Skip to content

Welcome punch

Introduction

This is the SecDevOps documentation. It is organised into eight sections, grouped by what a document belongs to — an environment we run, the infrastructure underneath it, or the practice of running it.

Documentation Structure

Documentation Structure DOCS CITY Operating Procedures · TMS Databases · TMS KEPO DEVOPS Internal Apps · Third Party Apps · Operating Procedures · Incidents · Tools on Local EXTERNAL DEV. Tailorframe · Palbassador · moreutils · Infra IT Servicedesk · License reporting INFRA Cloud (GCP · Azure · Hetzner · Management/IaC) · On-Prem · Monitoring & Logs INTEGRATIONS Camel · Biztalk · LogicApps · N8N · AD-Sympa · ClickUp ROAD AO · EazyTMS · PTV · Web Apps SECURITY Auth · Certificates · Firewall · SIEM · Vault · Audits
Show the full structure, three levels deep
Documentation Structure (full) Operating Procedures TMS Common database queries tms_booking tms_drivers tms_fleet TMS Databases TMS KEPO City CICD Docker Event, Product & Service notes Github Auth0 SendGrid SMTP authentication failureAuth0 SendGrid SMTP authenticatio… Wazuh false positive Incidents Postgres Databases Docusaurus Manage Creating a new organization Manage Managevisor New applications Revised documentationManagevisor New applications Revi… Managevisor Updated - superset (new deployment)Updated - superset (new deploymen… Superset Supervisor Valhalla & Vroom Internal Apps Issues & Problems AI Tools Postgres Management Database stuff Terraform Operating Procedures install update investigate Airbyte Gmail Google workspace Syncthing e-Mail Third Party Apps Tools on Local DevOps Infra Tailorframe moreutils External Development License reporting Adi New User User Management Servicedesk IT Azure Big Query Cloud SQL Confidential Compute Load Balancer Ops Agent PubSub Virtual Machines GCP City Disk space clean up Hetzner IaC Management Cloud Grafana Zabbix Monitoring & Logs Core servers Proxmox (A.I. on-prem server) devops-openvpn & devops-ca machine detailsdevops-openvpn & devops-ca machin… pg-databases On-Prem Infra AD - Sympa Biztalk Investigations Camel ClickUp LogicApps N8N Integrations AO External AO GCP Environment AO GCP nightly env. AO GCP AO EazyTMS PTV Web Apps Road Access Reviews (internal) Audits Aleksandar superset tests Auth0 Devops OpenVPN ORY Teleport Zero trust VPN 3. Upgrade updateTeleport Zero trust VPN 3. Upgrad… Teleport Zero trust VPN sec Teleport teleport ssh, awx VPN 1. Create users and rules VPN 2. Access Teleport Zero trust VPN Auth Apple certificates SSL certificate renewals SSL certificates Certificates Cloud Run ClamAV Dependency-Track Azure Firewall (IT) Cloudflare Fortigate GCP Cloud Armor GCP Firewall Hetzner Firewall Create inbound parse and security SendGrid Firewall Operating Procedures SecurityOnion Troubleshooting Wazuh GCP integration Wazuh security Wazuh SIEM Hetzner Vault (new vault) Vault (Hashicorp) Security

Environments

City has documentation for the City Taxi System: TMS backends and applications, the TMS databases, and KEPO.

Road has documentation for AO, EazyTMS, PTV xServer, and the Road web applications.

External Development covers work outside the core platform — Tailorframe, Palbassador, and moreutils.

Infrastructure

Infra holds the platforms everything runs on:

  • Cloud — GCP, Azure, Hetzner, and infrastructure-as-code (Terraform, Ansible, AWX)
  • On-Prem — the core servers and self-hosted machines
  • Monitoring & Logs — Grafana, Zabbix, and GCP logging

Platform-specific material now lives under Infra/Cloud/, so GCP or Hetzner instructions no longer need to be flagged by platform name inside each document.

Practice

DevOps has documentation that doesn't belong to an environment or a platform: application and server installation instructions, CI/CD, operating procedures, incidents, internally built and third-party applications, local software installation guides, policies, and reports.

Security covers authentication, certificates, firewalls, SIEM, audits, secrets management, and security operating procedures.

Integrations covers the middleware that moves data between systems — Camel, Biztalk, LogicApps, N8N, Datastream, and AD/Sympa.

IT covers the servicedesk, endpoint support, license reporting, and the office network.

Examples for best practices

Documentation on the Grafana migration used to be spread across more than 16 pages, which made searching for anything related to Grafana difficult. Those pages are now a single master page with collapsible H1 / H2 / H3 headers, so a large topic can be navigated in one place:

Grafana migration from old Hetzner to Hetzner Cloud



Subpages