@startuml Kusala_Tech_Architecture
!theme aws-orange

skinparam monochrome true
skinparam defaultFontName Helvetica
skinparam shadowing false

' === Components ===
rectangle "DNS & Email" as dns {
  rectangle "name.com" as name_dns #aliceblue
  rectangle "Titan Mail" as titan #aliceblue
  name_dns -[hidden]-> titan
}

rectangle "Hosting" as hosting {
  rectangle "Linode VPS\n(foss-dev)" as linode_vps #moccasin {
    rectangle "Docker" as docker {
      rectangle "Traefik" as traefik #lightgreen
      rectangle "Redmine" as redmine #lightgreen
      rectangle "Certbot" as certbot #lightgreen
      traefik -[hidden]-> redmine
      redmine -[hidden]-> certbot
    }
  }
  rectangle "Linode LKS\n(future)" as linode_lks #moccasin
  linode_vps -[hidden]-> linode_lks
}

rectangle "Security" as security {
  rectangle "KeePassXC" as keepass #mistyrose {
    rectangle "WebDAV Sync\n(self-signed cert)" as webdav #lightgrey
  }
}

' === Connections ===
name_dns --> titan : "email@kusala.studio\n(IMAP/SMTP manual config)"
titan --> linode_vps : "Admin notifications"
linode_vps --> name_dns : "DNS records"

linode_vps --> keepass : "Credential storage"
webdav --> linode_vps : "Password sync"

' === Legend/Notes ===
note right of linode_vps
  • Single point of failure
  • Minimal functional phase
  • Limited budget constraints
end note

note right of titan
  • IMAP: imap.titan.email
  • SMTP: smtp.titan.email
  • Requires manual config
end note

note bottom of security
  • KeePassXC database
  • Sync via WebDAV
  • Currently self-signed cert
end note

@enduml