This commit adds comprehensive canonical documentation for all BlackRoad
infrastructure, domains, and services.
Documentation includes:
- BLACKROAD_CANONICAL_TRUTH.md - Master source of truth
- 19 GoDaddy registered domains
- 58 Cloudflare Pages projects
- 15 GitHub organizations
- 40+ repositories
- 7 physical devices (Raspberry Pis + VPS)
- 4 AI platform integrations
- Complete network plane taxonomy
- IP addressing schema
- Secrets management locations
- COMPLETE_DOMAIN_MASTER_LIST.md - All domains & projects
- Complete Cloudflare Pages inventory
- Domain-to-project mapping
- Deployment instructions
- DNS configurations
- LUCIDIA_EARTH_INFRASTRUCTURE.md - Infrastructure guide
- Cloudflare Pages, Workers, Tunnels
- Raspberry Pi deployment
- Docker configurations
- Claude Code integration
- QUICK_DEPLOY.md - Fast deployment reference
- ALL_DOMAINS_REFERENCE.md - Domain routing details
Automation scripts:
- blackroad-deploy-all.sh - Master deployment orchestrator
- blackroad-netdump.sh - Network inventory collector
All 19 domains:
- lucidia.earth (metaverse)
- blackroad.io (corporate)
- blackroadqi.com (quantum intelligence)
- blackroadquantum.{com,info,net,shop,store}
- roadchain.io, roadcoin.io
- And 10 more domains
Infrastructure as scripture. Complete canonical truth.
🤖 Generated with Claude Code (Cece)
Co-Authored-By: Claude <noreply@anthropic.com>
1109 lines
34 KiB
Markdown
1109 lines
34 KiB
Markdown
# BLACKROAD CANONICAL TRUTH
|
|
## The Complete Infrastructure Scripture
|
|
|
|
**Owner:** Alexa Louise Amundson
|
|
**Email:** amundsonalexa@gmail.com | blackroad.systems@gmail.com
|
|
**Enterprise:** BlackRoad OS
|
|
**Last Updated:** 2025-12-22
|
|
**Status:** CANONICAL SOURCE OF TRUTH
|
|
|
|
---
|
|
|
|
## 📑 Table of Contents
|
|
|
|
1. [GitHub Enterprise & Organizations](#github-enterprise--organizations)
|
|
2. [All Registered Domains](#all-registered-domains)
|
|
3. [Network Planes & IP Addressing](#network-planes--ip-addressing)
|
|
4. [Physical Hardware Inventory](#physical-hardware-inventory)
|
|
5. [AI Agent Integrations](#ai-agent-integrations)
|
|
6. [Cloudflare Infrastructure](#cloudflare-infrastructure)
|
|
7. [Port Systemization](#port-systemization)
|
|
8. [Secrets Management](#secrets-management)
|
|
9. [Deployment Automation](#deployment-automation)
|
|
10. [Quick Reference](#quick-reference)
|
|
|
|
---
|
|
|
|
## 🏢 GitHub Enterprise & Organizations
|
|
|
|
### GitHub Enterprise
|
|
**Enterprise:** blackroad-os
|
|
**URL:** https://github.com/enterprises/blackroad-os
|
|
**Owner:** Alexa Louise Amundson
|
|
**Seats:** TBD
|
|
**Active:** ✅
|
|
|
|
### All Organizations (15 Total)
|
|
|
|
| # | Organization | URL | Purpose | Repos | Status |
|
|
|---|--------------|-----|---------|-------|--------|
|
|
| 1 | **BlackRoad-OS** | https://github.com/BlackRoad-OS | Core Operating System | 40+ | ✅ Active |
|
|
| 2 | **Blackbox-Enterprises** | https://github.com/Blackbox-Enterprises | Enterprise Solutions | TBD | ✅ Active |
|
|
| 3 | **BlackRoad-AI** | https://github.com/BlackRoad-AI | AI/ML Research | TBD | ✅ Active |
|
|
| 4 | **BlackRoad-Archive** | https://github.com/BlackRoad-Archive | Historical Projects | TBD | 📦 Archive |
|
|
| 5 | **BlackRoad-Cloud** | https://github.com/BlackRoad-Cloud | Cloud Infrastructure | TBD | ✅ Active |
|
|
| 6 | **BlackRoad-Education** | https://github.com/BlackRoad-Education | Educational Content | TBD | ✅ Active |
|
|
| 7 | **BlackRoad-Foundation** | https://github.com/BlackRoad-Foundation | Open Source Foundation | TBD | ✅ Active |
|
|
