Архитектура сервиса ЕвроТранс

flowchart TB
  NET(["🌐 Интернет"])
  subgraph G["① GLOBAL — прод-ядро · 89.111.137.188"]
    direction TB
    NGINX["nginx :80 / :443"]
    PHP["php8 / php5 :9000"]
    DBG[("MySQL ET/PT · Mongo")]
    FRONT["Nuxt-фронты
monofront3 · sakai3"]
    VPN["openvpn :1194"]
    ADM["portainer · dozzle
pma×2 · mongo-express"]
    NGINX --> PHP --> DBG
    NGINX --> FRONT
    NGINX --> ADM
  end
  subgraph M["② MAILER · 31.44.10.106"]
    POSTFIX["postfix + DKIM
relay :25"]
  end
  subgraph V["③ VIPNET · tun0 7.1.39.7"]
    direction TB
    VSFTPD["vsftpd :48080"] --> FPROXY["ftp-proxy :21001-04
pdp · onsi · timetable · ack"]
  end
  RCPT(["Gmail / Yandex
получатели"])
  EGIS(["ЕГИС ОТБ
*.import.inet.egis-otb.local:21021"])
  EXT["Внешние бэкап-узлы
dev.evrotrans.net · 77.222.52.97"]
  ZBX(["zbx.nunkinet.ru
Zabbix + Telegram-бот"])
  NET -->|"HTTPS 443 / 80"| NGINX
  NET -->|"OpenVPN 1194"| VPN
  PHP -->|"SMTP · eth2 → 10.150.0.20:25"| POSTFIX
  PHP -->|"FTP · eth1 → 10.0.0.5"| VSFTPD
  G -->|"backup scp"| EXT
  POSTFIX -->|"исходящая почта по MX"| RCPT
  FPROXY -->|"ViPNet tun0"| EGIS
  G -.->|"zabbix :10050"| ZBX
  M -.-> ZBX
  V -.-> ZBX
  class NGINX,PHP,DBG,FRONT,VPN,ADM g1
  class POSTFIX g2
  class VSFTPD,FPROXY g3
  class EGIS gp
  class EXT,RCPT,ZBX ext
  style G stroke:#4ea1ff,stroke-width:2px
  style M stroke:#ffb454,stroke-width:2px
  style V stroke:#56d364,stroke-width:2px
  classDef g1 fill:#11202e,stroke:#4ea1ff,color:#dbe4ee
  classDef g2 fill:#241a0c,stroke:#ffb454,color:#dbe4ee
  classDef g3 fill:#0f2417,stroke:#56d364,color:#dbe4ee
  classDef gp fill:#1d1430,stroke:#bc8cff,color:#e9def9
  classDef ext fill:#12161c,stroke:#5a6675,color:#cfd8e2

flowchart TB
  subgraph VPC1["VPC 10.128.0.0/24 — УПРАВЛЕНИЕ (SSH · мониторинг · интернет)"]
    direction LR
    G1["global · .15 (eth0)"]
    M1["mailer · .20 (eth0)"]
    V1["vipnet · .5 (eth0)"]
  end
  subgraph VPC2["VPC 10.150.0.0/24 — СЕРВИС / ПОЧТА"]
    direction LR
    G2["global · .15 (eth2)"]
    M2["mailer · .20 (eth1)"]
  end
  subgraph VPC3["VPC 10.0.0.0/24 — ДАННЫЕ"]
    direction LR
    G3["global · .15 (eth1)"]
    V3["vipnet · .5 (eth1)"]
  end
  subgraph VIP["ViPNet — только vipnet"]
    direction LR
    VT["tun0 7.1.39.7/32"]
    EGN["сети контрагентов
10.10.x · 11.0.0.0/8 · 172.16.x
*.egis-otb.local"]
    VT --> EGN
  end
  G2 ---|"SMTP 25"| M2
  G3 ---|"FTP"| V3
  V1 -.->|"vipnetclient"| VT
  class G1,G2,G3 g1
  class M1,M2 g2
  class V1,V3,VT g3
  class EGN gp
  classDef g1 fill:#11202e,stroke:#4ea1ff,color:#dbe4ee
  classDef g2 fill:#241a0c,stroke:#ffb454,color:#dbe4ee
  classDef g3 fill:#0f2417,stroke:#56d364,color:#dbe4ee
  classDef gp fill:#1d1430,stroke:#bc8cff,color:#e9def9

