# 🏗️ Complete Infrastructure Snapshot Report
**Date:** 2025-10-29 17:34:30
**Host:** ai-impress-prod
**IP:** 51.89.231.46
**Generated by:** format-snapshot-full.sh

## 1. Заглавие и общая информация
### Системный слой
```bash
Hostname: ai-impress-prod
 Static hostname: ai-impress-prod
       Icon name: computer-vm
         Chassis: vm 🖴
      Machine ID: 2c3c6d97e54246e9bcfdeb513b8947f3
         Boot ID: e0fb6e0813b54674ac1ca99a87864c74
  Virtualization: kvm
Operating System: Ubuntu 24.04.3 LTS
          Kernel: Linux 6.8.0-86-generic
    Architecture: x86-64
 Hardware Vendor: OpenStack Foundation
  Hardware Model: OpenStack Nova
Firmware Version: 1.16.3-debian-1.16.3-2~bpo12+1
   Firmware Date: Tue 2014-04-01
    Firmware Age: 11y 6month 4w 1d

Kernel: Linux ai-impress-prod 6.8.0-86-generic #87-Ubuntu SMP PREEMPT_DYNAMIC Mon Sep 22 18:03:36 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

CPU:
Architecture:                         x86_64
CPU(s):                               16
On-line CPU(s) list:                  0-15
Model name:                           Intel Core Processor (Haswell, no TSX)
Virtualization:                       VT-x
Virtualization type:                  full

Memory:
               total        used        free      shared  buff/cache   available
Mem:            57Gi       9.7Gi        23Gi       637Mi        25Gi        47Gi
Swap:          4.0Gi          0B       4.0Gi

Disk:
Filesystem     Type   Size  Used Avail Use% Mounted on
tmpfs          tmpfs  5.8G  5.2M  5.8G   1% /run
/dev/sda1      ext4   387G   44G  344G  12% /
tmpfs          tmpfs   29G     0   29G   0% /dev/shm
tmpfs          tmpfs  5.0M     0  5.0M   0% /run/lock
/dev/sda16     ext4   881M  117M  703M  15% /boot
/dev/sda15     vfat   105M  6.2M   99M   6% /boot/efi
/dev/sdc       ext4   393G  3.6G  370G   1% /mnt/backups
/dev/sdb       ext4   295G  256M  279G   1% /mnt/psql-data
tmpfs          tmpfs  5.8G   12K  5.8G   1% /run/user/1000
```

