flowchart TB
  subgraph PublicEdge["📡 Public Edge Layer"]
    WAF["Cloudflare Edge"]
    CFTunnel["Cloudflare Tunnel"]
  end

  subgraph Internet["🌍 Public Internet"]
    Users["End Users"]
    Slack["Slack Channel"]
  end

  subgraph CI_CD["🔄 GHA CI/CD Pipeline"]
    Git["GitHub Repo CI/CD"]
    ALint["Ansible Lint"]
    Molecule["Molecule Testing"]
    CiCheck["Linter/Formatter/StaticAnalysis"]
    Trivy["Trivy Security Scan"]
    GHCR["Github Registry"]
  end

  subgraph Tailscale["🌐 Tailscale Devices"]
    subgraph MainDevices["🖥️💻 Main Devices"]
      MainPC["MainPC"]
      MainLaptop["MainLaptop"]
      Ansible["Master Ansible"]
      Terraform["Master Terraform"]
    end

    subgraph MainPC["🖥️ Personal Computer"]
      Ollama["Local Ollama Models"] --> SSH1["SSH Keys"]
    end

    subgraph MainLaptop["💻 Personal Laptop"]
      SSH2["SSH Keys"]
    end

    subgraph Pi5["⚙️ Node - Raspberry Pi 5"]
      subgraph SSHD1["🔒 SSHD Configs"]
        F2B["Fail2ban"] --> NoIP["No Local IP SSH"] --> Port22["Only on Port 22"] --> UFW["Only allow Tailscale Devices"] --> AKeys["No Key, No Entry"] --> APerms["No Root Login"] --> Access["SSH Completed"]
      end

      subgraph Docker["🐳 Docker Containers"]
        DLogs["Docker Logs"]

        subgraph DiagramStack["📊 Compose - Diagram Stack (Observability Experimentation Application)"]
          Frontend2["React/Vite Frontend (Diagram)"]
          subgraph Backend2["Node.js Backend (Diagram)"]
            Nodejs2["Node JS Runtime"]
            OTLPDep["OTLP Metrics HTTP"]
            OTLPDep2["OTLP Spans HTTP"]
          end
          Postgres["Postgres DB :5432"]
          PostgresExporter["Postgres Exporter :9187"]
        end

        subgraph ObservabilityStack["📊 Compose - Observability Stack (LGTM + Alloy)"]
          Alloy["Grafana Alloy:12345"]
          Prom["Prometheus:9090"]
          Loki["Loki:3100"]
          Tempo["Tempo:3200"]
          Grafana["Grafana Visualization :3030"]
          AManager["AlertManager:9093"]
        end
      end
    end

    subgraph DigitalOcean["💧 DigitalOcean Cloud"]
      subgraph Droplet1[" Debian Droplet"]
        Falco["Falco Security"]
        subgraph DODocker["🐳 Docker Compose - Traffic Stack"]
          DONginx["Nginx Reverse Proxy"]
          DOCfD["Cloudflared Container"]
        end

        subgraph AppLayer["💼 Compose - Portfolio Stack (No Telemetry)"]
          Frontend["React/Vite Frontend"]
          Backend["Node.js Backend"]
        end
      end
    end
  end

  Git -- CI Check --> ALint & CiCheck
  CiCheck -- Action --> Trivy
  ALint -- Deploy --> Molecule
  Molecule -- Deploy --> SSHD1
  Trivy -- Build/Push --> GHCR

  Users -- HTTPS --> WAF --> CFTunnel
  CFTunnel -. HTTPS .-> DOCfD
  DOCfD --> DONginx
  DONginx -- HTTP --> Frontend & Backend
  SSH1 & SSH2 -- Tailscale Tunnel --> SSHD1

  Frontend & Backend -- Pull w/Token --> GHCR
  Frontend2 & Nodejs2 -- Pull w/Token --> GHCR

  Alloy -- Scrape Logs --> DLogs
  Alloy -- Remote Write --> Prom
  Alloy -- Loki Push --> Loki
  Alloy -- OTLP --> Tempo
  Prom & Loki & Tempo -- Query --> Grafana
  Prom -- Alerting Rules --> AManager --> Slack

  Frontend2 -. Frontend Logs/Traces .-> Alloy
  OTLPDep & OTLPDep2 -. OTLP Metrics & Spans .-> Alloy
  PostgresExporter -- Scrapes Metrics --> Postgres
  PostgresExporter -. Metrics :9187 .-> Alloy