feat(blueprints): launch 3 system blueprints, 12 topology layers & in-article mounting
Deploy / build (push) Successful in 24s
Deploy / build (push) Successful in 24s
This commit is contained in:
hoelee committed
1 parent
419c962e2f
commit
c5e473aaad
103 files changed
+1290
-2
No files matched your search
@@ -0,0 +1,416 @@
|
||||
/**
|
||||
* Blueprints (Pillar Pages) Metadata & Hierarchical Layer Tree
|
||||
* Single source of truth for the 3 core architectural pillars and their 12 standard layers.
|
||||
*/
|
||||
|
||||
export const BLUEPRINT_SLUGS = [
|
||||
'self-hosted-infrastructure',
|
||||
'ai-agent-automation',
|
||||
'sme-digital-suite',
|
||||
] as const;
|
||||
|
||||
export type BlueprintSlug = (typeof BLUEPRINT_SLUGS)[number];
|
||||
|
||||
export interface BlueprintLayer {
|
||||
slug: string;
|
||||
name: { en: string; zh: string };
|
||||
scope: { en: string; zh: string };
|
||||
summary: { en: string; zh: string };
|
||||
keyTech: string[];
|
||||
}
|
||||
|
||||
export interface BlueprintMeta {
|
||||
slug: BlueprintSlug;
|
||||
title: { en: string; zh: string };
|
||||
tagline: { en: string; zh: string };
|
||||
metrics: { en: string; zh: string };
|
||||
stats: { value: string; label: { en: string; zh: string } }[];
|
||||
tradeOffs: {
|
||||
title: { en: string; zh: string };
|
||||
content: { en: string; zh: string };
|
||||
};
|
||||
cta: {
|
||||
track: 'sme' | 'hiring';
|
||||
heading: { en: string; zh: string };
|
||||
body: { en: string; zh: string };
|
||||
buttonText: { en: string; zh: string };
|
||||
buttonLink: string;
|
||||
};
|
||||
layers: BlueprintLayer[];
|
||||
}
|
||||
|
||||
export const BLUEPRINTS: Record<BlueprintSlug, BlueprintMeta> = {
|
||||
'self-hosted-infrastructure': {
|
||||
slug: 'self-hosted-infrastructure',
|
||||
title: {
|
||||
en: 'Production Self-Hosted Infrastructure: 162 Containers Across Three Hosts',
|
||||
zh: '生产级自托管基础设施全景：三宿主 162 容器高可用架构',
|
||||
},
|
||||
tagline: {
|
||||
en: 'How one engineer operates 162 production containers across bare metal, NAS, and cloud edge without managed PaaS crutches.',
|
||||
zh: '一名工程师如何借助确定性脚本、内核隔离与三端拓扑，实现 162 个生产容器单人高可用运维。',
|
||||
},
|
||||
metrics: {
|
||||
en: '3 Hosts · 162 Containers · 78 Stacks · 0 Managed PaaS Crutches',
|
||||
zh: '3 台物理主机 · 162 个生产容器 · 78 套编排栈 · 0 云厂商依赖',
|
||||
},
|
||||
stats: [
|
||||
{ value: '162', label: { en: 'Containers in Prod', zh: '运行中生产容器' } },
|
||||
{ value: '3 Hosts', label: { en: 'Unraid · Synology · VPS', zh: '三端异构宿主' } },
|
||||
{ value: '78', label: { en: 'Compose Stacks', zh: '服务编排栈' } },
|
||||
{ value: '11', label: { en: 'Deterministic Cron Loops', zh: '确定性自愈巡检' } },
|
||||
],
|
||||
tradeOffs: {
|
||||
title: {
|
||||
en: 'Architectural Decisions & Production Trade-offs',
|
||||
zh: '核心架构抉择与生产权衡',
|
||||
},
|
||||
content: {
|
||||
en: `Running 162 production containers solo requires strict architectural boundaries rather than brute-force DevOps hours.
|
||||
The foundation splits responsibilities strictly across three disparate tiers: Unraid manages high-capacity persistent storage and raw GPU compute; Synology DSM hosts always-on internal operational services behind Btrfs snapshots; a public VPS serves as the hardened, DMZ ingress reverse proxy.