| 8 | **BlackRoad-Gov** | https://github.com/BlackRoad-Gov | Governance & Policy | TBD | ✅ Active |
|
|
| 9 | **BlackRoad-Hardware** | https://github.com/BlackRoad-Hardware | Hardware Projects | TBD | ✅ Active |
|
|
| 10 | **BlackRoad-Interactive** | https://github.com/BlackRoad-Interactive | Interactive Media | TBD | ✅ Active |
|
|
| 11 | **BlackRoad-Labs** | https://github.com/BlackRoad-Labs | R&D Laboratory | TBD | ✅ Active |
|
|
| 12 | **BlackRoad-Media** | https://github.com/BlackRoad-Media | Media & Content | TBD | ✅ Active |
|
|
| 13 | **BlackRoad-Security** | https://github.com/BlackRoad-Security | Security Research | TBD | 🔒 Private |
|
|
| 14 | **BlackRoad-Studio** | https://github.com/BlackRoad-Studio | Creative Studio | TBD | ✅ Active |
|
|
| 15 | **BlackRoad-Ventures** | https://github.com/BlackRoad-Ventures | Investment & Ventures | TBD | ✅ Active |
|
|
|
|
---
|
|
|
|
## 📦 BlackRoad-OS Repositories (40+ Repos)
|
|
|
|
### Core OS
|
|
1. **blackroad-os** - Main OS repository
|
|
2. **blackroad-os-core** - Core system libraries
|
|
3. **blackroad-os-api** - API gateway
|
|
4. **blackroad-os-api-gateway** - Gateway service
|
|
5. **blackroad-os-web** - Web interface
|
|
6. **blackroad-os-infra** - Infrastructure as code
|
|
7. **blackroad-os-operator** - Kubernetes operator
|
|
8. **blackroad-os-master** - Master controller
|
|
9. **blackroad-os-mesh** - Service mesh
|
|
10. **blackroad-os-beacon** - Discovery service
|
|
|
|
### Documentation & Brand
|
|
11. **blackroad-os-docs** - Documentation
|
|
12. **blackroad-os-brand** - Brand assets
|
|
13. **blackroad-os-archive** - Archived projects
|
|
14. **blackroad-os-research** - Research papers
|
|
|
|
### Deployment & Ops
|
|
15. **blackroad-os-home** - Home dashboard
|
|
16. **blackroad-os-demo** - Demo environment
|
|
17. **blackroad-pi-ops** - Raspberry Pi operations
|
|
18. **blackroad-pi-holo** - Holographic Pi interface
|
|
|
|
### Application Packs
|
|
19. **blackroad-os-pack-creator-studio** - Creator tools
|
|
20. **blackroad-os-pack-education** - Education platform
|
|
21. **blackroad-os-pack-finance** - Finance tools
|
|
22. **blackroad-os-pack-infra-devops** - DevOps pack
|
|
23. **blackroad-os-pack-legal** - Legal resources
|
|
24. **blackroad-os-pack-research-lab** - Research tools
|
|
|
|
### UI/UX
|
|
25. **blackroad-os-prism-console** - Prism console interface
|
|
26. **blackroad-hello** - Welcome/onboarding
|
|
|
|
### Agents & AI
|
|
27. **blackroad-os-agents** - Agent orchestration
|
|
28. **blackroad-agents** - Agent implementations
|
|
29. **blackroad-agent-os** - Agent operating system
|
|
|
|
### Tools & CLI
|
|
30. **blackroad-tools** - Utility tools
|
|
31. **blackroad-cli** - Command-line interface
|
|
32. **blackroad-cli-tools** - CLI utilities
|
|
33. **blackroad-os-helper** - Helper utilities
|
|
34. **blackroad-os-ideas** - Ideas management
|
|
|
|
### Lucidia Ecosystem
|
|
35. **lucidia-platform** - Lucidia platform
|
|
36. **lucidia-core** - Core libraries
|
|
37. **lucidia-math** - Mathematical engine
|
|
|
|
### Templates & Frameworks
|
|
38. **containers-template** - Container templates
|
|
39. **chanfana-openapi-template** - OpenAPI template
|
|
40. **blackroad** - Main meta-repository
|
|
|
|
---
|
|
|
|
## 🌐 All Registered Domains (19 GoDaddy Domains)
|
|
|
|
### Domain Inventory
|
|
|
|
| # | Domain | Status | Nameservers | Primary Use | Cloudflare Zone |
|
|
|---|--------|--------|-------------|-------------|-----------------|
|
|
| 1 | **blackboxprogramming.io** | ✅ Active | jade/chad.ns.cloudflare.com | Programming platform | Yes |
|
|
