FastRAG — Network (self-hosted compose stack) Diagram

Exposure (as configured)

Caddy forwards every path to the API, so /metrics, /docs and /openapi.json are public on FASTRAG_DOMAIN
No rate limiting, IP allowlist or auth at the proxy; the API checks bearer keys per route
One flat bridge network: any container can reach any other; data stores rely on passwords, not segmentation

Hardening present

Only proxy publishes host ports (80, 443); Grafana, Prometheus and all stores are internal
api runs read-only with tmpfs /tmp and no-new-privileges as uid 10001; worker has no-new-privileges only
Compose refuses to start without required secrets (${VAR:?}); Redis requires a password

Not drawn

model-init (profile tools) downloads ONNX models into the model_data volume
Worker also rebuilds Qdrant collections and registry rows; api and worker share rag_data and read-only models
TLS is Caddy's automatic HTTPS (internal CA for localhost); nothing in the repo configures it explicitly