## 2. Сеть и инфраструктура
### Архитектура папок и ключевые директории


### Сетевые интерфейсы
```bash
lo               UNKNOWN        127.0.0.1/8 
ens3             UP             51.89.231.46/32 metric 100 
br-9e103eeb0591  DOWN           172.16.4.1/24 
br-c797531af13d  UP             172.16.1.1/24 
br-cdaceadfcefb  UP             172.19.0.1/16 
br-4bc92c6c74a8  UP             172.21.0.1/16 
veth625e980@if2  UP             
br-a0dd7c187961  DOWN           172.16.6.1/24 
veth0c573c7@if3  UP             
br-b28f70541993  UP             172.18.0.1/16 
br-01cd476e5307  UP             172.22.0.1/16 
br-7c3083a44e08  DOWN           172.23.0.1/16 
docker0          DOWN           172.16.0.1/24 
vethbfd4268@if2  UP             
veth1322dc1@if2  UP             
veth0f5f4e4@if2  UP             
veth723fa43@if2  UP             
veth8f5f68c@if2  UP             
veth63854f0@if3  UP             
br-36cf0e468fc7  UP             172.16.2.1/24 
veth0310792@if2  UP             
vethfa62852@if2  UP             
vethbfe9bc3@if2  UP             
vethc33f825@if2  UP             
veth91ccc1d@if2  UP             
veth3c7d998@if2  UP             
vethff19a20@if2  UP             
vethe901bb9@if2  UP             
vethbcb0045@if2  UP             
veth8e03257@if2  UP             
veth33aebae@if2  UP             
veth291563e@if3  UP             
vethbb142dc@if2  UP             
br-f2be33f79fe4  UP             172.16.3.1/24 
veth054e629@if2  UP             
veth08ed7bf@if2  UP             
vethdb9dce3@if3  UP             
vethd32c88a@if2  UP             
veth86a12dc@if3  UP             
vethe510a0c@if2  UP             
veth872c6ab@if3  UP             
veth5f772e8@if2  UP             
vetha6aee51@if3  UP             
br-39a0028fdb88  UP             172.16.7.1/24 
br-e581070d94e4  UP             172.16.5.1/24 
vetheb0949b@if2  UP             
veth613fdc6@if2  UP             
veth3180ce0@if2  UP             
vethbaa64f0@if2  UP             
veth144bdba@if2  UP             
vethe62a99b@if2  UP             
veth375780f@if3  UP             
veth08d5a2e@if2  UP             
veth4277179@if2  UP             
vethe7ae71a@if2  UP             
vethabcc11e@if3  UP             
veth37ad504@if3  UP             
vethe54897f@if3  UP             
veth68989f0@if3  UP             
veth0d9f124@if3  UP             
vethd29efa5@if4  UP             
br-5e188b0a38a2  UP             172.16.8.1/24 
veth931b309@if2  UP             
veth66db31c@if2  UP             
vethedf723a@if2  UP             
veth195fe0a@if2  UP             
veth06e2e74@if2  UP             
vethc66dc6d@if2  UP             
veth1241526@if3  UP             
veth2d1f310@if3  UP             
veth43fde68@if2  UP             
vethc083d06@if3  UP             
veth20c1975@if2  UP             
veth8597fc6@if2  UP             
veth836ea35@if3  UP             
veth7726e04@if2  UP             
veth1996ac2@if3  UP             
veth06a7a1a@if2  UP             
veth98e4ed9@if3  UP             
veth7a5b50e@if2  UP             
```

### Открытые порты
```bash
Netid State  Recv-Q Send-Q     Local Address:Port  Peer Address:PortProcess
udp   UNCONN 0      0             127.0.0.54:53         0.0.0.0:*          
udp   UNCONN 0      0          127.0.0.53%lo:53         0.0.0.0:*          
udp   UNCONN 0      0      51.89.231.46%ens3:68         0.0.0.0:*          
tcp   LISTEN 0      32768            0.0.0.0:9443       0.0.0.0:*          
tcp   LISTEN 0      32768            0.0.0.0:9000       0.0.0.0:*          
tcp   LISTEN 0      32768            0.0.0.0:80         0.0.0.0:*          
tcp   LISTEN 0      32768            0.0.0.0:22         0.0.0.0:*          
tcp   LISTEN 0      32768            0.0.0.0:443        0.0.0.0:*          
tcp   LISTEN 0      32768            0.0.0.0:2222       0.0.0.0:*          
tcp   LISTEN 0      32768      127.0.0.53%lo:53         0.0.0.0:*          
tcp   LISTEN 0      32768          127.0.0.1:54322      0.0.0.0:*          
tcp   LISTEN 0      32768          127.0.0.1:8200       0.0.0.0:*          
tcp   LISTEN 0      32768          127.0.0.1:8443       0.0.0.0:*          
tcp   LISTEN 0      32768          127.0.0.1:4000       0.0.0.0:*          
tcp   LISTEN 0      32768          127.0.0.1:8000       0.0.0.0:*          
tcp   LISTEN 0      32768          127.0.0.1:8080       0.0.0.0:*          
tcp   LISTEN 0      32768          127.0.0.1:6543       0.0.0.0:*          
tcp   LISTEN 0      32768          127.0.0.1:6379       0.0.0.0:*          
tcp   LISTEN 0      32768          127.0.0.1:5432       0.0.0.0:*          
tcp   LISTEN 0      32768         127.0.0.54:53         0.0.0.0:*          
tcp   LISTEN 0      32768          127.0.0.1:5672       0.0.0.0:*          
tcp   LISTEN 0      32768               [::]:9443          [::]:*          
tcp   LISTEN 0      32768               [::]:9000          [::]:*          
tcp   LISTEN 0      32768               [::]:80            [::]:*          
tcp   LISTEN 0      32768               [::]:22            [::]:*          
tcp   LISTEN 0      32768               [::]:443           [::]:*          
tcp   LISTEN 0      32768               [::]:2222          [::]:*          
```

