: 2026-03-31


Docker Services

ERPNext Stack (9 containers)

ContainerImagePortNetworkPurpose
frappe_docker-frontend-1solanasis/erpnext:v16-custom8080 (public)solanasis_networkNginx reverse proxy, serves static assets
frappe_docker-backend-1solanasis/erpnext:v16-custom8000 (internal)solanasis_networkFrappe/ERPNext Python API server
frappe_docker-db-1mariadb:10.63306 (internal)solanasis_networkDatabase
frappe_docker-redis-cache-1redis:6.2-alpine6379 (internal)solanasis_networkApplication cache
frappe_docker-redis-queue-1redis:6.2-alpine6379 (internal)solanasis_networkBackground job queue storage
frappe_docker-websocket-1solanasis/erpnext:v16-custom9000 (internal)solanasis_networkSocket.io real-time updates
frappe_docker-queue-short-1solanasis/erpnext:v16-customsolanasis_networkShort-running background jobs
frappe_docker-queue-long-1solanasis/erpnext:v16-customsolanasis_networkLong-running background jobs
frappe_docker-scheduler-1solanasis/erpnext:v16-customsolanasis_networkCron-like task scheduler

Config: /home/zasage/_solanasis/frappe_docker/compose.solanasis.yaml Env: /home/zasage/_solanasis/frappe_docker/.env Site: db.solanasis.com Custom apps: solanasis_core, solanasis_crm, frappe_whatsapp, insights

Baserow (1 container)

ContainerImagePortPurpose
baserowbaserow/baserow:2.1.68880 (public)Self-hosted CRM/database (all-in-one: PostgreSQL, Redis, Celery, Caddy)

Config: /home/zasage/_solanasis/baserow/docker-compose.yml Memory limit: 4GB Public URL: https://baserow.solanasis.com (via Cloudflare Tunnel + Access OTP baseline — ACTIVE) Admin: ds@solanasis.com API Token: claude-bot (full CRUD, workspace “Solanasis” ID 45, database “Solanasis CRM” ID 54) Tables: 6 (Tag, Location, Organization, People, Meeting Notes, Foundation Prospects) — 2,817 rows total Migrated from cloud: 2026-03-24 (Baserow Cloud instance deprecated, keep as read-only backup) Backup: Daily 2:30 AM → Cloudflare R2 solanasis-backups/baserow/ (~6.4 MB encrypted). Weekly verify Sunday 6 AM. See operations/backup-strategy.md. Security: Cloudflare Access OTP baseline (24h, dmitri@ + ds@ + mr.sunshine@) + Baserow own login Templates: Removed 2026-03-26. SYNC_TEMPLATES_ON_STARTUP=false in docker-compose prevents re-creation. Apply with docker compose up -d. Email/SMTP: Not yet configured — Brevo SMTP key auth failing. See operations/baserow-smtp-setup.md Stale key: BASEROW_API_KEY in Infisical is the old cloud token — does not work on self-hosted. Safe to remove.

Infisical (3 containers)

ContainerImagePortPurpose
infisical-backendinfisical/infisical:latest8580 (public)Secrets management platform
infisical-dbpostgres:14-alpine5432 (internal)Infisical database
infisical-redisredis:7-alpine6379 (internal)Infisical cache

Config: C:\_my\_solanasis\infisical\docker-compose.yml Env: C:\_my\_solanasis\infisical\.env Public URL: https://sm.solanasis.com (via Cloudflare Tunnel + Cloudflare Access OTP) Backup: Daily at 2:00 AM → dzinreach/infisical-backups (GitHub, encrypted) Admin: admin@solanasis.com (admin panel at /admin) Security: Cloudflare Access OTP baseline (24h, dmitri@ + ds@ + mr.sunshine@) + invite-only signup + @solanasis.com domain restriction + WAF rate limiting (10 req/10s) Cheatsheet: operations/infisical-cheatsheet.md

Supabase Data Platform (7 containers)

ContainerImagePortPurpose
supabase-dbsupabase/postgres:15.8.1.0605433 (public)PostgreSQL database
supabase-kongkong:2.8.18000 (public)API gateway
supabase-authsupabase/gotrue:v2.170.09999 (internal)Authentication
supabase-restpostgrest/postgrest:v12.2.3— (internal)PostgREST API
supabase-studiosupabase/studio:20250113-83c94203001 (local-only)Dashboard UI
supabase-storagesupabase/storage-api:v1.11.13— (internal)File storage
supabase-metasupabase/postgres-meta:v0.83.28080 (internal)Schema introspection

Config: /home/zasage/_my/_solanasis/supabase/docker-compose.yml Network: solanasis_data (bridge) Admin user: supabase_admin

Directus CRM (1 container)

ContainerImagePortPurpose
solanasis-directusdirectus/directus:118055 (tunneled)CRM/CRUD interface

