TAPPaaS Foundation Layer - Dependency Documentation¶

This document describes the program dependencies within the src/foundation/ directory of TAPPaaS.

Summary¶

Key Dependency Chains¶

1. Install Chain: install1.sh → install2.sh → create-configuration.sh + copy-update-json.sh + update-module.sh + setup-caddy.sh
2. Update Chain: update-tappaas → update-node → update-module.sh → module update.sh + service update-service.sh
3. Module Install Chain: install-module.sh → copy-update-json.sh + common-install-routines.sh → service install-service.sh → Create-TAPPaaS-VM.sh
4. Zone Management Chain: zone-manager → OPNsense API → firewall/VLAN/DHCP configuration
5. Test Chain: test.sh → install-module.sh → test-vm.sh

Most Connected Programs¶

Top-Level Entry Points¶

These programs are NOT called by other TAPPaaS programs - they are entry points:

Dependency Graphs¶

1. CICD Installation Flow: install1.sh then install2.sh¶

Two-phase installation with reboot in between.

graph TD
    subgraph "Phase 1: install1.sh"
        A[install1.sh] -->|clones| B[TAPPaaS repo]
        A -->|runs| C[nixos-rebuild]
        A -->|creates| D[SSH keys]
        A -->|requires| E[reboot]
    end

    subgraph "Phase 2: install2.sh after reboot"
        F[install2.sh] -->|sources| G[create-configuration.sh]
        F -->|calls| N[copy-update-json.sh]
        F -->|calls| H[setup-caddy.sh]
        F -->|calls| I[update-module.sh]

        G -->|creates| J[configuration.json]

        N -->|reads| P[module-fields.json]
        N -->|copies| R["<module>.json to config/"]

        H -->|reads| J
        H -->|calls| K[opnsense-firewall]

        I -->|sources| L[common-install-routines.sh]
        I -->|calls| M["module update.sh"]

        L -->|reads| P
        L -->|reads| Q[zones.json]
    end

2. Update Scheduler Flow: update-tappaas¶

Automated scheduled updates for all TAPPaaS nodes.

graph TD
    A[update-tappaas] -->|reads| B[configuration.json]
    A -->|calls| C[update-node]

    C -->|"ssh + runs"| D["update-module.sh (per module)"]

    D -->|sources| E[common-install-routines.sh]
    D -->|calls| F["module pre-update.sh"]
    D -->|calls| G["module update.sh"]
    D -->|calls| H["service update-service.sh"]

    H -->|e.g.| I[update-os.sh]
    H -->|e.g.| J["update-service.sh (cluster/ha)"]

    E -->|reads| K[module-fields.json]
    E -->|reads| L[zones.json]

3. Module Installation Flow: install-module.sh¶

Used by install2.sh and test scripts to install modules.

graph TD
    A[install-module.sh] -->|sources| B[copy-update-json.sh]
    A -->|sources| C[common-install-routines.sh]
    A -->|calls| D["module install.sh"]
    A -->|calls| E["service install-service.sh"]

    B -->|reads| F[module-fields.json]
    B -->|copies| G["<module>.json to nodes"]

    C -->|reads| F
    C -->|reads| H[zones.json]

    E -->|e.g. cluster/vm| I["install-service.sh (cluster/vm)"]
    I -->|ssh calls| J[Create-TAPPaaS-VM.sh]

    J -->|reads| K["<module>.json"]
    J -->|reads| H

4. Test Suite Flow: tappaas-cicd/test.sh¶

VM creation and validation tests.

graph TD
    A[tappaas-cicd/test.sh] -->|calls| B[test-vm-creation/test.sh]

    B -->|for each test| C[install-module.sh]
    B -->|for each test| D[test-vm.sh]

    C -->|sources| E[copy-update-json.sh]
    C -->|sources| F[common-install-routines.sh]
    C -->|calls service| G["install-service.sh (cluster/vm)"]
    G -->|ssh calls| H[Create-TAPPaaS-VM.sh]

    D -->|sources| F

5. OPNsense Controller: opnsense-controller¶

Direct management of OPNsense firewall.

graph TD
    A[opnsense-controller] -->|subcommand| B[zone-manager]
    A -->|subcommand| C[dns-manager]
    A -->|subcommand| D[opnsense-firewall]

    B -->|reads| E[zones.json]
    B -->|manages| F[VLANs]
    B -->|manages| G[DHCP ranges]
    B -->|manages| H[Firewall rules]

    C -->|manages| I[DNS entries]

    D -->|manages| H

6. Disk Management Flow: check-disk-threshold.sh¶

Automated disk monitoring and resizing.

graph TD
    A[check-disk-threshold.sh] -->|reads| B["<module>.json"]
    A -->|calls| C[resize-disk.sh]

    C -->|reads| B

7. Configuration Generation: create-configuration.sh¶

Creates the main configuration file from cluster state.

graph TD
    A[create-configuration.sh] -->|queries| B["Proxmox cluster (pvecm)"]
    A -->|creates| C[configuration.json]

    C -->|used by| D[setup-caddy.sh]
    C -->|used by| E[update-tappaas]

8. Backup Flow: backup-manage.sh and restore.sh¶

Backup and restore operations.

graph TD
    A[backup-manage.sh] -->|sources| B[common-install-routines.sh]
    A -->|reads| C[backup.json]
    A -->|"ssh to nodes"| D[vzdump / proxmox-backup]

    E[restore.sh] -->|sources| B
    E -->|reads| C
    E -->|"ssh to nodes"| F[pvesh / qm restore]

    G[install.sh backup] -->|sources| H[copy-update-json.sh]
    G -->|sources| B
    G -->|calls| X[dns-manager]
    G -->|reads| C

Configuration File Dependencies¶

Install Locations¶