### Фаервол
```bash
Status: active
Logging: on (low)
Default: deny (incoming), allow (outgoing), deny (routed)
New profiles: skip

To                         Action      From
--                         ------      ----
22/tcp                     ALLOW IN    Anywhere                   # SSH
80/tcp                     ALLOW IN    Anywhere                   # HTTP
443/tcp                    ALLOW IN    Anywhere                   # HTTPS
2222/tcp                   ALLOW IN    Anywhere                   # SFTP
22/tcp (v6)                ALLOW IN    Anywhere (v6)              # SSH
80/tcp (v6)                ALLOW IN    Anywhere (v6)              # HTTP
443/tcp (v6)               ALLOW IN    Anywhere (v6)              # HTTPS
2222/tcp (v6)              ALLOW IN    Anywhere (v6)              # SFTP

```

### Docker сети
```bash
NETWORK ID     NAME                            DRIVER    SCOPE
5e188b0a38a2   authentik_authentik-internal    bridge    local
f02abd181cda   bridge                          bridge    local
cdaceadfcefb   database-internal               bridge    local
4b9a877223ee   host                            host      local
a0dd7c187961   mautic-internal                 bridge    local
f2be33f79fe4   mautic_mautic-internal          bridge    local
7c3083a44e08   monitoring                      bridge    local
01cd476e5307   n8n-shared                      bridge    local
d21678395b05   none                            null      local
39a0028fdb88   odoo-internal                   bridge    local
e581070d94e4   postiz-config_postiz-internal   bridge    local
9e103eeb0591   postiz_postiz-internal          bridge    local
c797531af13d   sftp_default                    bridge    local
36cf0e468fc7   supabase_default                bridge    local
b28f70541993   traefik-public                  bridge    local
4bc92c6c74a8   vault-internal                  bridge    local
```

