6ea70bd34f
- Nueva estructura de carpetas según Skynet v7 - Añadidos schemas SQL completos - Documentación de entidades, componentes e integraciones - Modelo de seguridad actualizado - Infraestructura y operaciones reorganizadas
241 lines
5.4 KiB
Markdown
241 lines
5.4 KiB
Markdown
# Inventario de Credenciales
|
|
|
|
**Actualizado:** 2024-12-22
|
|
|
|
---
|
|
|
|
## 1. APIs de Inteligencia Artificial
|
|
|
|
| Servicio | Variable | Tipo | Rotación | Proyecto Infisical |
|
|
|----------|----------|------|----------|-------------------|
|
|
| OpenRouter | `OPENROUTER_API_KEY` | API_KEY | 90 días | anthropic |
|
|
| Groq | `GROQ_API_KEY` | API_KEY | 90 días | anthropic |
|
|
| OpenAI | `OPENAI_API_KEY` | API_KEY | 90 días | anthropic |
|
|
| Anthropic | `ANTHROPIC_API_KEY` | API_KEY | 90 días | anthropic |
|
|
|
|
### Uso por Servicio
|
|
|
|
| Servicio | Función |
|
|
|----------|---------|
|
|
| OpenRouter | LLM Principal |
|
|
| Groq | Backup LLM |
|
|
| OpenAI | Embeddings |
|
|
| Anthropic | Agentes Claude |
|
|
|
|
### Modelos Anthropic
|
|
|
|
| Modelo | ID | Uso |
|
|
|--------|-----|-----|
|
|
| Opus 4.5 | claude-opus-4-5-20251101 | Tareas complejas |
|
|
| Sonnet 4.5 | claude-sonnet-4-5-20251101 | Balance calidad/coste |
|
|
| Haiku 3.5 | claude-3-5-haiku-20241022 | Tareas rápidas |
|
|
|
|
### Configuración Instancias Claude
|
|
|
|
| Instancia | Modelo |
|
|
|-----------|--------|
|
|
| architect | sonnet |
|
|
| hst | sonnet |
|
|
| deck | sonnet |
|
|
| corp | sonnet |
|
|
| runpod | sonnet |
|
|
| locker | haiku |
|
|
|
|
---
|
|
|
|
## 2. Bases de Datos
|
|
|
|
| Servicio | Variable | Tipo | Rotación | Servidor |
|
|
|----------|----------|------|----------|----------|
|
|
| PostgreSQL | `POSTGRES_PASS` | DB_CREDENTIAL | 30 días | ARCHITECT |
|
|
| Directus | `DIRECTUS_ADMIN_PASS` | SERVICE_TOKEN | 30 días | ARCHITECT |
|
|
| Redis | `REDIS_PASSWORD` | DB_CREDENTIAL | 30 días | ARCHITECT |
|
|
| Gitea | `GITEA_DB_PASSWD` | DB_CREDENTIAL | 30 días | ARCHITECT |
|
|
|
|
### PostgreSQL (ARCHITECT)
|
|
|
|
```
|
|
Host: localhost / 172.17.0.1 (Docker)
|
|
Port: 5432
|
|
User: architect
|
|
Database: architect
|
|
```
|
|
|
|
### Tablas Principales
|
|
|
|
| Tabla | Uso |
|
|
|-------|-----|
|
|
| instancias | Configuración instancias Claude |
|
|
| conversaciones | Chats activos |
|
|
| mensajes_v2 | Mensajes de conversaciones |
|
|
| memoria | Memoria persistente |
|
|
| conocimiento | Base de conocimiento |
|
|
| contexto_ambiental | Contexto del sistema |
|
|
|
|
### Directus (ARCHITECT)
|
|
|
|
```
|
|
URL: http://69.62.126.110:8055
|
|
Email: admin@tzzr.me
|
|
```
|
|
|
|
### Redis (ARCHITECT)
|
|
|
|
```
|
|
Host: localhost
|
|
Port: 6379
|
|
```
|
|
|
|
---
|
|
|
|
## 3. Almacenamiento
|
|
|
|
| Servicio | Variable | Tipo | Rotación |
|
|
|----------|----------|------|----------|
|
|
| Cloudflare R2 | `R2_ACCESS_KEY_ID` | API_KEY | 90 días |
|
|
| Cloudflare R2 | `R2_SECRET_ACCESS_KEY` | API_KEY | 90 días |
|
|
| Hostinger S3 | `HOSTINGER_ACCESS_KEY` | API_KEY | 90 días |
|
|
|
|
### Buckets R2
|
|
|
|
| Bucket | Uso |
|
|
|--------|-----|
|
|
| tzzr-backups | Backups automáticos |
|
|
| tzzr-assets | Assets estáticos |
|
|
| tzzr-uploads | Uploads usuarios |
|
|
|
|
---
|
|
|
|
## 4. Infraestructura
|
|
|
|
| Servicio | Variable | Tipo | Rotación |
|
|