Public URL: https://db.solanasis.com (via Cloudflare Tunnel + Access OTP) Admin: admin@solanasis.com Security: Cloudflare Access OTP baseline (24h, dmitri@ + ds@ + mr.sunshine@) + CF Service Token policy (“Allow API Cowork Service Token”) for machine-to-machine access + Directus own login API Users: api-cowork@solanasis.com (static token, CRUD on CRM collections, no admin/app access), api-admin@solanasis.com (JWT, admin tasks) API Docs: See operations/directus-api-cheatsheet.md Recovery: Forgot-password uses Brevo SMTP on smtp-relay.brevo.com:587 with STARTTLS; see operations/directus-recovery.md. ADMIN_EMAIL/ADMIN_PASSWORD only bootstrap the first admin user. Network: solanasis_data (bridge)

Quartz Docs (1 container)

ContainerImagePortPurpose
solanasis-quartz-docscustom build3003 (tunneled)Quartz docs viewer for the Solanasis docs vault

Config: /home/zasage/_my/_solanasis/solanasis-scripts/docker-compose.quartz.yml Public URL: https://docs.solanasis.com (via Cloudflare Tunnel + Access OTP baseline) Security: Cloudflare Access OTP baseline (24h, dmitri@ + ds@ + mr.sunshine@)

Metabase (1 container)

ContainerImagePortPurpose
solanasis-metabasemetabase/metabase:latest3002 (local-only)Analytics dashboards

Access: Local only (localhost:3002)

CRM Quick Search (1 container)

ContainerImagePortPurpose
solanasis-crm-searchcustom build8881 (local-only)FastAPI + HTMX search UI

Access: Local only (localhost:8881)

Knowledge/Memory Infrastructure (4 containers)

ContainerImagePortPurpose
neo4jneo4j:5.26-community7474 (HTTP), 7687 (Bolt)Knowledge graph database
openmemory-mem0_store-1qdrant/qdrant:latest6333Vector database for semantic search
openmemory-openmemory_api-1mem0/openmemory-mcp:latest8765OpenMemory MCP server
graphiti-mcpzepai/knowledge-graph-mcp:latest8800Knowledge graph MCP server
milvus-standalonemilvus2379, 19530, 9091Vector database (Milvus)

Non-Docker Services

ServicePortProcessPurpose
LiteLLM4000litellmLLM proxy/gateway
Caddy80, 443caddyReverse proxy for Matchkeyz dev APIs
.NET API5154dotnet (api)Matchkeyz API server
.NET (other)5155, 5364, 5464dotnetDevelopment servers
SSH22, 2022sshdRemote access
cloudflared20241 (metrics)cloudflaredCloudflare tunnel connector (tunnel: solanasis, v2026.3.0)

Domains & Routing

DomainDestinationMethodAccess PolicyStatus
solanasis.comCloudflare PagesDNS (Cloudflare)Public marketing exceptionACTIVE
erp.solanasis.comlocalhost:8080 (ERPNext)Cloudflare Tunnel (solanasis)Docs OTP baseline (24h, 3-email allowlist)ACTIVE
baserow.solanasis.comlocalhost:8880 (Baserow)Cloudflare Tunnel (solanasis)Docs OTP baseline (24h, 3-email allowlist)ACTIVE
sm.solanasis.comlocalhost:8580 (Infisical)Cloudflare Tunnel (solanasis)Docs OTP baseline (24h, 3-email allowlist)ACTIVE
docs.solanasis.comlocalhost:3003 (Quartz Docs)Cloudflare Tunnel (solanasis)Docs OTP baseline (24h, 3-email allowlist)ACTIVE
edit.solanasis.comlocalhost:3000 (SilverBullet)Cloudflare Tunnel (solanasis)Docs OTP baseline (24h, 3-email allowlist)ACTIVE
db.solanasis.comlocalhost:8055 (Directus CRM)Cloudflare Tunnel (solanasis)Docs OTP baseline (24h, 3-email allowlist) + Service Token (api-cowork)ACTIVE
go.solanasis.comshort.ioURL shortenerThird-party managed exceptionACTIVE
solanashq.com(warmup)Cold outreach domainPublic marketing exceptionACTIVE
api.dev.matchkeyz.iolocalhost:5154Caddy reverse proxyOutside Solanasis tunnel policyACTIVE