## 3. Контейнеры и сервисы
### Все контейнеры
```bash
NAMES                            IMAGE                                    STATUS                  PORTS
authentik-proxy                  ghcr.io/goauthentik/proxy:2025.10        Up 2 hours (healthy)    9000/tcp, 9300/tcp, 9443/tcp
authentik-worker                 ghcr.io/goauthentik/server:2025.10       Up 2 hours (healthy)    
authentik-server                 ghcr.io/goauthentik/server:2025.10       Up 2 hours (healthy)    0.0.0.0:9000->9000/tcp, [::]:9000->9000/tcp, 0.0.0.0:9443->9443/tcp, [::]:9443->9443/tcp
authentik-postgres               postgres:16-alpine                       Up 2 hours (healthy)    5432/tcp
authentik-redis                  redis:alpine                             Up 2 hours (healthy)    6379/tcp
postiz                           ghcr.io/gitroomhq/postiz-app:latest      Up 4 hours              
postiz-postgres                  postgres:16-alpine                       Up 4 hours (healthy)    5432/tcp
postiz-redis                     redis:7-alpine                           Up 4 hours (healthy)    6379/tcp
odoo                             odoo:17                                  Up 47 hours             8069/tcp, 8071-8072/tcp
supabase-auth                    supabase/gotrue:v2.180.0                 Up 2 days (healthy)     
vaultwarden                      vaultwarden/server:1.30.5-alpine         Up 2 days (healthy)     80/tcp, 3012/tcp
uptime-kuma                      louislam/uptime-kuma:latest              Up 2 days (healthy)     3001/tcp
outline                          outlinewiki/outline:latest               Up 18 hours (healthy)   3000/tcp
n8n-worker-4                     n8nio/n8n:latest                         Up 2 days               5678/tcp
n8n-worker-3                     n8nio/n8n:latest                         Up 2 days               5678/tcp
n8n-shared                       n8nio/n8n:latest                         Up 2 days               5678/tcp
n8n-worker-1                     n8nio/n8n:latest                         Up 2 days               5678/tcp
n8n-worker-2                     n8nio/n8n:latest                         Up 2 days               5678/tcp
mautic                           mautic/mautic:latest                     Up 2 days               80/tcp
mautic-odoo-sync-v2              python:3.11-slim                         Up 2 days (healthy)     
mautic-db                        mariadb:11                               Up 2 days               3306/tcp
supabase-storage                 supabase/storage-api:v1.28.0             Up 2 days (healthy)     5000/tcp
realtime-dev.supabase-realtime   supabase/realtime:v2.51.11               Up 2 days (healthy)     
supabase-pooler                  supabase/supavisor:2.7.0                 Up 2 days (healthy)     127.0.0.1:6543->6543/tcp, 127.0.0.1:54322->5432/tcp
supabase-edge-functions          supabase/edge-runtime:v1.69.6            Up 2 days               
supabase-meta                    supabase/postgres-meta:v0.91.6           Up 2 days (healthy)     8080/tcp
supabase-kong                    kong:2.8.1                               Up 2 days (healthy)     127.0.0.1:8000->8000/tcp, 8001/tcp, 127.0.0.1:8443->8443/tcp, 8444/tcp
supabase-studio                  supabase/studio:2025.10.01-sha-8460121   Up 2 days (healthy)     3000/tcp
supabase-rest                    postgrest/postgrest:v13.0.7              Up 2 days               3000/tcp
supabase-analytics               supabase/logflare:1.22.6                 Up 2 days (healthy)     127.0.0.1:4000->4000/tcp
supabase-db                      supabase/postgres:15.8.1.085             Up 2 days (healthy)     5432/tcp
supabase-imgproxy                darthsim/imgproxy:v3.8.0                 Up 2 days (healthy)     8080/tcp
supabase-vector                  timberio/vector:0.28.1-alpine            Up 2 days (healthy)     
mautic-sync-webhook              python:3.11-slim                         Up 2 days               
portainer                        portainer/portainer-ce:latest            Up 2 days               8000/tcp, 9000/tcp, 9443/tcp
evolution-api                    atendai/evolution-api:latest             Up 2 days               8080/tcp
rabbitmq                         rabbitmq:3.13-management-alpine          Up 2 days (healthy)     4369/tcp, 5671/tcp, 15671-15672/tcp, 15691-15692/tcp, 25672/tcp, 127.0.0.1:5672->5672/tcp
pgadmin                          dpage/pgadmin4:9.9                       Up 3 days               80/tcp, 443/tcp
postgres-main                    postgres:16-alpine                       Up 3 days (healthy)     127.0.0.1:5432->5432/tcp
traefik                          traefik:v3.0                             Up 2 days               0.0.0.0:80->80/tcp, [::]:80->80/tcp, 0.0.0.0:443->443/tcp, [::]:443->443/tcp, 127.0.0.1:8080->8080/tcp
vault                            hashicorp/vault:1.15                     Up 4 days (healthy)     127.0.0.1:8200->8200/tcp
landing-page                     nginx:alpine                             Up 5 days               80/tcp
sftp-server                      atmoz/sftp:latest                        Up 5 days               0.0.0.0:2222->22/tcp, [::]:2222->22/tcp
redis-main                       redis:7-alpine                           Up 5 days (healthy)     127.0.0.1:6379->6379/tcp
```

### Группировка сервисов по сетям
#### Сеть: traefik-public
```
authentik-proxy
authentik-server
evolution-api
landing-page
mautic
mautic-odoo-sync-v2
mautic-sync-webhook
n8n-shared
odoo
outline
pgadmin
portainer
postiz
rabbitmq
supabase-kong
traefik
uptime-kuma
vault
vaultwarden
```

#### Сеть: database-internal
```
evolution-api
n8n-shared
n8n-worker-1
n8n-worker-2
n8n-worker-3
n8n-worker-4
odoo
outline
pgadmin
postgres-main
rabbitmq
redis-main
vaultwarden
```

#### Сеть: authentik_authentik-internal
```
authentik-postgres
authentik-proxy
authentik-redis
authentik-server
authentik-worker
```

#### Сеть: n8n-shared
```
n8n-shared
n8n-worker-1
n8n-worker-2
n8n-worker-3
n8n-worker-4
```

#### Сеть: supabase_default
```
realtime-dev.supabase-realtime
supabase-analytics
supabase-auth
supabase-db
supabase-edge-functions
supabase-imgproxy
supabase-kong
supabase-meta
supabase-pooler
supabase-rest
supabase-storage
supabase-studio
supabase-vector
```

