Service inventory
Everything this site is built from, and — the part that is hard to find elsewhere — what each third party actually receives. Generated from the real sources: the dependency files, and the Kubernetes manifests, which pin images by digest.
Zero Logs Reader 3.35.0 · 7 services · 79 components · names only
Third parties
None of these run on our hardware. Each row says what it receives, not what it could receive.
Public edge: TLS towards the visitor, WAF, rate limiting, and the tunnel through which traffic reaches the origin.
Sees every HTTP request, so IP address and user agent. It terminates the visitor's TLS: request contents pass through it in the clear.
S3-compatible storage for uploaded log files, photographs and exports.
Holds the binary files exactly as the rider uploads them, VIN included. Region eu-west-par.
Language model behind log analysis and the assistant.
Receives log excerpts and the rider's own notes. It never receives the `provider` field of a maintenance record, which is where a workshop address gets pasted.
Transactional and newsletter email delivery.
Receives the email address and the message body.
Off-site backup: a restic repository in it-mil, plus a monthly encrypted archive in nl-ams under Object Lock.
Receives the whole database and the stored objects, encrypted. The monthly archive is encrypted with age: without that private key it cannot be read even by someone holding the bucket credentials.
Destination for operational logs and metrics.
Receives only what the collector lets through — 500s, warnings, slow requests, task lifecycle — after a redaction pass that masks IP addresses and tokens in URLs.
Distribution of the container images.
Sees no user data. It is listed because it is the supply chain the system takes its running code from.
Container images
The three images this runs as. They are pinned by digest in the deployment manifests, so what runs is always exactly identified — that digest just is not published here, for the reason below.
Python · 34
backend, workers, parser
npm · 42
frontend runtime only — build tooling is not shipped