High-performance distributed edge infrastructure orchestrated via K3s and WireGuard mesh. Featuring live per-thread telemetry inspired by Mission Center and real-time plant floor automation.
Temperature: every 5 minutes · CPU / RAM: every 10 minutes · Storage: every 12 hours.
RKE2 Control Plane (VM 101 @ PVE / Host x) · x1 LXD Edge Fleet · x2 / x3 Compute · ec2 Cloud Gateway
RKE2 API unavailable. Node membership and pod placement are not currently verified. VM 101 is listed above with measured PVE guest CPU and RAM.
Collector status records shown above. External log viewer and InfluxDB expose their own application data.
Services grouped by category, with device and environment filters. Runtime placement is verified where inventory is available; RKE2 routes are configured targets until the API is reachable.
PostgreSQL · Runtime: x-db. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
Mosquitto · Runtime: x-mosquitto. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
RabbitMQ · Runtime: x-rabbitmq. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
Ignition · Runtime: x-ignition. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
Ignition SCADA · Runtime: lxc-scada. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
Ignition MES · Runtime: lxc-mes. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
InfluxDB · Runtime: lxc-influx. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
PostgreSQL · Runtime: lxc-postgres. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
RabbitMQ · Runtime: lxc-rabbitmq. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
Mosquitto · Runtime: lxc-mosquitto. Listener verified Oct 05, 2026. Running container status appears in telemetry; application health is separate.
Primary Ignition 8.1 Industrial Automation Gateway. High-availability plant execution controller with real-time tag engine and database connectivity.
Redundant warm-standby Ignition gateway. Real-time state replication and instant failover protection for mission-critical automation.
Engineering development and validation gateway for designing automation logic, testing Python modules, and rapid prototyping.
Enterprise Administration Module (EAM) Controller. Centralized management of gateway agents, project distributions, and remote tasks.
Complete IEC 61131-3 soft programmable logic controller runtime. Executes Structured Text (ST) and Ladder Diagram (LD) programs with Modbus TCP server.
Self-hosted Git version control system. Hosts PLC project files, Ignition gateway backups, automation scripts, and CI/CD pipelines.
Clean, modern Kubernetes web UI. Real-time pod lifecycle monitoring, namespace inspections, container logs, and cluster events.
High-velocity time-series sensor historian. Stores continuous plant floor telemetry, soft PLC process variables, and environmental metrics.
Unified operational observability dashboards. Real-time telemetry visualization, node hardware metrics, alerting rules, and process trends.
High-performance distributed MQTT broker powering the Unified Namespace (UNS). Supports millions of messages with Sparkplug B edge specifications.
Low-code visual event wiring tool. Seamlessly bridges Modbus registers, MQTT UNS topics, REST webhooks, and automation logic.
Self-hosted encrypted operator messaging and C2 alerts channel. Includes the official public xk3s community hub and automated Kubernetes webhooks.
Cluster-wide zero-trust DNS filtering and query sinkhole. Blocks tracking, telemetry leakage, and unwanted network connections.
Container orchestration and image lifecycle manager. Provides container stack deployments, volume monitoring, and log inspection.
Robust distributed AMQP message broker for asynchronous plant floor event queues, reliable message buffering, and service pub/sub.
Comprehensive cluster architecture manuals, runbooks, ingress matrices, WireGuard network topology, and deployment manifests.
Live OT/ICS threat intelligence, CVE tracking, CISA KEV advisories, and active MITRE ATT&CK ICS telemetry across cluster nodes.
OT/ICS/BAS asset intelligence, 86 manufacturers, 1,350 hardware records, 1,265 software records, firmware compatibility and Purdue zone mapping.
Open-source X home automation hub. Centralizes smart energy monitors, environmental telemetry, Zigbee/Matter devices, and local automation rules.
Industrial edge connectivity gateway. Converts Modbus, OPC UA, Siemens, and fieldbus protocols directly into MQTT / Sparkplug B for the Unified Namespace.
Interactive data science workspace. Preloaded with Python kernels, Pandas, InfluxDB clients, and automated SCADA analytics notebooks.
Lightweight SQL management interface. Direct visual access to the fleet PostgreSQL instance (ignition_db), telemetry schemas, and transaction tables.
Real-time log aggregation and wrapper console monitor across all SCADA gateways (Prod Master, Backup, Dev, and EAM).
Tactical edge infrastructure portal hosted on the AWS ingress hub. Displays continuous node telemetry, WireGuard mesh routing, and edge health analytics.
X Personal Infrastructure: X Control Plane (VM 101 RKE2 Master hosted on Proxmox VE Node x), K3s Edge Fleet (x1 Master & Family Compute, x2 Worker & HDMI Kiosk), and AWS EC2 Ingress Gateway (ec2). All nodes interconnected via encrypted WireGuard site-to-cloud mesh and Zero-Trust Tailscale C2.
ssh pve (Mutual Ed25519 Key Auth) • Trusted Multi-SAN SSL
turn-off-backlight.service. No bleed, lower power, cooler thermals.:8006 • Terminal via ssh pve. Zero peripherals required.
