graph TB subgraph Internet WWW[Internet] end subgraph "Edge Layer" FW[fw-techstart
pfSense 2.7
192.168.1.1] end subgraph "DMZ" PROXY[srv-proxy01
nginx
192.168.10.10] end subgraph "Application Layer" WEB[srv-web01
Docker Host
192.168.20.10] MAIL[srv-mail01
Exchange 2019
192.168.20.20] FILE[srv-file01
Windows Server
192.168.20.30] end subgraph "Data Layer" DB[srv-db01
PostgreSQL 15
192.168.30.10] BACKUP[srv-backup01
Veeam B&R
192.168.30.20] end subgraph "Management" MON[srv-mon01
Zabbix 7.0
192.168.40.10] AD[srv-dc01
AD Domain Controller
192.168.40.20] end WWW --> FW FW --> PROXY PROXY --> WEB PROXY --> MAIL WEB --> DB MAIL --> AD FILE --> AD FILE --> BACKUP DB --> BACKUP MON -.-> FW MON -.-> PROXY MON -.-> WEB MON -.-> MAIL MON -.-> FILE MON -.-> DB

graph LR subgraph "WAN" ISP[Telekom Business
100/40 Mbit] end subgraph "Firewall Zones" WAN_IF[WAN Interface
Public IP] DMZ_IF[DMZ
192.168.10.0/24] LAN_IF[LAN
192.168.20.0/24] DATA_IF[Data
192.168.30.0/24] MGMT_IF[Management
192.168.40.0/24] end ISP --> WAN_IF WAN_IF --> DMZ_IF DMZ_IF --> LAN_IF LAN_IF --> DATA_IF LAN_IF --> MGMT_IF

graph TB subgraph "Docker Host: srv-web01" DOCKER[Docker Engine] subgraph "Containers" NC[Nextcloud
:8080] WP[WordPress
:8081] WIKI[BookStack
:8082] PORT[Portainer
:9000] end end subgraph "External" PROXY[srv-proxy01] DB[srv-db01] end PROXY -->|HTTPS| NC PROXY -->|HTTPS| WP PROXY -->|HTTPS| WIKI NC --> DB WP --> DB WIKI --> DB DOCKER --> PORT

graph LR subgraph "Internet" EXT[External Mail] end subgraph "Edge" MX[MX Record
mail.techstart.de] FW[Firewall] end subgraph "Mail Infrastructure" SMTP[Exchange Hub
srv-mail01:25] IMAP[Exchange Client
srv-mail01:443] SPAM[Spam Filter
SpamAssassin] end subgraph "Clients" OWA[Outlook Web] OUT[Outlook Desktop] MOBILE[ActiveSync] end EXT --> MX --> FW --> SPAM --> SMTP SMTP --> IMAP IMAP --> OWA IMAP --> OUT IMAP --> MOBILE

graph TB subgraph "Production" VM1[srv-web01] VM2[srv-mail01] VM3[srv-file01] VM4[srv-db01] end subgraph "Backup Infrastructure" VEEAM[Veeam B&R
srv-backup01] REPO[Local Repository
10 TB RAID6] S3[Offsite
Wasabi S3] end VM1 --> VEEAM VM2 --> VEEAM VM3 --> VEEAM VM4 --> VEEAM VEEAM --> REPO REPO -->|Copy Job| S3

graph TB subgraph "Zabbix Server" ZS[srv-mon01
Zabbix 7.0] ZDB[(PostgreSQL)] ALERT[Alerting
Email + Telegram] end subgraph "Monitored Hosts" H1[fw-techstart] H2[srv-proxy01] H3[srv-web01] H4[srv-mail01] H5[srv-file01] H6[srv-db01] H7[srv-dc01] end ZS --> ZDB ZS --> ALERT H1 -.->|Agent| ZS H2 -.->|Agent| ZS H3 -.->|Agent| ZS H4 -.->|Agent| ZS H5 -.->|Agent| ZS H6 -.->|Agent| ZS H7 -.->|Agent| ZS

graph TB subgraph "Active Directory" DC[srv-dc01
techstart.local] DNS[Internal DNS] DHCP[DHCP Server] end subgraph "Domain Members" FILE[srv-file01] MAIL[srv-mail01] WS[Workstations
25 PCs] end DC --> DNS DC --> DHCP FILE -->|Domain Join| DC MAIL -->|Domain Join| DC WS -->|Domain Join| DC