VPS Apps
Self-hosted Docker applications running on a VPS, routed through Traefik with automatic TLS via Let's Encrypt.
Architecture
Infrastructure
| Component | Description |
|---|---|
| Traefik | Reverse proxy and TLS termination. Manages Let's Encrypt certificates automatically. |
| Secrets (Ansible Vault) | Secure storage for secrets. ansible/secrets.yml is AES256-encrypted and decrypted during deployment. |
| Authentik | Identity provider and SSO. Centralized authentication for Guacamole, MinIO, and Grafana. |
| Kuma | Uptime monitoring dashboard. Watches all services and alerts on downtime. |
Quick Links
- ops4life.com — Landing page
- kuma.ops4life.com — Kuma dashboard
- authentik.ops4life.com — Authentik portal
- docs.ops4life.com — This site
Getting Started
- Provisioning — Bootstrap a fresh EC2 instance end-to-end with Ansible.
- Apps — Browse the list of all running services.
- Adding an App — Step-by-step checklist for adding a new service.
- Deploying — How deployments work end-to-end.
- Secrets — Ansible Vault integration and synchronization.