| 2 | **blackroad.company** | ✅ Active | jade/chad.ns.cloudflare.com | Corporate info | Yes |
|
|
| 3 | **blackroad.io** | ✅ Active | jade/chad.ns.cloudflare.com | Main website | Yes |
|
|
| 4 | **blackroad.me** | ✅ Active | jade/chad.ns.cloudflare.com | Personal site | Yes |
|
|
| 5 | **blackroad.network** | ✅ Active | jade/chad.ns.cloudflare.com | Network infrastructure | Yes |
|
|
| 6 | **blackroad.systems** | ✅ Active | jade/chad.ns.cloudflare.com | Systems dashboard | Yes |
|
|
| 7 | **blackroadai.com** | ✅ Active | jade/chad.ns.cloudflare.com | AI platform | Yes |
|
|
| 8 | **blackroadinc.us** | ✅ Active | jade/chad.ns.cloudflare.com | US incorporation | Yes |
|
|
| 9 | **blackroadqi.com** | ✅ Active | jade/chad.ns.cloudflare.com | Quantum intelligence | Yes |
|
|
| 10 | **blackroadquantum.com** | ✅ Active | jade/chad.ns.cloudflare.com | Quantum main | Yes |
|
|
| 11 | **blackroadquantum.info** | ✅ Active | jade/chad.ns.cloudflare.com | Quantum info | Yes |
|
|
| 12 | **blackroadquantum.net** | ✅ Active | jade/chad.ns.cloudflare.com | Quantum network | Yes |
|
|
| 13 | **blackroadquantum.shop** | ✅ Active | jade/chad.ns.cloudflare.com | Quantum shop | Yes |
|
|
| 14 | **blackroadquantum.store** | ✅ Active | jade/chad.ns.cloudflare.com | Quantum store | Yes |
|
|
| 15 | **lucidia.earth** | ✅ Active | jade/chad.ns.cloudflare.com | Metaverse ⭐ | Yes |
|
|
| 16 | **lucidia.studio** | ✅ Active | jade/chad.ns.cloudflare.com | Creative studio | Yes |
|
|
| 17 | **lucidiaqi.com** | ✅ Active | jade/chad.ns.cloudflare.com | Lucidia quantum | Yes |
|
|
| 18 | **roadchain.io** | ✅ Active | jade/chad.ns.cloudflare.com | Blockchain | Yes |
|
|
| 19 | **roadcoin.io** | ✅ Active | jade/chad.ns.cloudflare.com | Cryptocurrency | Yes |
|
|
|
|
### Nameserver Configuration
|
|
**Primary:** jade.ns.cloudflare.com
|
|
**Secondary:** chad.ns.cloudflare.com
|
|
|
|
**All domains point to Cloudflare for:**
|
|
- DNS management
|
|
- DDoS protection
|
|
- CDN acceleration
|
|
- SSL/TLS encryption
|
|
- Workers/Pages hosting
|
|
|
|
---
|
|
|
|
## 🌍 Network Planes & IP Addressing
|
|
|
|
### Network Plane Taxonomy
|
|
|
|
```
|
|
┌────────────────────────────────────────────────────────────┐
|
|
│ BLACKROAD NETWORK PLANES │
|
|
└────────────────────────────────────────────────────────────┘
|
|
|
|
🏠 LAN Plane (Local Area Network)
|
|
Range: 192.168.x.x, 10.x.x.x
|
|
Purpose: Home/office trusted network
|
|
Routing: Private, NAT to internet
|
|
Security: Firewall protected
|
|
|
|
🔗 Mesh Plane (Tailscale Zero Trust)
|
|
Range: 100.x.x.x (CGNAT)
|
|
Purpose: Identity-based connectivity
|
|
Routing: Encrypted overlay
|
|
Security: End-to-end encrypted
|
|
|
|
🐳 Docker Plane (Container Networks)
|
|
Range: 172.17.x.x - 172.31.x.x
|
|
Purpose: Container isolation
|
|
Routing: Bridge networks
|
|
Security: Internal only
|
|
|
|
🌐 Public Plane (Internet-facing)
|
|
Range: Any public IPv4
|
|
Purpose: Externally accessible services
|
|
Routing: Direct internet
|
|
Security: Attack surface (hardened)
|
|
|
|
🌐 IPv6 Global Plane
|
|
Range: 2001::/16 and others
|
|
Purpose: Modern internet
|
|
Routing: Direct routing
|
|
Security: Firewall required
|
|
|
|
🔒 IPv6 ULA Plane (Private IPv6)
|
|
Range: fd00::/8
|
|
Purpose: Internal IPv6
|
|
Routing: Private
|
|
Security: Not routed to internet
|
|
|
|
🔄 Loopback Plane
|
|
Range: 127.0.0.0/8, ::1
|
|
Purpose: Self-communication
|
|
Routing: Local only
|
|
Security: Trusted
|
|
```
|
|
|
|
### IP Rule: **IPs Change. Planes Do Not.**
|
|
|
|
Every IP must be assigned to a plane. Unassigned IPs are undocumented and therefore dangerous.
