Admin Guide¶
Setting up and operating the Digilan Edge platform. The architecture is described in How It Works.
Components¶
| Component | Runs as | Role |
|---|---|---|
| Nexus | Scaleway serverless container nexus-<env> |
Control plane: config, devices, relay allocation, DNS and certificates |
| Authz | Scaleway serverless container authz-<env> |
Role grants and permission checks |
| Realtime | Cloudflare Worker digilan-realtime-{dev,stg,production} + Durable Objects |
Per-device WebSocket bridge |
| Portal | Cloudflare Pages digilan-portal-<env> |
Web UI |
| Relays | Scaleway instances running relayd |
Published-service forwarding and gateway tunnels |
| Agent | edge_agent service on OpenBSD |
Applies config, reports state, self-updates |
| Zitadel | Shared Scaleway serverless container | OIDC identity for every environment |
| PostgreSQL | Shared Scaleway RDB digilan-shared |
One database per environment |
| OTA bucket | Scaleway object storage digilan-agent-releases-<env> |
Signed agent releases |
Sections¶
- Deployment: the OpenTofu layout, per-environment resources and CI/CD, and setting up a new environment from scratch.
- Device Setup: OpenBSD install, provisioning USB, enrollment, lifecycle, console.
- Identity & Auth: Zitadel and the role model.
- Operations: monitoring, backup, troubleshooting, agent releases, the relay fleet.