Cloudflare Access Exceptions

Hostname Exceptions

HostnameCategoryReasonApproval RequiredApproval StatusApproved By
solanasis.compublic_marketing_sitePublic marketing site by design.Noapprovedbaseline-policy
www.solanasis.compublic_marketing_sitePublic marketing site alias by design.Noapprovedbaseline-policy
matchkeyz.iopublic_marketing_sitePublic marketing site by design.Noapprovedbaseline-policy
www.matchkeyz.iopublic_marketing_sitePublic marketing site alias by design.Noapprovedbaseline-policy
mrsunshine.mepublic_marketing_sitePublic marketing site by design.Noapprovedbaseline-policy
www.mrsunshine.mepublic_marketing_sitePublic marketing site alias by design.Noapprovedbaseline-policy
staging.solanasis.compublic_marketing_sitePublic staging marketing site by design.Noapprovedbaseline-policy
solanashq.compublic_marketing_sitePublic warmup/outreach domain by design.Noapprovedbaseline-policy
autoconfig.solanasis.comnon_web_dnsMail autodiscovery record, not a web application.Noapprovedbaseline-policy
autodiscover.solanasis.comnon_web_dnsMail autodiscovery record, not a web application.Noapprovedbaseline-policy
mail.solanasis.comthird_party_managedMail infrastructure is not managed through the local tunnel workflow.Noapprovedbaseline-policy
cpanel.solanasis.comthird_party_managedThird-party hosted control panel service.Noapprovedbaseline-policy
cpcalendars.solanasis.comthird_party_managedThird-party hosted calendar service.Noapprovedbaseline-policy
cpcontacts.solanasis.comthird_party_managedThird-party hosted contacts service.Noapprovedbaseline-policy
webdisk.solanasis.comthird_party_managedThird-party hosted control panel service.Noapprovedbaseline-policy
webmail.solanasis.comthird_party_managedThird-party hosted control panel service.Noapprovedbaseline-policy
whm.solanasis.comthird_party_managedThird-party hosted control panel service.Noapprovedbaseline-policy
go.solanasis.comthird_party_managedShort.io redirect domain, not a local tunnel-backed service.Noapprovedbaseline-policy

Pattern Exceptions

PatternCategoryReasonScope
_domainkeynon_web_dnsDKIM DNS records are not web applications.Any hostname containing _domainkey

GitHub Repositories (dzinreach)

RepoVisibilityPurposeLast Updated
solanasis-docsPrivateDocumentation vault (Obsidian)2026-03-22
solanasis-sitePrivateMarketing website (Astro + Cloudflare Pages)2026-03-22
solanasis-scriptsPrivateOperational scripts (Baserow CLI, image gen, sync)2026-03-22
solanasis_crmPrivateCRM Frappe app (Vue 3 SPA frontend)2026-03-15
solanasis_corePrivateCore Frappe app (custom doctypes)2026-03-14
frappe_dockerPrivateCustom ERPNext Docker deployment2026-03-22
sage-ePrivateSAM system (.NET Framework 4.8)2026-03-14
erpnextPublicERPNext fork (version-16)2026-03-11
frappePublicFrappe framework fork (version-16)2026-03-11
infisical-backupsPrivateEncrypted Infisical backups (daily/weekly)2026-03-24
zasage-scriptsPrivateUtility scripts2026-03-14

GitHub Secrets

solanasis_crm / solanasis_core

SecretPurpose
ERPNEXT_URLERPNext API endpoint (https://erp.solanasis.com)
ERPNEXT_API_KEYAPI key for claude-bot@solanasis.com
ERPNEXT_API_SECRETAPI secret for claude-bot@solanasis.com

solanasis-scripts

All of the above, plus:

SecretPurpose
BASEROW_BASE_URLSelf-hosted Baserow URL (https://baserow.solanasis.com)
BASEROW_DATABASE_IDBaserow database ID (54)
BASEROW_DB_TOKENBaserow database API token (claude-bot)
BASEROW_EMAIL / BASEROW_PASSWORDBaserow admin credentials (JWT auth)
CSV_SOURCE_DIRData source directory
GOOGLE_AI_STUDIO_API_KEY (x3)Image generation API keys
SHORT_IO_API_KEYURL shortener API key

solanasis-site

SecretPurpose
CLOUDFLARE_ACCOUNT_IDSolanasis Cloudflare account
CLOUDFLARE_API_TOKENPages deployment token
CLOUDFLARE_PAGES_PROJECT”solanasis-site”
BREVO_API_KEY / SENDER_EMAIL / SENDER_NAME / LIST_IDEmail marketing
TURNSTILE_SITE_KEY / SECRET_KEYSpam protection
SITE_URL / SITE_DOMAIN / SITE_NAMESite config
GH_USERNAME / GH_REPO_NAMEGitHub integration

System Resources (as of 2026-03-22)

ResourceTotalUsedAvailable
RAM47 GB21 GB~26 GB
Disk1 TB200 GB757 GB
CPUs16
Docker images40 GB11 GB active29 GB reclaimable
Docker volumes2.8 GB1.5 GB active1.3 GB reclaimable

Port Map (all in-use ports)

22    SSH
80    Caddy (HTTP)
443   Caddy (HTTPS)
2022  SSH (alternate)
2379  Milvus (etcd)
4000  LiteLLM
5154  Matchkeyz API
5155  .NET dev
5364  .NET dev
5464  .NET dev
6333  Qdrant
7474  Neo4j HTTP
7687  Neo4j Bolt
8080  ERPNext (Docker)
8580  Infisical (Docker)
8765  OpenMemory MCP
8800  Graphiti MCP
8880  Baserow (Docker)
3001  Supabase Studio (Docker, local-only)
3002  Metabase (Docker, local-only)
3003  Quartz Docs (Docker, tunneled via docs.solanasis.com)
8055  Directus CRM (Docker, tunneled via db.solanasis.com)
8881  CRM Quick Search (Docker, local-only)
9091  Milvus metrics
19530 Milvus gRPC
20241 cloudflared metrics