## 4. Базы данных и кеш-слой
### PostgreSQL Main - Базы данных
```sql
    datname     |  size   
----------------+---------
 aimpress_admin | 7516 kB
 authelia       | 9652 kB
 authentik      | 7516 kB
 evolution      | 9028 kB
 n8n_shared     | 33 MB
 odoo           | 48 MB
 outline        | 23 MB
 postgres       | 7604 kB
 supabase       | 8140 kB
 vaultwarden    | 8436 kB
(10 rows)

```

### Redis Status
- Подключение: NOAUTH Authentication required.

✅ Работает
- Требует аутентификации: ✅ Да

## 5. Обновления и версии
### Устаревшие Docker образы
```bash
REPOSITORY                     TAG                      CREATED
dpage/pgadmin4                 9.9                      2 weeks ago
python                         3.11-slim                2 weeks ago
nginx                          alpine                   3 weeks ago
supabase/logflare              1.22.6                   3 weeks ago
redis                          alpine                   3 weeks ago
redis                          7-alpine                 3 weeks ago
supabase/realtime              v2.51.11                 3 weeks ago
supabase/studio                2025.10.01-sha-8460121   4 weeks ago
supabase/storage-api           v1.28.0                  4 weeks ago
supabase/gotrue                v2.180.0                 5 weeks ago
supabase/supavisor             2.7.0                    7 weeks ago
supabase/postgres-meta         v0.91.6                  8 weeks ago
supabase/edge-runtime          v1.69.6                  8 weeks ago
mariadb                        11                       2 months ago
```

### Рекомендации по обновлению
Следующие образы требуют обновления:
- `dpage/pgadmin4:9.9` (2 weeks) → `docker pull dpage/pgadmin4:9.9`
- `python:3.11-slim` (2 weeks) → `docker pull python:3.11-slim`
- `nginx:alpine` (3 weeks) → `docker pull nginx:alpine`
- `supabase/logflare:1.22.6` (3 weeks) → `docker pull supabase/logflare:1.22.6`
- `redis:alpine` (3 weeks) → `docker pull redis:alpine`
- `redis:7-alpine` (3 weeks) → `docker pull redis:7-alpine`
- `supabase/realtime:v2.51.11` (3 weeks) → `docker pull supabase/realtime:v2.51.11`
- `supabase/studio:2025.10.01-sha-8460121` (4 weeks) → `docker pull supabase/studio:2025.10.01-sha-8460121`
- `supabase/storage-api:v1.28.0` (4 weeks) → `docker pull supabase/storage-api:v1.28.0`
- `supabase/gotrue:v2.180.0` (5 weeks) → `docker pull supabase/gotrue:v2.180.0`

## 6. Диагностика связей и рисков
### Критические зависимости
| Сервис | Сеть | Зависимости | Статус |
|--------|------|-------------|--------|
| Traefik | traefik-public | Все веб-сервисы | ✅ |
| PostgreSQL Main | database-internal | 10+ сервисов | ✅ |
| Redis Main | database-internal | N8N, кеши | ✅ |
| Authentik | authentik-internal | SSO сервисы | ✅ |
| N8N Shared | n8n-shared | 4 workers, Redis, PostgreSQL | ✅ |

## 7. Заключение
### Итог
✅ **Все основные сервисы работают**
- Запущено контейнеров: 44
- Сетей Docker: 16
- Использование памяти: 9.7Gi/57Gi (17.0175%)
- Использование диска: 44G/387G (12%)

### Найдены риски:
1. Устаревшие Docker образы (27 шт)
2. Authentik API недоступен для проверки
3. Redis требует аутентификации
4. Некоторые образы старше 1 года

### Инструкция:
1. Скачайте файл на Mac: `scp ubuntu@51.89.231.46:/opt/infrastructure-docs/reports/infrastructure-snapshot-20251029-173430.md .`
2. Откройте в Obsidian для просмотра
3. Для обновления образов используйте: `/opt/05-backups/scripts/auto-update.sh`

---
*Сгенерировано автоматически Wed Oct 29 05:34:31 PM UTC 2025*
*Следующая проверка: 2025-11-05*