flowchart TB
  NET(["Интернет :80 :443"])
  VPNI(["Интернет :1194"])
  NGINX["nginx 1.24-alpine
:80 / :443 · .5"]
  CB["certbot .15
(TLS Let's Encrypt)"]
  BA["basicauth .3"]
  PHP8["php8 · 8.1.17 · .19
OPcache"]
  PHP5["php5 · 5.6.31 (EOL) · .18"]
  FR["Nuxt-фронты
monofront3-site .7
-personal .8 · sakai3 .6"]
  ADM["Админки
portainer .10 :9000
dozzle .4 :8080
mongo-express .11 :8081
phpMyAdmin ET/PT .17/.16"]
  OVPN["openvpn .14
:1194 / :943 · NET_ADMIN"]
  MY[("mysql ET
mariadb 10.8.3 · .13")]
  MYPT[("mysqlpt PT
mariadb 10.8.3 · .12")]
  MO[("mongo 4.4.30
:27017 · .9")]
  CRON["crontab (host-сеть)
cron · php-cli · wget-скрейперы"]
  AH["autoheal .2
рестарт unhealthy"]
  NET --> NGINX
  VPNI --> OVPN
  NGINX -->|"FastCGI :9000"| PHP8
  NGINX -->|"FastCGI :9000"| PHP5
  NGINX -->|"proxy :3000"| FR
  NGINX -->|"proxy"| ADM
  NGINX -.->|"TLS"| CB
  NGINX -.->|"htpasswd"| BA
  PHP8 --> MY
  PHP8 --> MYPT
  PHP8 --> MO
  PHP5 --> MY
  CRON -.->|"SSH localhost 48008"| NGINX
  AH -.->|"docker.sock"| NGINX
  class NGINX,CB,BA,PHP8,PHP5,FR,ADM,OVPN,CRON,AH g1
  class MY,MYPT,MO db
  classDef g1 fill:#11202e,stroke:#4ea1ff,color:#dbe4ee
  classDef db fill:#0e2030,stroke:#3d7bb0,color:#dbe4ee

flowchart LR
  CR["crontab контейнер
cron_admin.sh / cron_user.sh"]
  HOST["sshd :48008
(localhost)"]
  DB[("stable_mysql_1
mysqldump -uroot")]
  TAR["tar --lzma → openssl AES-256
(-k w7yNyNnJVx4N)"]
  DST["dev.evrotrans.net:48008
77.222.52.97:8008 (etrans@)"]
  CR -->|"sshpass ssh + sudo -S"| HOST
  HOST --> TAR
  DB --> TAR
  TAR -->|"scp"| DST
  class CR,HOST,TAR g2
  class DB db
  class DST ext
  classDef g2 fill:#241a0c,stroke:#ffb454,color:#dbe4ee
  classDef db fill:#0e2030,stroke:#3d7bb0,color:#dbe4ee
  classDef ext fill:#12161c,stroke:#5a6675,color:#cfd8e2

flowchart TB
  OP(["Оператор
r3ddan9 / evrotrans"])
  VS["vsftpd :48080
chroot $HOME · ssl=NO"]
  P1["ftp-pdp :21001"]
  P2["ftp-onsi :21002"]
  P3["ftp-timetable :21003"]
  P4["ftp-ack :21004"]
  E1(["auto.pdp.import…:21021
персданные пассажиров"])
  E2(["onsi.import…:21021
подсистема ОНСИ"])
  E3(["timetable.import…:21021
расписания"])
  E4(["ack.import…:21021
квитанции"])
  OP -->|"FTP открытым текстом :48080"| VS
  VS --> P1
  VS --> P2
  VS --> P3
  VS --> P4
  P1 -->|"ViPNet tun0"| E1
  P2 -->|"ViPNet tun0"| E2
  P3 -->|"ViPNet tun0"| E3
  P4 -->|"ViPNet tun0"| E4
  class VS,P1,P2,P3,P4 g3
  class E1,E2,E3,E4 gp
  classDef g3 fill:#0f2417,stroke:#56d364,color:#dbe4ee
  classDef gp fill:#1d1430,stroke:#bc8cff,color:#e9def9

