🏗️ Архитектура — global-prod-main

flowchart TB
  NET(["Интернет"]):::ext
  VPNC(["VPN-клиент"]):::ext

  subgraph BRIDGE["Docker bridge · network-evrotrans-stable-default · 172.19.0.0/16 (18 контейнеров)"]
    direction TB
    NGINX["nginx :80/443 · 172.19.0.5
реверс-прокси + FastCGI
89.111.137.188 / 31.44.10.106"]:::edge
    OVPN["openvpn :1194 · 172.19.0.14"]:::edge
    PHP8["php8 · 172.19.0.19"]:::hot
    CRON["crontab
network_mode: host"]:::back
  end

  SMTP(["SMTP-релей 10.150.0.20:25
(evrotrans-mailer)"]):::ext
  INTEG(["Внешние интеграции:
JWT · Telegram · SMS
Минтранс FTP (ПДП/ОНСИ/МР/АКТ) · GitHub"]):::ext
  EXTSYS(["Внешние билетные / вокзальные системы"]):::ext
  BKP(["Бэкап-сервер (ENV_BACKUP_SERVER_*)"]):::ext

  NET -->|":80/443"| NGINX
  VPNC -->|":1194"| OVPN

  PHP8 -->|"mail"| SMTP
  PHP8 -->|"интеграции"| INTEG
  CRON -->|"PHP CLI + wget"| EXTSYS
  CRON -->|"dump / rsync"| BKP

  classDef edge fill:#11202e,stroke:#4ea1ff,color:#dbe4ee
  classDef back fill:#241a0c,stroke:#ffb454,color:#dbe4ee
  classDef hot fill:#2a1416,stroke:#ff5c5c,color:#ffd9d9
  classDef ext fill:#12161c,stroke:#5a6675,color:#cfd8e2

flowchart TB
  NET(["Интернет"]):::ext
  VPNC(["VPN-клиент"]):::ext
  SMTP(["Внешний SMTP-релей
10.150.0.20:25"]):::ext
  EXTAPI(["Внешние API · вокзалы
Минтранс FTP"]):::ext
  BKP(["Бэкап-сервер
ENV_BACKUP_SERVER_*"]):::ext

  subgraph HOST["ВМ vm-evrotrans (Yandex Cloud) — сеть 172.19.0.0/16"]
    direction TB

    subgraph EDGE["ГРАНИЦА"]
      direction TB
      NGINX["nginx :80/443
172.19.0.5"]:::edge
      CERT["certbot (TLS)
172.19.0.15"]:::edge
      BA["basicauth
172.19.0.3"]:::edge
      OVPN["openvpn :1194
172.19.0.14"]:::edge
    end

    subgraph FRONT["ФРОНТЫ · Node :3000"]
      direction TB
      SITE["monofront3-main-site
172.19.0.7"]:::front
      PERS["monofront3-main-personal
172.19.0.8"]:::front
      SAKAI["sakai3
172.19.0.6"]:::front
      OLDF["erp3 · evro3 · frontv3
(replicas:0)"]:::off
    end

    subgraph BACK["PHP-бэкенды :9000"]
      direction TB
      PHP8["php8 (8.1.17)
172.19.0.19 · 231% CPU"]:::hot
      PHP5["php5 (5.6.31, EOL)
172.19.0.18"]:::back
    end

    subgraph DATA["БАЗЫ ДАННЫХ"]
      direction TB
      MYSQL[("mysql (ET) · mariadb
172.19.0.13")]:::db
      MYSQLPT[("mysqlpt (PT) · mariadb
172.19.0.12")]:::db
      MONGO[("mongo :27017
172.19.0.9")]:::db
      POSTFIX["postfix (выкл. replicas:0)"]:::off
    end

    subgraph ADMIN["АДМИН / МОНИТОРИНГ"]
      direction TB
      PORT["portainer
172.19.0.10"]:::svc
      DOZ["dozzle
172.19.0.4"]:::svc
      MEXP["mongo-express
172.19.0.11"]:::svc
      PMA["phpmyadmin
172.19.0.17"]:::svc
      PMAPT["phpmyadminpt
172.19.0.16"]:::svc
    end

    subgraph OPS["ФОНОВО"]
      direction TB
      CRON["crontab
host-скрипты + PHP CLI + wget"]:::back
      AH["autoheal
172.19.0.2"]:::svc
    end

    DSOCK(["docker.sock"]):::ext
  end

  NET -->|":80/443"| NGINX
  VPNC -->|":1194"| OVPN
  CERT --- NGINX
  BA --- NGINX

  NGINX -->|"proxy_pass"| SITE
  NGINX -->|"proxy_pass"| PERS
  NGINX -->|"proxy_pass"| SAKAI
  NGINX -->|"FastCGI :9000"| PHP8
  NGINX -->|"FastCGI :9000"| PHP5
  NGINX -->|"proxy_pass"| PORT
  NGINX -->|"proxy_pass"| DOZ
  NGINX -->|"proxy_pass"| MEXP
  NGINX -->|"proxy_pass"| PMA
  NGINX -->|"proxy_pass"| PMAPT