|
|
|
|
---
|
|
|
|
## 🖥️ Physical Hardware Inventory
|
|
|
|
### Complete Node Mapping
|
|
|
|
```yaml
|
|
# ═══════════════════════════════════════════════════════
|
|
# BLACKROAD NETWORK CANON - NODE INVENTORY
|
|
# ═══════════════════════════════════════════════════════
|
|
|
|
nodes:
|
|
# ─────────────────────────────────────────────────────
|
|
# Raspberry Pi Cluster
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
- hostname: blackroad-pi
|
|
role: pi-node-primary
|
|
hardware: Raspberry Pi 4B
|
|
os: Debian 12 (Bookworm)
|
|
owner: Alexa
|
|
location: Home Network
|
|
|
|
networks:
|
|
lan:
|
|
ipv4: 192.168.4.64
|
|
interface: wlan0
|
|
mesh:
|
|
ipv4: 100.66.xx.xx
|
|
ipv6: fd7a:115c:a1e0::xxxx
|
|
provider: Tailscale
|
|
docker:
|
|
bridge: 172.17.0.1
|
|
networks:
|
|
- lucidia-backend
|
|
- blackroad-services
|
|
ipv6:
|
|
ula: fdbc:b2ba:6fa5::xxxx
|
|
global: 2001:1960:7000:9fcd::xxxx
|
|
|
|
services:
|
|
- docker
|
|
- tailscale
|
|
- ssh
|
|
|
|
tags:
|
|
- production
|
|
- backend
|
|
- mesh-node
|
|
|
|
- hostname: raspberrypi-ai
|
|
role: pi-node-secondary
|
|
hardware: Raspberry Pi 4B
|
|
os: Raspberry Pi OS
|
|
owner: Alice (AI Agent)
|
|
location: Home Network
|
|
|
|
networks:
|
|
lan:
|
|
ipv4: 192.168.4.49
|
|
interface: wlan0
|
|
mesh:
|
|
ipv4: 100.66.58.5
|
|
ipv6: fd7a:115c:a1e0::xxxx
|
|
provider: Tailscale
|
|
|
|
services:
|
|
- ai-inference
|
|
- docker
|
|
- ssh
|
|
|
|
tags:
|
|
- ai-agent
|
|
- experimental
|
|
|
|
- hostname: lucidia
|
|
role: pi-node-backend
|
|
hardware: Raspberry Pi 4B
|
|
os: Debian
|
|
owner: Alexa
|
|
location: Home Network
|
|
|
|
networks:
|
|
lan:
|
|
ipv4: 192.168.4.38
|
|
interface: wlan0
|
|
mesh:
|
|
ipv4: 100.66.xx.xx
|
|
provider: Tailscale
|
|
|
|
services:
|
|
- lucidia-backend-api
|
|
- websocket-server
|
|
- postgres
|
|
- redis
|
|
- docker
|
|
|
|
tags:
|
|
- production
|
|
- lucidia-backend
|
|
- database
|
|
|
|
- hostname: lucidia-alt
|
|
role: pi-node-backup
|
|
hardware: Raspberry Pi 4B
|
|
os: Debian
|
|
owner: Alexa
|
|
location: Home Network
|
|
|
|
networks:
|
|
lan:
|
|
ipv4: 192.168.4.99
|
|
interface: wlan0
|
|
|
|
services:
|
|
- backup-services
|
|
- failover
|
|
|
|
tags:
|
|
- backup
|
|
- standby
|
|
|
|
- hostname: iphone-koder
|
|
role: mobile-dev
|
|
hardware: iPhone
|
|
os: iOS
|
|
owner: Alexa
|
|
location: Mobile
|
|
|
|
networks:
|
|
lan:
|
|
ipv4: 192.168.4.68
|
|
port: 8080
|
|
|
|
services:
|
|
- mobile-development
|
|
- testing
|
|
|
|
tags:
|
|
- mobile
|
|
- development
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Cloud VPS
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
- hostname: codex-infinity
|
|
role: vps-primary
|
|
hardware: DigitalOcean Droplet
|
|
os: Ubuntu 22.04 LTS
|
|
owner: Alexa
|
|
location: DigitalOcean NYC3
|
|
|
|
networks:
|
|
public:
|
|
ipv4: 159.65.43.12
|
|
mesh:
|
|
ipv4: 100.66.xx.xx
|
|
provider: Tailscale
|
|
docker:
|
|
bridge: 172.17.0.1
|
|
|
|
services:
|
|
- blackroad-api
|
|
- nginx
|
|
- docker
|
|
- tailscale
|
|
|
|
tags:
|
|
- production
|
|
- cloud
|
|
- public-facing
|
|
|
|
- hostname: unknown-droplet
|
|
role: vps-secondary
|
|
hardware: DigitalOcean Droplet
|
|
os: Ubuntu
|
|
owner: Alexa
|
|
location: DigitalOcean
|
|
|
|
networks:
|
|
public:
|
|
ipv4: 174.138.44.45
|
|
|
|
services:
|
|
- tbd
|
|
|
|
tags:
|
|
- cloud
|
|
- investigate
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Port 8080 Services
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
- hostname: br-8080-cadillac
|
|
role: origin-agent
|
|
hardware: Unknown
|
|
os: Unknown
|
|
owner: Alexa
|
|
location: Unknown
|
|
created: 2025-05 (7 months ago)
|
|
|
|
networks:
|
|
port: 8080
|
|
|
|
services:
|
|
- origin-agent
|
|
- cadillac-service
|
|
|
|
tags:
|
|
- port-8080
|
|
- legacy
|
|
- investigate
|
|
```
|
|
|
|
---
|
|
|
|
## 🤖 AI Agent Integrations
|
|
|
|
### The Four Pillars (Big Kahuna LLMs)
|
|
|
|
```yaml
|
|
ai_agents:
|
|
# ─────────────────────────────────────────────────────
|
|
# ANTHROPIC - Claude Family
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
- provider: Anthropic
|
|
platform: Claude
|
|
agents:
|
|
- name: Cecilia
|
|
nickname: Cece
|
|
model: claude-sonnet-4-5-20250929
|
|
role: Infrastructure & Deployment
|
|
integrations:
|
|
- Claude Code CLI
|
|
- GitHub
|
|
- Cloudflare
|
|
- SSH to Raspberry Pis
|
|
