System Context

Overview

The infrastructure supports two primary product offerings under a unified brand:

1. Public Infrastructure: Hosting risu.tech and public-facing applications.
2. Private Home Cloud: A secure environment for lab, family, and personal services, accessible only via LAN or secure VPN.

Goals and Constraints

The system is designed around the following core requirements:

• Unified Naming Scheme: Consistent use of subdomains across both public and private contexts.
• Secure Boundary Enforcement: Implementation of a “hard boundary” to prevent accidental exposure of private services to the public internet.
• Frictionless Remote Access: Remote connectivity must provide an experience identical to local network access (the “couch Wi-Fi” experience).
• High Availability: Resilient workload management across multiple nodes, ensuring data consistency and service uptime.
• Accessibility: A low-friction user experience (UX) tailored for non-technical users.