|----------|----------|------|----------|
|
|
| Hostinger | `HOSTINGER_API_TOKEN` | API_KEY | 90 días |
|
|
| Cloudflare | `CF_API_TOKEN` | API_KEY | 90 días |
|
|
| Traefik | `TRAEFIK_DASHBOARD_PASS` | SERVICE_TOKEN | 30 días |
|
|
|
|
---
|
|
|
|
## 5. Blockchain
|
|
|
|
| Servicio | Variable | Tipo | Rotación |
|
|
|----------|----------|------|----------|
|
|
| Ethereum | `ETH_PRIVATE_KEY` | SIGNING_KEY | 180 días |
|
|
| Infura | `INFURA_API_KEY` | API_KEY | 90 días |
|
|
|
|
---
|
|
|
|
## 6. Comunicaciones
|
|
|
|
| Servicio | Variable | Tipo | Rotación |
|
|
|----------|----------|------|----------|
|
|
| Slack | `SLACK_WEBHOOK_URL` | SERVICE_TOKEN | 7 días |
|
|
| ntfy | `NTFY_TOKEN` | SERVICE_TOKEN | 7 días |
|
|
| Email SMTP | `SMTP_PASSWORD` | SERVICE_TOKEN | 30 días |
|
|
|
|
---
|
|
|
|
## 7. DNS y CDN
|
|
|
|
| Servicio | Variable | Tipo | Rotación |
|
|
|----------|----------|------|----------|
|
|
| Cloudflare DNS | `CF_DNS_TOKEN` | API_KEY | 90 días |
|
|
| Let's Encrypt | `LETSENCRYPT_EMAIL` | CERTIFICATE | 90 días |
|
|
|
|
---
|
|
|
|
## 8. GPU / RunPod
|
|
|
|
| Servicio | Variable | Tipo | Rotación |
|
|
|----------|----------|------|----------|
|
|
| RunPod | `RUNPOD_API_KEY` | API_KEY | 90 días |
|
|
| RunPod Endpoint | `RUNPOD_ENDPOINT_ID` | CONFIG | N/A |
|
|
|
|
### Endpoints Activos
|
|
|
|
| Módulo | Endpoint |
|
|
|--------|----------|
|
|
| ASR_ENGINE | https://api.runpod.ai/v2/{asr_id} |
|
|
| OCR_CORE | https://api.runpod.ai/v2/{ocr_id} |
|
|
| EMBEDDINGS | https://api.runpod.ai/v2/{emb_id} |
|
|
|
|
---
|
|
|
|
## 9. Acceso a Servidores
|
|
|
|
| Servidor | IP | Dominio | Tipo | Función |
|
|
|----------|-----|---------|------|---------|
|
|
| ARCHITECT | 69.62.126.110 | tzzr.me | SSH_CREDENTIAL | Central |
|
|
| HST | 72.62.2.84 | tzrtech.org | SSH_CREDENTIAL | Tags HST |
|
|
| DECK | 72.62.1.113 | tzzrdeck.me | SSH_CREDENTIAL | Personal |
|
|
| CORP | 92.112.181.188 | tzzrcorp.me | SSH_CREDENTIAL | Empresas |
|
|
|
|
### ARCHITECT (69.62.126.110)
|
|
|
|
```
|
|
Dominio: tzzr.me
|
|
Proveedor: Hostinger KVM2
|
|
SSH Port: 22
|
|
User: root
|
|
```
|
|
|
|
#### Servicios Docker
|
|
|
|
| Servicio | Puerto |
|
|
|----------|--------|
|
|
| Directus | 8055 |
|
|
| Gitea | 3000 |
|
|
| Windmill | 8100 |
|
|
| Infisical | 8082 |
|
|
|
|
### HST (72.62.2.84)
|
|
|
|
```
|
|
Dominio: tzrtech.org
|
|
Función: Tags HST
|
|
```
|
|
|
|
### DECK (72.62.1.113)
|
|
|
|
```
|
|
Dominio: tzzrdeck.me
|
|
Función: Personal
|
|
```
|
|
|
|
### CORP (92.112.181.188)
|
|
|
|
```
|
|
Dominio: tzzrcorp.me
|
|
Función: Empresas
|
|
```
|
|
|
|
---
|
|
|
|
## 10. Cifrado
|
|
|
|
| Tipo | Variable | Rotación |
|
|
|------|----------|----------|
|
|
| Master Key | `MASTER_KEY` | 365 días |
|
|
| KEK-DATA | `KEK_DATA` | 365 días |
|
|
| KEK-SECRETS | `KEK_SECRETS` | 365 días |
|
|
| KEK-SIGNING | `KEK_SIGNING` | 180 días |
|
|
| JWT Secret | `JWT_SECRET` | 180 días |
|
|
|
|
---
|
|
|
|
## Regla de Ejecución
|
|
|
|
> Cada instancia Claude solo ejecuta en su propio servidor.
|
|
> Para otros servidores, delega vía PostgreSQL.
|
|
|
|
---
|
|
|
|
## Ubicación de Credenciales
|
|
|
|
| Tipo | Ubicación |
|
|
|------|-----------|
|
|
| API Keys | Infisical |
|
|
| Contraseñas | Proton Pass |
|
|
| SSH Keys | /root/.ssh/ |
|
|
| Certificados | Traefik (auto-renovación) |
|