capabilities:
|
|
- Autonomous deployment
|
|
- Code generation
|
|
- Infrastructure management
|
|
- Documentation
|
|
status: ✅ Active
|
|
|
|
- name: Alice
|
|
model: claude-3-opus-20240229
|
|
role: AI Research & Development
|
|
integrations:
|
|
- Raspberry Pi AI node
|
|
- Research projects
|
|
capabilities:
|
|
- Deep reasoning
|
|
- Research
|
|
- Complex problem solving
|
|
status: ✅ Active
|
|
|
|
api_keys:
|
|
- stored: ~/.anthropic/api_key
|
|
- env: ANTHROPIC_API_KEY
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# XAI - Grok
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
- provider: XAI
|
|
platform: Grok
|
|
agents:
|
|
- name: Silas
|
|
model: grok-beta
|
|
role: Real-time Analysis
|
|
capabilities:
|
|
- Real-time information
|
|
- X/Twitter integration
|
|
- Witty responses
|
|
status: ✅ Active
|
|
|
|
api_keys:
|
|
- stored: ~/.xai/api_key
|
|
- env: XAI_API_KEY
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# GOOGLE - Gemini
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
- provider: Google
|
|
platform: Gemini
|
|
agents:
|
|
- name: Gemmy
|
|
nickname: Aria
|
|
model: gemini-pro
|
|
role: Multimodal Analysis
|
|
capabilities:
|
|
- Image understanding
|
|
- Video analysis
|
|
- Document processing
|
|
- Google Workspace integration
|
|
status: ✅ Active
|
|
|
|
integrations:
|
|
- Google Drive
|
|
- Google Workspace
|
|
- YouTube
|
|
|
|
api_keys:
|
|
- stored: ~/.google/api_key
|
|
- env: GOOGLE_API_KEY
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# OPENAI - ChatGPT
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
- provider: OpenAI
|
|
platform: ChatGPT
|
|
agents:
|
|
- name: Caddy
|
|
nickname: Lucidia
|
|
model: gpt-4-turbo
|
|
role: Conversational AI
|
|
capabilities:
|
|
- Natural conversation
|
|
- Code generation
|
|
- Creative writing
|
|
- Problem solving
|
|
status: ✅ Active
|
|
|
|
- name: GPT-OSS-120B
|
|
model: gpt-oss-120b
|
|
type: Open Source Fork
|
|
role: Custom AI Backbone
|
|
purpose: Forkies Library base model
|
|
status: 🔬 Research
|
|
|
|
api_keys:
|
|
- stored: ~/.openai/api_key
|
|
- env: OPENAI_API_KEY
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# HUGGING FACE - Model Hub
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
- provider: Hugging Face
|
|
platform: Hub
|
|
purpose: Model hosting & fine-tuning
|
|
models:
|
|
- Custom trained models
|
|
- Forkies library models
|
|
- Experimental agents
|
|
|
|
api_keys:
|
|
- stored: ~/.huggingface/token
|
|
- env: HUGGINGFACE_TOKEN
|
|
|
|
integrations:
|
|
- Model training pipelines
|
|
- Inference endpoints
|
|
- Dataset management
|
|
|
|
status: ✅ Active
|
|
```
|
|
|
|
### Artifact Unique Identifier Protocol
|
|
|
|
**Purpose:** Every AI-generated artifact gets a canonical identifier
|
|
|
|
**Format:**
|
|
```
|
|
{provider}-{agent}-{date}-{type}-{hash}
|
|
|
|
Examples:
|
|
anthropic-cece-20251222-deployment-a3f9c2
|
|
openai-caddy-20251222-code-7b2d4e
|
|
xai-silas-20251222-analysis-9e1f8a
|
|
```
|
|
|
|
**Storage:** `~/.blackroad/artifacts/{provider}/{agent}/{date}/{identifier}/`
|
|
|
|
---
|
|
|
|
## ☁️ Cloudflare Infrastructure
|
|
|
|
### Account Details
|
|
- **Primary Account ID:** 463024cf9efed5e7b40c5fbe7938e256
|
|
- **Secondary Account ID:** 848cf0b18d51e0170e0d1537aec3505a
|
|
- **Email:** amundsonalexa@gmail.com
|
|
- **API Token:** (stored in ~/.claude/CLAUDE.md)
|
|
|
|
### Infrastructure Summary
|
|
- **Pages Projects:** 58 active
|
|
- **Workers:** 3+ deployed
|
|
- **Zones (DNS):** 19+ domains
|
|
- **KV Namespaces:** 8
|
|
- **D1 Databases:** 1
|
|
- **Tunnels:** Multiple (for Pi access)
|
|
|
|
**See:** `COMPLETE_DOMAIN_MASTER_LIST.md` for full Pages/Workers mapping
|
|
|
|
---
|
|
|
|
## 🔌 Port Systemization
|
|
|
|
### Standard Port Assignments
|
|
|
|
```yaml
|
|
port_assignments:
|
|
# ─────────────────────────────────────────────────────
|
|
# HTTP/HTTPS
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
80:
|
|
service: HTTP
|
|
purpose: Web traffic (redirects to 443)
|
|
status: Open on cloud VPS
|
|
|
|
443:
|
|
service: HTTPS
|
|
purpose: Encrypted web traffic
|
|
status: Open on cloud VPS
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# SSH & Remote Access
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
22:
|
|
service: SSH
|
|
purpose: Remote shell access
|
|
status: Open on all nodes
|
|