|
||||
|
||||
Instead of adding heavy distributed consensus engines (Kubernetes/Nomad) that introduce fragile control-plane overhead, every stack is defined as a self-contained Docker Compose unit bound to local volumes. Reliability is maintained by 11 deterministic inspection loops that continuously audit health checks, memory limits, and container lifecycles — proving that deterministic simplicity beats complex orchestration for medium-scale sovereign workloads.`,
|
||||
zh: `单人运维 162 个生产容器，核心在于极度清晰的物理边界与责任划分，而非堆砌运维工时。
|
||||
三端架构各司其职：Unraid 承担大容量持久化阵列存储与 GPU 算力；群晖 DSM 依托成熟的 Btrfs 快照运行 7×24 内部生产服务与数据库；公网 VPS 充当 DMZ 边缘硬化入口。
|
||||
|
||||
放弃在轻量节点上维护脆弱的分布式控制面（如 Kubernetes/Nomad），全站 78 个服务全部收敛为具备独立卷绑定的 Docker Compose 声明单元。系统的长期免维护性由 11 个零 AI 介入的确定性定时巡检脚本守护，以极简的确定性设计压制意外复杂度。`,
|
||||
},
|
||||
},
|
||||
cta: {
|
||||
track: 'hiring',
|
||||
heading: {
|
||||
en: 'Need Battle-Tested Infrastructure & DevOps Engineering?',
|
||||
zh: '需要具备全链路实战能力的系统与 DevOps 工程师？',
|
||||
},
|
||||
body: {
|
||||
en: 'I build, harden, and operate mission-critical systems with complete ownership from kernel cgroups up to application code.',
|
||||
zh: '我具备从 Linux 内核排障、网络穿透到应用代码的全链路端到端交付能力，欢迎查阅完整履历或预约洽谈。',
|
||||
},
|
||||
buttonText: {
|
||||
en: 'View Hiring Profile & Tech Stack →',
|
||||
zh: '查看招聘方评估与技术栈 →',
|
||||
},
|
||||
buttonLink: '/about/#hiring',
|
||||
},
|
||||
layers: [
|
||||
{
|
||||
slug: 'L1-compute-storage-network',
|
||||
name: {
|
||||
en: 'L1: Compute, Storage & Hybrid Network',
|
||||
zh: 'L1: 异构算力、存储与混合组网',
|
||||
},
|
||||
scope: {
|
||||
en: 'Unraid array / Synology NAS / Public VPS / CGNAT traversal / WireGuard & Tailscale mesh / Storage redundancy',
|
||||
zh: 'Unraid 阵列 / 群晖 NAS / 公网 VPS / CGNAT 穿透 / 跨端私有组网 / 存储冗余',
|
||||
},
|
||||
summary: {
|
||||
en: 'The hardware and network topology dividing high-capacity bulk I/O, enterprise services, and edge ingress across three geographically distinct nodes.',
|
||||
zh: '物理硬件、网络拓扑与存储划分底座，将大容量 I/O、核心生产服务与公网入口合理分散在三台物理节点上。',
|
||||
},
|
||||
keyTech: ['Unraid', 'Synology DSM', 'VPS (Ubuntu)', 'Btrfs', 'Cloudflare Tunnels', 'Tailscale'],
|
||||
},
|
||||
{
|
||||
slug: 'L2-edge-proxy-runtime',
|
||||
name: {
|
||||
en: 'L2: Edge Gateway, Runtime & Identity',
|
||||
zh: 'L2: 边缘网关、容器运行时与身份',
|
||||
},
|
||||
scope: {
|
||||
en: 'Traefik edge reverse proxy / Compose conventions / Linux cgroup memory ceilings / Kernel OOM isolation / Authentik SSO',
|
||||
zh: 'Traefik 反向代理 / 78 栈编排规范 / Linux cgroups 内存隔离 / 内核 OOM 守卫 / Authentik SSO 统一中枢',
|
||||
},
|
||||
summary: {
|
||||
en: 'Production ingress routing, declarative Docker service definitions, kernel-level memory boundaries, and centralized SSO security gates.',
|
||||
zh: '公网流量入口路由、声明式 Compose 服务治理、Linux 内核级内存隔离防护，以及统管全域服务的 SSO 鉴权中枢。',
|
||||
},
|
||||
keyTech: ['Traefik v3', 'Docker Engine', 'Linux Kernel (cgroups/dmesg)', 'Authentik SSO', 'Let\'s Encrypt'],
|
||||
},
|
||||
{
|
||||
slug: 'L3-observability-self-healing',