flowchart LR
  PHP["php8 (GLOBAL)
MAIL_HOST=10.150.0.20"]
  PF["postfix (MAILER)
OpenDKIM milter :12301 · :25"]
  MX(["Gmail / Yandex
почтовые серверы MX"])
  PHP -->|"SMTP+SASL · 10.150.0.15 → 10.150.0.20:25"| PF
  PF -->|"подпись DKIM evrotrans.net → MX"| MX
  class PHP g1
  class PF g2
  class MX ext
  classDef g1 fill:#11202e,stroke:#4ea1ff,color:#dbe4ee
  classDef g2 fill:#241a0c,stroke:#ffb454,color:#dbe4ee
  classDef ext fill:#12161c,stroke:#5a6675,color:#cfd8e2

flowchart LR
  G["php8 (GLOBAL)
MINTRANS_FTP_{PDP,ONSI,MR,ACT}"]
  VF["vsftpd :48080
(VIPNET)"]
  FP["ftp-proxy :21001-04"]
  EG(["ЕГИС ОТБ
*.import.inet.egis-otb.local:21021"])
  G -->|"FTP · 10.0.0.15 → 10.0.0.5"| VF
  VF --> FP
  FP -->|"ViPNet tun0 7.1.39.7"| EG
  class G g1
  class VF,FP g3
  class EG gp
  classDef g1 fill:#11202e,stroke:#4ea1ff,color:#dbe4ee
  classDef g3 fill:#0f2417,stroke:#56d364,color:#dbe4ee
  classDef gp fill:#1d1430,stroke:#bc8cff,color:#e9def9

flowchart TB
  G1["GLOBAL"]
  M1["MAILER"]
  V1["VIPNET"]
  AC(["Acronis / Yandex Cyber Backup
облако 84.47.172.135:7771"])
  SC["скрипты host/
tar+lzma → AES-256 → scp"]
  DST(["dev.evrotrans.net · 77.222.52.97"])
  G1 -->|"Контур A: агент"| AC
  M1 -->|"Контур A: агент"| AC
  V1 -->|"Контур A: агент"| AC
  G1 -->|"Контур B: скрипты"| SC
  SC --> DST
  class G1 g1
  class M1,SC g2
  class V1 g3
  class AC,DST ext
  classDef g1 fill:#11202e,stroke:#4ea1ff,color:#dbe4ee
  classDef g2 fill:#241a0c,stroke:#ffb454,color:#dbe4ee
  classDef g3 fill:#0f2417,stroke:#56d364,color:#dbe4ee
  classDef ext fill:#12161c,stroke:#5a6675,color:#cfd8e2

flowchart TB
  G1["GLOBAL"]
  M1["MAILER"]
  V1["VIPNET"]
  Z(["zbx.nunkinet.ru
Zabbix-сервер"])
  ST(["status.nunkinet.ru
статус-страница"])
  TG(["Telegram
@evrotrans_alert_bot"])
  G1 -->|"zabbix-agent2 :10050"| Z
  M1 -->|"zabbix-agent2 :10050"| Z
  V1 -->|"zabbix-agent2 :10050"| Z
  Z --> ST
  Z --> TG
  class G1 g1
  class M1 g2
  class V1 g3
  class Z,ST,TG ext
  classDef g1 fill:#11202e,stroke:#4ea1ff,color:#dbe4ee
  classDef g2 fill:#241a0c,stroke:#ffb454,color:#dbe4ee
  classDef g3 fill:#0f2417,stroke:#56d364,color:#dbe4ee
  classDef ext fill:#12161c,stroke:#5a6675,color:#cfd8e2