Skip to content

Design

How TAPPaaS is designed, module by module. The module pages below are kept in sync from the source repository; the security design is cross-cutting and maintained here.

  • Security — secrets, access control, network segmentation, ingress, monitoring, and breach resilience.
  • Cluster — the Proxmox/ZFS foundation: storage tiers, high availability, adding nodes.
  • Network — OPNsense firewall, security zones, DNS, the reverse proxy, and resilience (including public ingress without a public IP).
  • Backup — the 3-2-1 strategy, PBS placement, off-site replication, and disaster recovery.