  PHP8 --> MYSQL
  PHP8 --> MYSQLPT
  PHP8 --> MONGO
  PHP5 --> MYSQL
  PHP5 --> MYSQLPT

  PMA --> MYSQL
  PMAPT --> MYSQLPT
  MEXP --> MONGO

  PHP8 -->|"mail"| SMTP
  CRON --> PHP8
  CRON -->|"PHP CLI + wget"| EXTAPI
  CRON -->|"dump / rsync"| BKP
  AH --> DSOCK

  classDef edge fill:#11202e,stroke:#4ea1ff,color:#dbe4ee
  classDef front fill:#0f2417,stroke:#56d364,color:#dbe4ee
  classDef back fill:#241a0c,stroke:#ffb454,color:#dbe4ee
  classDef hot fill:#2a1416,stroke:#ff5c5c,color:#ffd9d9
  classDef db fill:#1d1430,stroke:#bc8cff,color:#e9def9
  classDef svc fill:#10242b,stroke:#3fb6c9,color:#cfeef5
  classDef ext fill:#12161c,stroke:#5a6675,color:#cfd8e2
  classDef off fill:#171b21,stroke:#3a444f,color:#7d8896

flowchart TB
  CRON["crontab (host)
config: ./crontab/config/root"]:::back

  ADMIN["cron_admin.sh (r3ddan9)
БЭКАПЫ И ОЧИСТКА (host/*.sh)"]:::back
  USER["cron_user.sh (evrotrans)"]:::back

  CRON --> ADMIN
  CRON --> USER

  subgraph BK["Бэкапы и очистка"]
    direction TB
    BCFG["config — 1/10/20 числа · 06:00"]:::back
    BDB["database — каждый час (58 * * * *)"]:::back
    BWEB["web — еженедельно (1/7/14/21/28 · 06:00)"]:::back
    BCLN["cleaner_* + logs_cleaner"]:::back
  end
  ADMIN --> BCFG
  ADMIN --> BDB
  ADMIN --> BWEB
  ADMIN --> BCLN
  BCLN -->|"rsync"| BKPSRV(["Бэкап-сервер
ENV_BACKUP_SERVER_*"]):::ext

  subgraph STK["СТЕК"]
    direction TB
    SCRT["certbot_renew (сб 01:00)"]:::edge
    SNGX["restart nginx (сб 03:35)"]:::edge
    SMYS["mysql_courtship (7 число)"]:::db
  end
  USER --> SCRT
  USER --> SNGX
  USER --> SMYS

  subgraph PHPCLI["PHP CLI · crontab-scripts-php"]
    direction TB
    P1["api3_1min ⚠️ КАЖДУЮ МИНУТУ"]:::back
    P2["api3_3min · 30min · 1w (пн 04:45)"]:::back
  end
  USER --> P1
  USER --> P2
  P1 -->|"нагрузка"| PHP8["php8
172.19.0.19 · 231% CPU"]:::hot
  P2 --> PHP8

  subgraph WGET["WGET-скрейперы · crontab-scripts-wget/x_*"]
    direction TB
    WAPI["api / api3 (sms · telegram · actions)"]:::back
    WPART["партнёрские билеты (evrotrans · rosbilet)"]:::back
    WVED["ведомости (avgust · kpasru)"]:::back
    WVOK["вокзалы: artmark-mosmetro · melitopol
region-bilet · rostov · probilets
(интервалы 1 мин … 3 ч)"]:::back
    WCLN["x_cron-cleaner.sh — каждые 12 ч"]:::back
  end
  USER --> WAPI
  USER --> WPART
  USER --> WVED
  USER --> WVOK
  USER --> WCLN
  WAPI -->|"HTTP"| EXTSYS(["Внешние билетные /
вокзальные системы"]):::ext
  WPART -->|"HTTP"| EXTSYS
  WVED -->|"HTTP"| EXTSYS
  WVOK -->|"HTTP"| EXTSYS

  classDef edge fill:#11202e,stroke:#4ea1ff,color:#dbe4ee
  classDef back fill:#241a0c,stroke:#ffb454,color:#dbe4ee
  classDef hot fill:#2a1416,stroke:#ff5c5c,color:#ffd9d9
  classDef db fill:#1d1430,stroke:#bc8cff,color:#e9def9
  classDef ext fill:#12161c,stroke:#5a6675,color:#cfd8e2