Skip to content

Domain map

Apps grouped by the domain they live on. Useful for answering "what runs where" without scrolling through 32 individual docs.

For DNS, registrar, MX, and TLS detail per domain: see domains.md.

projecteidos.com — public product + corporate (8 services)

graph LR
    PE[projecteidos.com] --> WP[PE WordPress site]
    PE --> Parallax[parallax · Parallax product]
    PE --> Bot[bot · Teams Bot]
    PE --> Git[git · GitLab]
    PE --> Plat[platform · Dokploy]
    PE --> AUR[apex-ur · APEX UR]
    PE --> A1[apex1 · APEX1 PE]
    PE --> A2[apex2 · APEX2 PE]
Subdomain App Doc
(apex) PE WordPress site 11-pe-wordpress.md
parallax. Parallax 01-parallax.md
bot. Teams Bot 07-teams-bot.md
git. GitLab 16-gitlab.md
platform. Dokploy 18-dokploy.md
apex-ur. APEX UR 08-apex-ur.md
apex1. APEX1 PE 09-apex1-pe.md
apex2. APEX2 PE 10-apex2-pe.md

eidos-global.com — corporate / CRM (3 services + 1 cross-domain)

graph LR
    EG[eidos-global.com] --> WP2[EIDOS Global WordPress]
    EG --> CrmUK[crm · CRM UK]
    EG --> CrmIN[in.crm · CRM IN]
    EG -.delegated.-> WF[eidos-global.tneconnect.app · PE Workforce]
Subdomain App Doc
(apex) EIDOS Global WordPress 12-eidos-global-wordpress.md
crm. CRM UK 04-crm-uk.md
in.crm. CRM IN 05-crm-in.md
(cross-domain on tneconnect.app) PE Workforce App tenant 03-pe-workforce.md

tneconnect.app — workforce product (5 services)

.app TLD is HSTS-preloaded — TLS must never lapse on any host here, or browsers refuse to connect.

graph LR
    TNE[tneconnect.app] --> WP3[TnE Connect WordPress]
    TNE --> Crm[crm · CRM TnE Connect]
    TNE --> FW[fourway · Fourway Workforce]
    TNE --> EGtenant[eidos-global · PE Workforce]
Subdomain App Doc
(apex) TnE Connect WordPress 13-tne-connect-wordpress.md
crm. CRM TnE Connect 06-crm-tne.md
fourway. Fourway Workforce App 02-fourway-workforce.md
eidos-global. PE Workforce App 03-pe-workforce.md

448.global — internal infrastructure estate (15 services)

graph TB
    subgraph IDENT[Identity & secrets]
        Auth[auth · Authentik]
        Vault[vault · Vault]
    end
    subgraph PLAT[Platform & ops]
        Port[portainer · Portainer]
        Mon[monitor · Beszel]
        Notify[notify · Gotify]
    end
    subgraph NET[Network & access]
        WG[wg · Wireguard]
        Coder[coder · Coder]
    end
    subgraph DATA[Storage & data]
        S3[s3 · MinIO]
        Vid[videos · PE Tube]
        Ax1[apex1 · APEX1 448]
        Ax2[apex2 · APEX2 448]
    end
    subgraph PROD[Productivity]
        AI[ai · Open WebUI]
        Draw[draw · Draw.io]
        N8n[n8n · n8n]
        Tools[tools · IT Tools]
    end
Subdomain App Doc
auth. Authentik 14-authentik.md
vault. Vault 15-vault.md
portainer. Portainer 19-portainer.md
monitor. Beszel 21-beszel.md
notify. Gotify 23-gotify.md
wg. Wireguard 20-wireguard.md
coder. Coder 24-coder.md
s3. MinIO 17-minio.md
videos. PE Tube 29-pe-tube.md
apex1. APEX1 448 30-apex1-448.md
apex2. APEX2 448 31-apex2-448.md
ai. Open WebUI 26-open-webui.md
draw. Draw.io 27-drawio.md
n8n. n8n 25-n8n.md
tools. IT Tools 28-it-tools.md

Apps without a public URL

App Doc
Watchtower (background daemon) 22-watchtower.md
SQLcl Container (CLI tool) 32-sqlcl-container.md

Cross-domain observations

  • eidos-global.tneconnect.app lives on tneconnect.app (workforce product domain) but serves the eidos-global.com corporate brand — a tenant arrangement, not a sub-brand of TnE Connect.
  • The five Oracle APEX hosts are split across two domains (projecteidos.com × 3, 448.global × 2). Whether they share Oracle DBs underneath is the key question — see the per-app interview blocks.
  • The internal-tools cluster on 448.global is the densest part of the estate. If many of these *.448.global services share one VPS / one reverse proxy, the blast radius of that single host is enormous. [INFO NEEDED] to confirm.