From 905c762accb0321ba1b268be25708eab39d48b8e Mon Sep 17 00:00:00 2001 From: Andrey Lutsenko Date: Sat, 13 Jun 2026 21:56:54 +1000 Subject: [PATCH] =?UTF-8?q?fix:=20=D1=81=D0=BE=D0=B2=D0=BC=D0=B5=D1=81?= =?UTF-8?q?=D1=82=D0=B8=D0=BC=D1=8B=D0=B9=20=D1=81=D0=B8=D0=BD=D1=82=D0=B0?= =?UTF-8?q?=D0=BA=D1=81=D0=B8=D1=81=20Mermaid=20=D0=B2=20architecture.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Gitea не парсил узлы с
и кириллицей без кавычек; добавлен текстовый fallback. --- docs/security/architecture.md | 24 +++++++++++++++--------- 1 file changed, 15 insertions(+), 9 deletions(-) diff --git a/docs/security/architecture.md b/docs/security/architecture.md index e55e58e..7df02a6 100644 --- a/docs/security/architecture.md +++ b/docs/security/architecture.md @@ -4,16 +4,22 @@ ```mermaid flowchart TB - Internet[Интернет] - MT[MikroTik / периметр] - HAP[HAProxy 192.168.160.117
25 80 443] - ACL[HAProxy ACL
SNI Host allowlist] - BE[Бэкенды 192.168.160.0/24] + internet["Интернет"] + mt["MikroTik / периметр"] + hap["HAProxy 192.168.160.117
порты 25 80 443"] + acl["HAProxy ACL
SNI / Host allowlist"] + backends["Бэкенды 192.168.160.0/24"] - Internet --> MT - MT -->|DNAT публичный IP| HAP - HAP --> ACL - ACL --> BE + internet --> mt + mt -->|DNAT публичный IP| hap + hap --> acl + acl --> backends +``` + +Если блок выше не рисуется (старый кеш браузера / Gitea), та же схема текстом: + +```text +Интернет → MikroTik (DNAT) → HAProxy .117 (25/80/443) → ACL (SNI/Host) → бэкенды .160.0/24 ``` ## Два контура