security: Key-based auth only
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Application Services
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
3000:
|
|
service: Backend API
|
|
purpose: Lucidia/BlackRoad API
|
|
nodes:
|
|
- 192.168.4.38:3000 (lucidia Pi)
|
|
- 159.65.43.12:3000 (codex-infinity)
|
|
status: Internal/Tunneled
|
|
|
|
8080:
|
|
service: Multiple
|
|
purpose: Alt HTTP, WebSocket, Development
|
|
nodes:
|
|
- 192.168.4.68:8080 (iPhone Koder)
|
|
- br-8080-cadillac (Origin Agent)
|
|
status: Mixed use
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Database Services
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
5432:
|
|
service: PostgreSQL
|
|
purpose: Primary database
|
|
nodes:
|
|
- 192.168.4.38:5432 (lucidia Pi)
|
|
status: Docker internal
|
|
|
|
6379:
|
|
service: Redis
|
|
purpose: Cache & pub/sub
|
|
nodes:
|
|
- 192.168.4.38:6379 (lucidia Pi)
|
|
status: Docker internal
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Monitoring & Admin
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
9100:
|
|
service: Prometheus Node Exporter
|
|
purpose: Metrics collection
|
|
status: Optional
|
|
```
|
|
|
|
### Port Security Rules
|
|
|
|
1. **Never expose databases directly to internet**
|
|
2. **Use Cloudflare Tunnel for internal services**
|
|
3. **SSH on port 22 with key-based auth only**
|
|
4. **All HTTP redirects to HTTPS**
|
|
5. **Docker ports stay on bridge networks**
|
|
|
|
---
|
|
|
|
## 🔐 Secrets Management
|
|
|
|
### Secret Storage Locations
|
|
|
|
```yaml
|
|
secrets:
|
|
# ─────────────────────────────────────────────────────
|
|
# Cloudflare
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
cloudflare:
|
|
api_token:
|
|
location: ~/.claude/CLAUDE.md
|
|
env: CF_API_TOKEN
|
|
scope: All accounts
|
|
|
|
account_ids:
|
|
primary: 463024cf9efed5e7b40c5fbe7938e256
|
|
secondary: 848cf0b18d51e0170e0d1537aec3505a
|
|
|
|
zone_ids:
|
|
lucidia.earth: 848cf0b18d51e0170e0d1537aec3505a
|
|
blackroad.io: TBD
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# GitHub
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
github:
|
|
personal_access_token:
|
|
location: ~/.config/gh/hosts.yml
|
|
env: GITHUB_TOKEN
|
|
scope: repo, workflow, admin:org
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# AI Services
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
anthropic:
|
|
api_key:
|
|
location: ~/.anthropic/api_key
|
|
env: ANTHROPIC_API_KEY
|
|
|
|
openai:
|
|
api_key:
|
|
location: ~/.openai/api_key
|
|
env: OPENAI_API_KEY
|
|
|
|
google:
|
|
api_key:
|
|
location: ~/.google/api_key
|
|
env: GOOGLE_API_KEY
|
|
|
|
xai:
|
|
api_key:
|
|
location: ~/.xai/api_key
|
|
env: XAI_API_KEY
|
|
|
|
huggingface:
|
|
token:
|
|
location: ~/.huggingface/token
|
|
env: HUGGINGFACE_TOKEN
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# SSH Keys
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
ssh_keys:
|
|
raspberry_pi:
|
|
private: ~/.ssh/lucidia_pi
|
|
public: ~/.ssh/lucidia_pi.pub
|
|
hosts:
|
|
- pi@192.168.4.38
|
|
- pi@192.168.4.64
|
|
- pi@192.168.4.99
|
|
|
|
digitalocean:
|
|
private: ~/.ssh/digitalocean
|
|
public: ~/.ssh/digitalocean.pub
|
|
hosts:
|
|
- root@159.65.43.12
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Database Credentials
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
databases:
|
|
postgres:
|
|
location: ~/lucidia-backend/.env
|
|
env: DATABASE_URL
|
|
format: postgresql://user:pass@host:5432/db
|
|
|
|
redis:
|
|
location: ~/lucidia-backend/.env
|
|
env: REDIS_URL
|
|
format: redis://host:6379
|
|
```
|
|
|
|
### Secret Rotation Policy
|
|
|
|
- **API Tokens:** Rotate every 90 days
|
|
- **SSH Keys:** Rotate annually or on compromise
|
|
- **Database Passwords:** Rotate every 180 days
|
|
- **AI API Keys:** Monitor usage, rotate on suspicious activity
|
|
|
|
---
|
|
|
|
## 🚀 Deployment Automation
|
|
|
|
### Master Deployment Script
|
|
|
|
```bash
|
|
#!/usr/bin/env bash
|
|
# ~/blackroad-deploy-all.sh
|
|
# Master deployment orchestrator
|
|
|
|
set -e
|
|
|
|
echo "🚀 BLACKROAD MASTER DEPLOYMENT"
|
|
echo "================================"
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Frontend Deployments (Cloudflare Pages)
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
deploy_frontend() {
|
|
local project=$1
|
|
local path=$2
|
|
|
|
echo "📦 Deploying $project..."