|
||||
name: {
|
||||
en: 'L3: Observability, Loops & Self-Healing',
|
||||
zh: 'L3: 全域可观测性、巡检闭环与自愈',
|
||||
},
|
||||
scope: {
|
||||
en: 'Prometheus cross-host metrics / Grafana dashboards / 11 deterministic inspection crons (Loop Engineering) / Alert deduplication',
|
||||
zh: '跨三端统一 Prometheus 采集 / Grafana 看板 / 11 个确定性巡检脚本（Loop Engineering）/ 告警降噪',
|
||||
},
|
||||
summary: {
|
||||
en: 'Unified monitoring that unmasks false container states, combined with zero-AI deterministic feedback loops that heal infrastructure automatically.',
|
||||
zh: '穿透 Docker 假象的真实底层监控，结合无需人工值守、无 AI 幻觉的确定性定时自愈闭环。',
|
||||
},
|
||||
keyTech: ['Prometheus', 'Grafana', 'Node Exporter', 'cAdvisor', 'Loop Engineering (Shell/Python)'],
|
||||
},
|
||||
{
|
||||
slug: 'L4-secops-cicd-dr',
|
||||
name: {
|
||||
en: 'L4: SecOps, CI/CD & Disaster Recovery',
|
||||
zh: 'L4: 安全基线、CI/CD 与异地容灾',
|
||||
},
|
||||
scope: {
|
||||
en: 'Zero-day runtime mitigation (PHP2Shell) / Gitea + GitHub dual-remote CI/CD / act_runner on unRaid / 3-2-1 Backrest backups',
|
||||
zh: '运行时 0-day 漏洞加固 / Gitea + GitHub 双远端构建 / unRaid act_runner / 3-2-1 异地容灾快照',
|
||||
},
|
||||
summary: {
|
||||
en: 'Defensive engineering: rapid runtime vulnerability patching, automated dual-remote deployments with edge cache purging, and verified disaster recovery.',
|
||||
zh: '安全防御体系：紧急漏洞就地补丁、双代码源自动化发布流水线与经过实测恢复验证的 3-2-1 灾备链条。',
|
||||
},
|
||||
keyTech: ['Gitea Actions', 'Cloudflare Cache Purge', 'Restic / Backrest', 'IPBan', 'Security Hardening'],
|
||||
},
|
||||
],
|
||||
},
|
||||
|
||||
'ai-agent-automation': {
|
||||
slug: 'ai-agent-automation',
|
||||
title: {
|
||||
en: 'AI Agent & Local GPU Automation: Deterministic Workflows + RTX 3060 Inference',
|
||||
zh: '企业级 AI Agent 与本地 GPU 算力自动化：确定性状态机与本地推理管线',
|
||||
},
|
||||
tagline: {
|
||||
en: 'Combining deterministic state machines, local GPU inference, and disciplined agent orchestration into robust business automation.',
|
||||
zh: '用确定性状态机约束大模型边界，依托本地 RTX 3060 显存调度与 Agent 工程闭环，落地高可靠业务自动化。',
|
||||
},
|
||||
metrics: {
|
||||
en: '1 RTX 3060 12GB · 175+ Unit Tests · Multi-Agent Orchestration · 24/7 Production Loops',
|
||||
zh: '1 块 RTX 3060 12GB · 175+ 单元测试 · 多 Agent 协同治理 · 24/7 生产闭环',
|
||||
},
|
||||
stats: [
|
||||
{ value: '12 GB', label: { en: 'VRAM Managed on RTX 3060', zh: 'RTX 3060 极限显存调度' } },
|
||||
{ value: '175+', label: { en: 'Unit Tests for Bot Logic', zh: '状态机与网关单测用例' } },
|
||||
{ value: '24/7', label: { en: 'Unattended Lead Bots', zh: '全天候自动获客接单' } },
|
||||
{ value: '0', label: { en: 'Price & Data Hallucinations', zh: '生产零报价/信息幻觉' } },
|
||||
],
|
||||
tradeOffs: {
|
||||
title: {
|
||||
en: 'Deterministic Engineering vs. Raw Prompt Engineering',
|
||||
zh: '确定性工程设计与纯 Prompt 堆叠的根本区别',
|
||||
},
|
||||
content: {
|
||||
en: `Generative models are brilliant for unstructured semantic comprehension, but notoriously brittle at maintaining state, enforcing catalog boundaries, and processing transactions.
