Platform & Infrastructure · Level 3 · artefact
Artefact — Network layout and remote access
A private mesh and SSH everywhere · services bound to loopback · and one public listener at the edge terminating TLS for the sites that are allowed to be seen.
- Tailscale
- SSH
- Caddy
- DNS
- Termux
Artefact — Network layout and remote access
Status: stub. The topology diagram lands in Phase 7 with addresses and hostnames redacted.
What the artefact is
The layout: hosts on a private mesh for remote access, SSH on every machine, a phone used as a terminal, and an edge host that terminates TLS and proxies to loopback-bound services. New services bind to loopback by default; making something public is an explicit edge change, not a side effect of starting a container.
What it proves
Security posture chosen rather than inherited: no service is reachable because it happened to bind to all interfaces, and there is exactly one place where the outside world meets the estate.
When it is delivered
Phase 7. Internal addressing, hostnames and public DNS names are excluded from publication by the redaction pass.