Skip to Content
INTERACTIVE TOPOLOGY GRAPH • ARCHITECTURAL DECISION RECORDS (ADR) • ZERO-TRUST & FINOPS TELEMETRY

Production System Topologies & ADR Explorer

Select one of our live production reference architectures below and click any node in the pipeline to inspect its Architectural Decision Record (ADR), Zero-Trust compliance controls, failover behavior, and monthly FinOps cost allocation.

Active Topology Blueprint • 4 Production Layers

Hybrid Sovereign Cloud & Main Brain Mesh (Coqui Cloud)

High-density bare-metal Proxmox hypervisor cluster + Docker isolated bridge running Odoo 20 Main Brain, n8n autonomous pipelines, and 98% lower FinOps TCO.

Actual FinOps Run-Rate
$215 / mo
Legacy SaaS Equivalent
$3,900 / mo
Measured SLA
99.98%
Click Any Layer to Inspect ADR Data Flow ↓
LAYER 01 • GLOBAL ANYCAST & CADDY TLS < 18ms Edge • $20 / mo
Cloudflare Edge + Proxmox NAT / Caddy 2 Reverse Proxy
Cloudflare Full (Strict) TLS • iptables DNAT • Caddy 2 HTTP/3
LAYER 02 • BARE-METAL HYPERVISOR MESH 0.3ms Internal Bridge • $145 / mo
Proxmox VE Cluster (VM 101–108 Workload Isolation)
Proxmox VE • KVM Hardware Virtualization • ZFS / NVMe Storage
LAYER 03 • ODOO 20 MAIN BRAIN CORE 95ms HTTP • $30 / mo
Odoo 20 Community + 19 Custom Commercial Addons
Odoo 20.0 • PostgreSQL 16 • CoquiCal • CoquiAudit • CoquiProposals • CoquiPulse
LAYER 04 • AUTONOMOUS AGENTIC ORCHESTRATION Scheduled Crons • $20 / mo
n8n + Multi-Agent AI Content, GitHub & YouTube Sync
n8n Workflows • XML-RPC Bridge • GitHub API • YouTube Data API v3
LAYER 01 • GLOBAL ANYCAST & CADDY TLS

Cloudflare Edge + Proxmox NAT / Caddy 2 Reverse Proxy

Cloudflare Full (Strict) TLS • iptables DNAT • Caddy 2 HTTP/3
Latency / FinOps Share
< 18ms Edge • $20 / mo
Architectural Decision Record (Why We Built It This Way)

Eliminates expensive cloud NAT gateway and per-LB hourly charges by routing Cloudflare Origin TLS traffic through a hardened Proxmox edge router into isolated internal VLANs (`10.10.10.0/24`).

Zero-Trust Security & Compliance Controls

Origin-authenticated mTLS certificates, Cloudflare Turnstile anti-bot protection, and automated WebSocket (`/websocket`) longpolling isolation.

Self-Healing & Failover Resilience

Caddy automatic config reload with zero-downtime socket handoff and CoquiPulse 15-minute TLS expiry monitoring.