|
||||
Our AI architecture rejects "prompt-only" systems. All customer checkout flows, trial provisioning, and deep links are governed by strict finite state machines before an LLM ever touches the user input.
|
||||
|
||||
On the compute layer, instead of incurring unpredictable cloud API bills and leaking private telemetry, we deploy self-hosted inference pipelines on an on-premise RTX 3060 12GB. By pairing CosyVoice 2 for neural voice synthesis, faster-whisper for acoustic alignment, and ComfyUI API headless runners for multimodal assets, we achieve high throughput with zero ongoing per-token runtime costs.`,
|
||||
zh: `大语言模型擅长处理非结构化语义理解，但在保持会话状态、执行严格商品目录与交易边界时极其脆弱。
|
||||
本架构坚决摒弃“纯 Prompt 堆砌”。所有客户下单意图、试用账号发放与深层链接，在进入 LLM 之前全部被确定性有限状态机严格拦截与处理。
|
||||
|
||||
在算力层，为了避免高昂且不可预测的云端 API 账单与数据泄露隐患，我们将推理任务收敛至本地 12GB RTX 3060 节点。结合 CosyVoice 2 神经语音合成、faster-whisper 强制音素对齐与 ComfyUI API 无头生成管线，以 0 边际成本实现高吞吐工业化生成。`,
|
||||
},
|
||||
},
|
||||
cta: {
|
||||
track: 'sme',
|
||||
heading: {
|
||||
en: 'Want to Deploy Private AI & Automation for Your Business?',
|
||||
zh: '想为您的企业搭建私有化 AI 客服与自动化系统？',
|
||||
},
|
||||
body: {
|
||||
en: 'Replace fragile manual processes and costly monthly SaaS subscriptions with private, reliable automation pipelines.',
|
||||
zh: '消灭繁琐的人工重复操作与昂贵的按人头 SaaS 订阅，搭建全天候获客与自动交付系统。',
|
||||
},
|
||||
buttonText: {
|
||||
en: 'Discuss Your Automation Project on WhatsApp →',
|
||||
zh: 'WhatsApp 详询自动化定制方案 →',
|
||||
},
|
||||
buttonLink: '/about/#sme',
|
||||
},
|
||||
layers: [
|
||||
{
|
||||
slug: 'L1-deterministic-orchestration',
|
||||
name: {
|
||||
en: 'L1: Deterministic Orchestration & State Machines',
|
||||
zh: 'L1: 确定性编排与业务状态机',
|
||||
},
|
||||
scope: {
|
||||
en: 'Synology Docker n8n / Webhook ingress validation / Sandbox isolation / Finite state machines / Idempotency',
|
||||
zh: '群晖 Docker n8n 编排 / Webhook 签名与限流 / 沙箱执行边界 / 确定性有限状态机 / 幂等性兜底',
|
||||
},
|
||||
summary: {
|
||||
en: 'The execution layer that wraps business logic in deterministic state machines, ensuring orders and trials execute cleanly without LLM intervention.',
|
||||
zh: '用确定性状态机与沙箱包裹核心业务逻辑，确保下单、试用发放与关键路径 100% 确定可控。',
|
||||
},
|
||||
keyTech: ['n8n', 'Node.js / TypeScript', 'grammY (Telegram)', 'State Machines', 'PostgreSQL'],
|
||||
},
|
||||
{
|
||||
slug: 'L2-llm-gateway-agents',
|
||||
name: {
|
||||
en: 'L2: Hybrid LLM Gateway & Agent Loops',
|
||||
zh: 'L2: 混合大模型网关与受控 Agent 闭环',
|
||||
},
|
||||
scope: {
|
||||
en: 'LiteLLM routing / Cloud & local model failover / Hermes Agent autonomous workflows / Verification gates / Structured output contracts',
|
||||
zh: 'LiteLLM 动态网关 / 云端与本地模型故障切换 / Hermes Agent 自主研发流 / 多道验收闸门 / 严格结构化输出',
|
||||
},
|
||||
summary: {
|
||||
en: 'The intelligence broker that decouples agent applications from underlying model providers, enforcing verification gates before output acceptance.',
|
||||
zh: '智能网关中枢：解耦应用与底层模型供应商，多模型负载切换，并通过严格测试闸门规范自主 Agent 产出。',
|
||||
},
|
||||
keyTech: ['LiteLLM', 'Hermes Agent', 'OpenAI/Gemini APIs', 'Zod Schema Validation', 'Mem0'],