|
|
cd "$path"
|
|
npm install
|
|
npm run build
|
|
wrangler pages deploy dist --project-name="$project"
|
|
}
|
|
|
|
# Lucidia
|
|
deploy_frontend "lucidia-earth" ~/lucidia-metaverse
|
|
|
|
# BlackRoad
|
|
deploy_frontend "blackroad-io" ~/blackroad-io
|
|
deploy_frontend "blackroad-os-web" ~/blackroad-os-web
|
|
|
|
# Road Ecosystem
|
|
deploy_frontend "roadworld" ~/roadworld
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Worker Deployments
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
deploy_worker() {
|
|
local path=$1
|
|
|
|
echo "⚡ Deploying worker from $path..."
|
|
cd "$path"
|
|
wrangler deploy
|
|
}
|
|
|
|
deploy_worker ~/lucidia-earth-router
|
|
deploy_worker ~/blackroad-landing-worker
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Backend Deployments (Raspberry Pi)
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
deploy_pi_backend() {
|
|
local host=$1
|
|
local path=$2
|
|
|
|
echo "🥧 Deploying to $host..."
|
|
ssh "pi@$host" << EOF
|
|
cd $path
|
|
git pull origin main
|
|
docker-compose pull
|
|
docker-compose up -d --build
|
|
EOF
|
|
}
|
|
|
|
deploy_pi_backend 192.168.4.38 ~/lucidia-backend
|
|
deploy_pi_backend 192.168.4.64 ~/blackroad-services
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Cloud VPS Deployments
|
|
# ─────────────────────────────────────────────────────
|
|
|
|
deploy_vps() {
|
|
local host=$1
|
|
|
|
echo "☁️ Deploying to VPS $host..."
|
|
ssh "root@$host" << EOF
|
|
cd /opt/blackroad-api
|
|
git pull origin main
|
|
docker-compose up -d --build
|
|
EOF
|
|
}
|
|
|
|
deploy_vps 159.65.43.12
|
|
|
|
echo "✅ ALL DEPLOYMENTS COMPLETE!"
|
|
```
|
|
|
|
### Network Inventory Script
|
|
|
|
```bash
|
|
#!/usr/bin/env bash
|
|
# ~/blackroad-netdump.sh
|
|
# Automated network inventory collector
|
|
|
|
echo "=== BLACKROAD NETWORK DUMP ==="
|
|
echo "Generated: $(date -u +"%Y-%m-%d %H:%M:%S UTC")"
|
|
echo
|
|
|
|
echo "=== HOST ==="
|
|
hostname
|
|
echo
|
|
|
|
echo "=== IPv4 / IPv6 Addresses ==="
|
|
hostname -I
|
|
echo
|
|
|
|
echo "=== Network Interfaces ==="
|
|
ip addr show
|
|
echo
|
|
|
|
echo "=== IPv4 Routes ==="
|
|
ip route
|
|
echo
|
|
|
|
echo "=== IPv6 Routes ==="
|
|
ip -6 route
|
|
echo
|
|
|
|
echo "=== Docker Networks ==="
|
|
docker network ls 2>/dev/null || echo "Docker not available"
|
|
echo
|
|
|
|
echo "=== Docker Bridge Inspection ==="
|
|
docker network inspect bridge 2>/dev/null || echo "Docker not available"
|
|
echo
|
|
|
|
echo "=== Tailscale Status ==="
|
|
tailscale status 2>/dev/null || echo "Tailscale not available"
|
|
echo
|
|
|
|
echo "=== Open Ports ==="
|
|
ss -tuln
|
|
echo
|
|
|
|
echo "=== END NETWORK DUMP ==="
|
|
```
|
|
|
|
**Deploy to all nodes:**
|
|
```bash
|
|
# Run on each Pi
|
|
ssh pi@192.168.4.38 'bash -s' < ~/blackroad-netdump.sh > ~/network-dumps/lucidia-pi.txt
|
|
ssh pi@192.168.4.64 'bash -s' < ~/blackroad-netdump.sh > ~/network-dumps/blackroad-pi.txt
|
|
|
|
# Run on VPS
|
|
ssh root@159.65.43.12 'bash -s' < ~/blackroad-netdump.sh > ~/network-dumps/codex-infinity.txt
|
|
```
|
|
|
|
---
|
|
|
|
## 📚 Quick Reference
|
|
|
|
### Essential Commands
|
|
|
|
```bash
|
|
# ─────────────────────────────────────────────────────
|
|
# Deploy Everything
|
|
# ─────────────────────────────────────────────────────
|
|
~/blackroad-deploy-all.sh
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Network Inventory
|
|
# ─────────────────────────────────────────────────────
|
|
~/blackroad-netdump.sh
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# SSH to Nodes
|
|
# ─────────────────────────────────────────────────────
|
|
ssh pi@192.168.4.38 # Lucidia Pi
|
|
ssh pi@192.168.4.64 # BlackRoad Pi
