JahFeel Automation

Infrastructure & Service Topology — Hetzner openclaw-prod-1 (87.99.129.115)
Single-host self-hosted stack · Traefik ingress + Let’s Encrypt TLS · all services on the internal agenthq Docker network, no public host ports.
Live Live, awaiting first-run setup Pending (capacity / decision)
Internet *.jahfeelautomation.com Traefik ingress :80 / :443 · Let’s Encrypt OPERATOR COMMAND CENTER AGENT PLATFORM COMMUNICATIONS Twenty CRMcrm. Uptime Kumastatus. n8nauto. Invoice Ninjabilling. Homepage · home. Map · map. Agent HQ nerve-gateway · api.tenant-scoped executor (browser / CRM / mail) Henry — OpenClaw agent runtimecontainer 3d159cbf · OpenClaw Shield 12 Client Portal · portal. Chatwootchat. · client convos Matrix + Elementmatrix. SMS gatewaysms. · capcom6 GMessages bridgeSMS / RCS relay Listmonk · mail. Marketing · www DATA & SECRETS Vaultwardensecret store · tailnet :8443 PostgreSQLTwenty / Chatwoot / … MariaDBInvoice Ninja Rediscache / queues Docker named volumespersistent app state · nightly concern

Operator Command Center

Twenty CRM setup
crm.jahfeelautomation.com
Source-of-truth CRM: companies, subscriptions, incidents, SLAs. Henry reads/writes via the gateway.
container twenty-server:3000
Uptime Kuma setup
status.jahfeelautomation.com
Uptime + heartbeat monitoring for every service, with alerting.
container uptime-kuma:3001
n8n setup
auto.jahfeelautomation.com
Workflow automation: CRM sync, incident capture, morning brief, nightly hygiene.
container n8n:5678
Invoice Ninja setup
billing.jahfeelautomation.com
Client invoicing & recurring billing. nginx + php-fpm + MariaDB.
container invoice-ninja-web:80
Homepage live
home.jahfeelautomation.com
Operator dashboard: every service with live container status.
container homepage:3000
Plane pending
projects.jahfeelautomation.com
Project / task management. Deferred pending a RAM bump (multi-container stack).
not yet deployedRAM-gated

Agent Platform

Agent HQ Gateway live
api.jahfeelautomation.com
Tenant-scoped executor. Henry calls browser / CRM / mail actions through here so secrets never enter the agent context.
container agenthq-nerve-gatewayHono
Henry (agent) live
OpenClaw runtime
JF’s daily agent. Boots the full OpenClaw Shield 12 hardening profile.
container agenthq-3d159cbf…OpenClaw
Client Portal live
portal.jahfeelautomation.com
Client-facing PWA: chat, work status, account. Clients never touch Agent HQ.
container agenthq-portalPWA

Communications

Chatwoot live
chat.jahfeelautomation.com
Omnichannel client conversations — the channel clients talk to their agent through.
container chatwoot-rails:3000
Matrix + Element live
matrix.jahfeelautomation.com
Messaging backbone; bridges SMS/RCS into agent-reachable rooms.
container element / synapse:8008
SMS Gateway live
sms.jahfeelautomation.com
capcom6 phone-based SMS send/receive leg.
container agenthq-sms-gateway:8080
GMessages Bridge re-link
internal · agenthq net
mautrix-gmessages SMS/RCS relay. Auth-expiry watchdog posts to the self-heal report when re-link is due.
container mautrix-gmessages:29336
Listmonk live
mail.jahfeelautomation.com
Self-hosted email / newsletter campaigns.
container listmonk:9000
Marketing Site live
jahfeelautomation.com
Public marketing site (apex), served static behind Traefik.
container agenthq-caddy-static:80

Data & Secrets

Vaultwarden live
tailnet-only :8443
Canonical secret store. Human access is tailnet-only; the agent never sees a raw secret.
container vaultwardenself-hosted
PostgreSQL live
internal
Primary datastore for Twenty, Chatwoot, Synapse and more.
per-app instances:5432
MariaDB live
internal
Invoice Ninja datastore.
container invoice-ninja-db:3306
Redis live
internal
Cache & job queues for the app tier.
per-app instances:6379