Skip to content

Zygy Platform — Operations Guide

This site documents everything needed to operate, maintain, and extend the Zygy AI business intelligence platform.

Production Server

Item Value
VPS host 172.237.81.37
SSH user zygy
SSH command ssh zygy@172.237.81.37
Project path Stored in GitHub secret PROJECT_PATH
OS Ubuntu (Docker + Docker Compose installed)

Quick Reference — Live URLs

Domain Routes to Notes
workflow.zygy.com frontend-workflow + backend-workflow API Main product UI
grafana.zygy.com Grafana :3000 Monitoring dashboards
eval.zygy.com backend-ragevaluation RAG evaluation dashboard
daily.zygy.com backend-dailysummary Daily summary service
streamsearch.zygy.com backend-streamsearch :7201 IP-restricted
vectorindexing.zygy.com backend-vectorindexing :7202 IP-restricted
generatereport.zygy.com backend-generatereport :7203 IP-restricted
taxonomyanalyze.zygy.com backend-taxonomyanalyze :7209
pageindex.zygy.com backend-pageindex :7210 IP-restricted

IP-Restricted Services

streamsearch, vectorindexing, generatereport, and pageindex only accept requests from 103.3.62.250 and 115.135.30.38. All other IPs receive 403 Forbidden.

Onboarding Checklist

Complete these steps when a new engineer joins or takes ownership of the platform.

  • [ ] SSH access confirmed — engineer can log in to zygy@172.237.81.37
  • [ ] GitHub repository access granted
  • [ ] All GitHub Actions secrets reviewed (see Credentials)
  • [ ] .env file on the VPS reviewed and credentials rotated
  • [ ] Elasticsearch credentials rotated
  • [ ] Linode Object Storage credentials rotated (for SQLite backups)
  • [ ] Grafana admin password changed
  • [ ] Redis password changed in .env and all services restarted
  • [ ] SSH key for mongo-tunnel (/home/zygy/.ssh/id_ed25519) rotated with the MongoDB server team
  • [ ] Recent backup confirmed: check Linode Object Storage bucket zygy-backups-service, path sqlite-backups/daily/
  • [ ] Monitoring confirmed working: visit grafana.zygy.com
  • [ ] All Docker services healthy: run docker-compose ps on the server
  • [ ] Read through Operational Runbook for day-to-day tasks

Serving This Documentation Locally

cd handover
pip install -r requirements.txt
mkdocs serve
# Opens at http://127.0.0.1:8000

To build a static site:

mkdocs build
# Output in handover/site/