|
||||
},
|
||||
{
|
||||
slug: 'L3-local-gpu-inference',
|
||||
name: {
|
||||
en: 'L3: Local GPU Inference Stack (RTX 3060)',
|
||||
zh: 'L3: 本地 GPU 算力底座与语音/视觉推理',
|
||||
},
|
||||
scope: {
|
||||
en: '12GB VRAM lifecycle management / CosyVoice 2 zero-shot TTS / faster-whisper forced alignment / RapidOCR verification',
|
||||
zh: '12GB 显存极限释放 / CosyVoice 2 零样本语音克隆 / faster-whisper 音素对齐 / RapidOCR 自动质检',
|
||||
},
|
||||
summary: {
|
||||
en: 'On-premise GPU inference engine replacing recurring cloud speech and vision APIs with private, zero-token-cost local execution.',
|
||||
zh: '私有 GPU 推理基座，将昂贵的云端语音合成与转写替换为零边际成本的本地高性能模型服务。',
|
||||
},
|
||||
keyTech: ['NVIDIA RTX 3060 (12GB)', 'CosyVoice 2', 'faster-whisper', 'RapidOCR', 'PyTorch / CUDA'],
|
||||
},
|
||||
{
|
||||
slug: 'L4-aigc-media-pipelines',
|
||||
name: {
|
||||
en: 'L4: Automated AIGC & Media Pipelines',
|
||||
zh: 'L4: 多模态 AIGC 工业化生成流水线',
|
||||
},
|
||||
scope: {
|
||||
en: 'ComfyUI headless API scripts / YuE2 BF16 audio headroom formulas / Video diffusion pipelines / Remotion & Filmora automation',
|
||||
zh: 'ComfyUI API 无头批量生成 / YuE2 BF16 长音频防截断预算法 / 本地视频生成 / 自动化分镜与音视频合成',
|
||||
},
|
||||
summary: {
|
||||
en: 'High-throughput multimodal production pipelines turning raw prompts and audio stems into complete, broadcast-quality music and video deliverables.',
|
||||
zh: '工业级多模态生产流水线，将文本歌词与音频素材批量转化为高品质长音频与 1080P 完整视频成品。',
|
||||
},
|
||||
keyTech: ['ComfyUI API', 'YuE2 BF16', 'Wan 2.2 / SeedVR2', 'Remotion', 'Python Pipeline'],
|
||||
},
|
||||
],
|
||||
},
|
||||
|
||||
'sme-digital-suite': {
|
||||
slug: 'sme-digital-suite',
|
||||
title: {
|
||||
en: 'SME Digital Suite: High-Conversion Web, SifuMail & Entitlement Engines',
|
||||
zh: '中小企业数字资产与商业交付套件：高性能建站、SifuMail 邮局与权限引擎',
|
||||
},
|
||||
tagline: {
|
||||
en: 'Turnkey digital infrastructure for growing enterprises: lightning-fast web, sovereign email, and self-healing access control.',
|
||||
zh: '专为成长型企业定制的高可用数字基础设施：极致速度站点、高送达率企业邮局与自动化权限中台。',
|
||||
},
|
||||
metrics: {
|
||||
en: '100% Deliverability Baseline · Zero SaaS Per-Seat Tax · Self-Healing Access · Turnkey Delivery',
|
||||
zh: '满分邮件送达率 · 0 SaaS 人头月费税 · 自愈权限引擎 · 一站式交付移交',
|
||||
},
|
||||
stats: [
|
||||
{ value: '10/10', label: { en: 'SifuMail Deliverability Score', zh: '邮件送达信誉满分' } },
|
||||
{ value: '0', label: { en: 'Per-Seat Monthly SaaS Tax', zh: '零按人头月度软件税' } },
|
||||
{ value: '5-Way', label: { en: 'Self-Healing Entitlements', zh: '五链路权限自愈引擎' } },
|
||||
{ value: '100%', label: { en: 'Client Ownership & Source Handover', zh: '客户资产 100% 完整移交' } },
|
||||
],
|
||||
tradeOffs: {
|
||||
title: {
|
||||
en: 'Sovereign Digital Ownership vs. Fragile SaaS Subscriptions',
|
||||
zh: '自主数字资产所有权与脆弱 SaaS 订阅的本质对决',
|
||||
},
|
||||
content: {
|
||||
en: `Small and medium enterprises in Southeast Asia often get trapped in two extremes: either slow, poorly-maintained WordPress template sites on shared hosting, or exorbitant enterprise SaaS tools that charge an escalating tax per team member every month.
