doctator/bin-there-done-that
doctator/bin-there-done-that
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Page: Infrastructure Overview
Pages
📊 Genesis Radio Infrastructure Overview 🚀 Genesis Radio - Healthcheck Response Runbook Account Creation Policy Account Deletion Policy Backup Integrity Backup Policy Disaster Recovery Plan Encryption Standards GROWL — Genesis Radio Commit Style Guide Genesis Hosting Technologies Planned Database Expansion Genesis Radio Internal Architecture Map Home Infrastructure Overview Least Privilege Policy Maintenance Window Policy Provisioning and OnBoarding Terms of Service (TOS) User Roles
Clone
1
Infrastructure Overview
doctator edited this page 2025-05-01 11:40:07 +00:00
Table of Contents

Welcome to the Wiki.# 📊 Genesis Radio Infrastructure Overview Date: April 30, 2025
Prepared by: Doc

🏗️ Infrastructure Summary

Genesis Radio now operates a fully segmented, secure, and performance-tuned backend suitable for enterprise-grade broadcasting and media delivery. The infrastructure supports high availability (HA) principles for storage and platform independence for core services.

🧱 Core Components

🎙️ Genesis Radio Services

  • StationPlaylist (SPL): Windows-based automation system, mounts secure object storage as drives via rclone
  • Voice Tracker (Remote Access): Synced with SPL backend and available to authorized remote users
  • Azuracast (Secondary automation): Dockerized platform running on dedicated VM
  • Mastodon (Community): Hosted in Docker with separate PostgreSQL cluster and MinIO object storage

💾 Storage Architecture

Feature Status
Primary Storage Backend MinIO on shredderv2
Storage Filesystem ZFS RAID-Z1
Encryption Enabled (per-bucket S3 SSE)
Buckets (Scoped) genesislibrary-secure, genesisassets-secure, genesisshows-secure, mastodonassets-secure
Snapshot Capability ✅ (ZFS native snapshots)
Caching SSD-backed rclone VFS cache per mount

🛡️ Security & Access Control

  • TLS for all services (Let's Encrypt)
  • MinIO Console behind HTTPS (consolev2.sshjunkie.com)
  • User policies applied per-bucket (read/write scoped)
  • Server-to-server rsync/rclone over SSH

🔄 Backup & Recovery

  • Dedicated backup server with SSH access
  • Nightly rsync for show archives and Mastodon data
  • Snapshot replication via zfs send | ssh backup zfs recv planned
  • Manual and automated snapshot tools

🔍 Monitoring & Observability

Component Status Notes
System Monitoring vmstat, watch, custom CLI tools
Log Aggregation Centralized on pyapps VM
Prometheus Partial (used with ClusterControl)
Alerts Mastodon warning bot, Telegram planned

🚦 Current Migration Status

Component Status Notes
Mastodon Assets ✅ Migrated Verified, encrypted, ZFS snapshotted
Genesis Library ✅ Migrated Synced from backup server
Genesis Assets ✅ Migrated Cleanup of shows in progress
Genesis Shows ✅ Migrated Pulled from same source, cleanup to follow
Azuracast ⏳ Pending Will require live sync due to lack of backup copy

🧭 Next Steps

  • Finalize Azuracast migration
  • Clean up misplaced show files in assets bucket
  • Automate ZFS snapshot replication
  • Consider Grafana/Prometheus dashboard for real-time metrics
  • Continue phasing out legacy containers (LXC → full VMs)

This infrastructure is stable, secure, and built for scale. Further improvements will refine observability, automate recovery, and enhance multi-user coordination.