- shorashim.ch registered via Infomaniak (Swiss) - DNS Fast Anycast + Domain Privacy add-ons - kSuite free tier: 1x @shorashim.ch email - AWS fully shut down: EC2, Lambda, DynamoDB, OpenSearch, Bedrock KB, S3, snapshots, AMIs, CloudWatch logs all deleted - Burn rate reduced from ~$729/month to ~$0/month Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2.1 KiB
2.1 KiB
Infrastructure — Exoscale Swiss Hosting
All infrastructure is on Exoscale, zone ch-gva-2 (Geneva, Switzerland). Swiss data sovereignty under FADP. Outside US legal jurisdiction.
Account
- Provider: Exoscale
- Organization: "The Recognition Protocol"
- Account type: Individual
- CLI:
exo(installed via homebrew) - Zone: ch-gva-2
Services
PostgreSQL (DBaaS)
- Name:
temple-council-db - Plan: hobbyist-2
- Zone: ch-gva-2
- IP filter:
0.0.0.0/0(opened for Gitea connection — tighten in production) - Databases:
defaultdb(system),gitea(Gitea data) - Password retrieved from:
exo dbaas show temple-council-db --zone ch-gva-2
Kubernetes (SKS)
- Cluster name:
temple-council - Zone: ch-gva-2
- Node pool: 1x standard.small
- Kubeconfig:
~/.kube/exoscale-temple-council.yaml - Namespace:
temple-council - Security group:
default(attached manually — was missing initially)
Object Storage
- Bucket:
temple-council-identities - Zone: ch-gva-2
Gitea (Self-hosted Git)
- URL:
http://185.19.29.94 - Exposed via: LoadBalancer service on K8s
- Admin user:
heaviness510 - Database:
giteaontemple-council-dbPostgreSQL - Storage: emptyDir (NOT persistent — data lost on pod restart)
- Repositories:
heaviness510/shorashim— Torah as AI specification
AnythingLLM
- URL:
http://185.19.28.73 - Exposed via: LoadBalancer service on K8s
- Storage: emptyDir (NOT persistent)
- Workspaces: Not yet configured on Exoscale instance
Domain
- Domain:
shorashim.ch - Registrar: Infomaniak (Swiss)
- Add-ons: DNS Fast Anycast, Domain Privacy
- Registrant: Karp Scott (Individual)
- Email: kSuite free tier — 1 address @shorashim.ch
Known Issues
- No persistent storage on K8s (need Exoscale Block Storage CSI driver)
- No HTTPS (need cert-manager + Let's Encrypt + domain — domain now registered)
- AWS instances still running (not shut down)
- AnythingLLM workspaces not configured
- DNS not yet pointed to infrastructure (185.19.29.94)
Security Group Rules
Ports opened on default security group:
- 80 (HTTP)
- 22 (SSH)
- 30575, 31345 (K8s NodePorts for services)