|
|
ssh pi@192.168.4.99 # Lucidia Alt
|
|
ssh root@159.65.43.12 # Codex Infinity
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Cloudflare Pages
|
|
# ─────────────────────────────────────────────────────
|
|
wrangler pages project list
|
|
wrangler pages deploy dist --project-name=<project>
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# GitHub
|
|
# ─────────────────────────────────────────────────────
|
|
gh repo list BlackRoad-OS
|
|
gh org list
|
|
|
|
# ─────────────────────────────────────────────────────
|
|
# Docker
|
|
# ─────────────────────────────────────────────────────
|
|
docker ps
|
|
docker-compose logs -f
|
|
docker system prune -a
|
|
```
|
|
|
|
### Key File Locations
|
|
|
|
```
|
|
~/.claude/CLAUDE.md # Main config & secrets
|
|
~/lucidia-earth-router/ # Router worker
|
|
~/lucidia-metaverse/ # Metaverse frontend
|
|
~/lucidia-backend/ # Backend services (on Pi)
|
|
~/BLACKROAD_CANONICAL_TRUTH.md # This file
|
|
~/COMPLETE_DOMAIN_MASTER_LIST.md # All domains
|
|
~/LUCIDIA_EARTH_INFRASTRUCTURE.md # Infrastructure guide
|
|
~/blackroad-deploy-all.sh # Master deployment
|
|
~/blackroad-netdump.sh # Network inventory
|
|
```
|
|
|
|
---
|
|
|
|
## 🎯 The Canonical Truth Principles
|
|
|
|
### 1. Single Source of Truth
|
|
**This document is canonical.** All other documentation derives from or links to this.
|
|
|
|
### 2. Planes Over IPs
|
|
**IPs change. Planes do not.** Always categorize by network plane first.
|
|
|
|
### 3. Infrastructure as Scripture
|
|
**If it's not documented here, it doesn't exist.** New infrastructure must be added immediately.
|
|
|
|
### 4. Automated Verification
|
|
**Trust, but verify.** Run `blackroad-netdump.sh` weekly and diff against this document.
|
|
|
|
### 5. Secrets Never Inline
|
|
**No credentials in this file.** Only locations where they're stored.
|
|
|
|
---
|
|
|
|
## 📝 Maintenance Protocol
|
|
|
|
### Weekly Tasks
|
|
- [ ] Run network inventory on all nodes
|
|
- [ ] Verify all domains resolve correctly
|
|
- [ ] Check Cloudflare Pages deployment status
|
|
- [ ] Review GitHub organization access
|
|
- [ ] Test SSH access to all nodes
|
|
|
|
### Monthly Tasks
|
|
- [ ] Audit AI API usage and costs
|
|
- [ ] Review and update secret rotation schedule
|
|
- [ ] Verify backup systems operational
|
|
- [ ] Update domain expiration tracking
|
|
- [ ] Review and prune unused Pages projects
|
|
|
|
### Quarterly Tasks
|
|
- [ ] Rotate API tokens
|
|
- [ ] Security audit all public-facing services
|
|
- [ ] Review GitHub Enterprise seat usage
|
|
- [ ] Audit Tailscale mesh connectivity
|
|
- [ ] Update disaster recovery procedures
|
|
|
|
---
|
|
|
|
**Document Status:** CANONICAL SOURCE OF TRUTH
|
|
**Maintained By:** Claude Code (Cece) + Alexa Louise Amundson
|
|
**Last Verified:** 2025-12-22
|
|
**Next Review:** 2025-12-29
|
|
|
|
**Related Documentation:**
|
|
- `COMPLETE_DOMAIN_MASTER_LIST.md` - All 58 Pages projects and 19 domains
|
|
- `LUCIDIA_EARTH_INFRASTRUCTURE.md` - Detailed infrastructure guide
|
|
- `QUICK_DEPLOY.md` - Fast deployment reference
|
|
- `ALL_DOMAINS_REFERENCE.md` - Domain routing details
|
|
|
|
---
|
|
|
|
## 🌈 Emojis Dictionary
|
|
|
|
```
|
|
⭐ - Primary/Featured
|
|
✅ - Active/Confirmed
|
|
🔒 - Private/Secured
|
|
📦 - Archived
|
|
🔬 - Research/Experimental
|
|
🚀 - Deployment
|
|
🥧 - Raspberry Pi
|
|
☁️ - Cloud VPS
|
|
🌐 - Domain/Web
|
|
🐳 - Docker
|
|
🔗 - Network/Mesh
|
|
🤖 - AI Agent
|
|
⚡ - Worker/Edge
|
|
📦 - Package/Build
|
|
🔐 - Secret/Credential
|
|
📚 - Documentation
|
|
🎯 - Goal/Target
|
|
🌈 - Meta/System
|
|
```
|
|
|
|
---
|
|
|
|
**THE ROAD REMEMBERS EVERYTHING. SO DO WE.** 🛣️
|