On this page

• Core Docs
• Security
• Services
• Monitoring
  • Lookout (Server Monitoring)
  • LogDeck (Log Monitoring)
  • Orcta Runtime (Deployment Automation)
• Quick Reference

Infrastructure

Operational documentation for Orcta production infrastructure and deployment workflows.

Core Docs

• CI/CD Pipeline — How we deploy from GitHub to production
• VPS Setup & Hardening — Server setup, SSH, Tailscale VPN
• SSH & Tailscale Setup — Detailed SSH socket activation, iptables, Tailscale migration
• Vault Setup & Configuration — HashiCorp Vault secrets management
• Infrastructure Diagrams — Visual reference for system architecture

Security

• Security Audit — Initial port exposure audit and findings
• Security Changes Made — All fixes applied (Docker bindings, Caddy headers, SSH lockdown)
• Security Lessons Learned — What we learned and what we’d do differently

Services

Monitoring

Lookout (Server Monitoring)

• Status: Running as systemd service
• Config: /etc/lookout/config.yaml
• Monitors: CPU, memory, disk, Docker containers, TCP services
• Checks: Orcta Runtime health, Postgres, Redis, Valkey, PgBouncer

LogDeck (Log Monitoring)

• URL: https://logdeck.orctatech.com
• Features: Real-time log streaming, alerting, container management
• Integration: Sends alerts to Orcta Runtime via webhook

Orcta Runtime (Deployment Automation)

• URL: https://runtime.orctatech.com
• Features: Multi-app deploys, GitHub webhooks, health checks, rollback
• Dashboard: https://runtime.orctatech.com/login

Quick Reference

# SSH to VPS (via Tailscale)
ssh bernard@100.125.3.44

# Check all containers
docker ps --format 'table {{.Names}}\t{{.Status}}\t{{.Ports}}'

# Check Orcta Runtime health
curl -s http://localhost:9010/health

# Check Lookout status
journalctl -u lookout -f

# Check Caddy logs
journalctl -u caddy --no-pager -n 50

# Vault operations
vault status
vault login -method=userpass username=cto password='your-password'
vault kv get secret/orcta/pss/database