|
||||
The SME Digital Suite delivers sovereign, productized architecture:
|
||||
|
||||
1. High-Performance Web: Built on modern static architectures (Astro) or deeply tuned LiteSpeed WordPress engines, achieving Sub-1s page loads and perfect technical SEO schemas.
|
||||
2. Sovereign Email (SifuMail): Independent, fully managed mail server instances configured with strict SPF, DKIM, and DMARC alignments — eliminating $6–$12/user monthly GSuite/M365 overhead.
|
||||
3. Self-Healing Entitlements: NocoDB and n8n workflows that automatically grant, synchronize, and expire digital access rights without manual intervention.`,
|
||||
zh: `东南亚中小企业在信息化进程中常陷入两极困境：要么购买劣质廉价的主机模板站，加载奇慢且漏洞频发；要么被海外昂贵的 SaaS 软件绑架，每月按人头支付沉重的订阅税。
|
||||
SME Digital Suite 提供了真正具备资产自主权的工程解决方案：
|
||||
|
||||
1. 极速企业站点：基于现代化 Astro 静态架构或深度调优的 LiteSpeed WordPress，实现秒级加载与满分技术 SEO 结构化数据。
|
||||
2. 独立企业邮局（SifuMail）：搭建并维护独立的邮件服务器，严格对齐 SPF、DKIM 与 DMARC 防护，彻底省去每人每月数十马币的企业邮箱开销。
|
||||
3. 自愈权限引擎：基于 NocoDB + n8n + AList，实现客户订单与文件权限的自动化开通、实时自愈校验与到期回收。`,
|
||||
},
|
||||
},
|
||||
cta: {
|
||||
track: 'sme',
|
||||
heading: {
|
||||
en: 'Ready to Upgrade Your Business Digital Foundation?',
|
||||
zh: '准备好升级您企业的数字化底层资产了吗？',
|
||||
},
|
||||
body: {
|
||||
en: 'From turnkey high-conversion websites to sovereign mail hosting, get fixed-price delivery with complete ownership.',
|
||||
zh: '从高性能商业建站、企业邮局到私有业务系统，一口价透明交付，享有 100% 源码与数据控制权。',
|
||||
},
|
||||
buttonText: {
|
||||
en: 'Chat with Hoelee on WhatsApp (+60 12-797 2969) →',
|
||||
zh: 'WhatsApp 咨询 Hoelee (+60 12-797 2969) →',
|
||||
},
|
||||
buttonLink: '/about/#sme',
|
||||
},
|
||||
layers: [
|
||||
{
|
||||
slug: 'L1-high-conversion-web',
|
||||
name: {
|
||||
en: 'L1: High-Performance Web & Technical SEO',
|
||||
zh: 'L1: 高性能双语站点与技术 SEO 架构',
|
||||
},
|
||||
scope: {
|
||||
en: 'Astro static edge deployment / OpenLiteSpeed tuning / Bilingual hreflang / TechArticle JSON-LD / Pagefind search',
|
||||
zh: 'Astro 静态边缘构建 / OpenLiteSpeed 深度优化 / 双语 hreflang / TechArticle 结构化数据 / Pagefind 离线检索',
|
||||
},
|
||||
summary: {
|
||||
en: 'Ultra-fast web platforms engineered for credibility, high search engine visibility (SEO/GEO), and zero maintenance overhead.',
|
||||
zh: '极致加载速度与高信任度的企业官方门面，具备完美的搜索引擎与 AI 知识引擎收录架构。',
|
||||
},
|
||||
keyTech: ['Astro', 'OpenLiteSpeed / WordPress', 'Cloudflare Edge Cache', 'Schema.org JSON-LD', 'Pagefind'],
|
||||
},
|
||||
{
|
||||
slug: 'L2-sifumail-communication',
|
||||
name: {
|
||||
en: 'L2: SifuMail & Sovereign Communication',
|
||||
zh: 'L2: SifuMail 独立邮局与高送达率通信',
|
||||
},
|
||||
scope: {
|
||||
en: 'SifuMail mail server deployment / SPF, DKIM, DMARC alignment / Anti-spam hygiene / Dedicated outbound IP routing',
|
||||
zh: 'SifuMail 独立企业邮局部署 / SPF、DKIM、DMARC 满分信誉对齐 / 反垃圾防线 / 独立发信通道隔离',
|
||||
},
|
||||
summary: {
|
||||
en: 'Dedicated enterprise mail infrastructure that keeps business communications out of spam folders without recurring per-mailbox fees.',
|
||||
zh: '高送达率的企业专属独立邮局，确保商业报价信与通知不进垃圾箱，告别昂贵的人头软件税。',
|
||||
},
|
||||
keyTech: ['SifuMail (Mailcow/Postfix)', 'DNS SecOps (SPF/DKIM/DMARC)', 'Rspamd', 'TLS Encryption'],
|
||||
},
|
||||
{
|
||||
slug: 'L3-entitlement-backoffice',
|
||||
name: {
|
||||
en: 'L3: Entitlement Engines & Backoffice CRM',
|
||||
zh: 'L3: 数字商品自愈权限与中台数据底座',
|
||||
},
|
||||
scope: {
|
||||
en: 'NocoDB data store / n8n multi-step workflows / AList drive permission engine / Public verification endpoint',
|
||||
zh: 'NocoDB 关系数据底座 / n8n 多步调度流 / AList 网盘驱动权限引擎 / 零泄露公开查验接口',
|
||||
},
|
||||
summary: {
|
||||
en: 'A self-healing access-control architecture that automatically provisions, verifies, and revokes client file entitlements across storage systems.',
|
||||
zh: '五链路自愈式权限分发中台，全自动处理用户订单、发放网盘访问权限并在到期后平滑回收。',
|
||||
},
|
||||
keyTech: ['NocoDB', 'n8n', 'AList', 'REST APIs', 'PostgreSQL'],
|
||||
},
|
||||
{
|
||||
slug: 'L4-managed-ops-handover',
|
||||
name: {
|
||||
en: 'L4: Managed SecOps, Cost Control & SLA',
|
||||
zh: 'L4: 托管安全运维、TCO 降本与商业交付',
|
||||
},
|
||||
scope: {
|
||||
en: 'Cloud bill audit & SaaS migration / 24/7 uptime monitoring / Anti-lockout procedures / Full documentation handover',
|
||||
zh: '企业云账单审计与 SaaS 降本迁移 / 7×24 生产可用性监控 / 防自锁交付 SOP / 完整资产与文档移交',
|
||||
},
|
||||
summary: {
|
||||
en: 'Complete peace of mind: turnkey handover with full source access, operational runbooks, and ongoing monitoring for zero lock-in.',
|
||||
zh: '让企业主安心的交付闭环：代码与主机资产 100% 移交，配备高可用运维手册与告警接入，绝不设技术门槛扣留客户。',
|
||||
},
|
||||
keyTech: ['Uptime Kuma', 'Traefik Forward-Auth', 'Runbooks / SOP', 'Disaster Recovery Plan'],
|
||||
},
|
||||
],
|
||||
},
|
||||
};
|
||||
|
||||
/** Get metadata for a single blueprint. */
|
||||
export function getBlueprint(slug: string): BlueprintMeta | undefined {
|
||||
return BLUEPRINTS[slug as BlueprintSlug];
|
||||
}
|
||||
|
||||
/** Get all blueprints as an array. */
|
||||
export function getAllBlueprints(): BlueprintMeta[] {
|
||||
return BLUEPRINT_SLUGS.map((slug) => BLUEPRINTS[slug]);
|
||||
}
|
||||
Reference in new issue
Block a user