Digital Infrastructure Topology

Architecture Specification

Managed by CultureOS

The Foundation maintains an isolated, containerized production environment deployed on high-capacity dedicated virtual infrastructure. This architecture ensures complete portability, multi-region disaster recovery, and operational independence.

All digital infrastructure components documented herein are configured, deployed, and managed by CultureOS. CultureOS is an AI-native practice helping cultural institutions modernize digital infrastructure, archives, and research workflows responsibly.

System Architecture

All foundation services communicate across internal bridged networks, exposed strictly via automated reverse proxy routing.

                    Internet Ingress
                           |
             [ Cloudflare Global Edge CDN ]
             (DNSSEC, DDoS Shield, Caching)
                           |
                           v
        [ Caddy Automated Edge Proxy (Caddy v2) ]
        (Automated Let's Encrypt TLS / HTTP/3)
         |                 |                  |
         v                 v                  v
 [ ToFF Attunement ]  [ ToFF Sign ]   [ Operations Handbook ]
(KaraKeep / Meili)   (Documenso / PG)  (Static Edge Dist)

Production Endpoints

1. ToFF Attunement

• Official URL: https://listen.tomoffinland.org
• Underlying Engine: KaraKeep Open Source Project
• Management: Configured, deployed, and managed by CultureOS
• Core Function: Web bookmarking, full-text social media interaction listening, visual asset extraction.

2. ToFF Sign

• Official URL: https://sign.tomoffinland.org
• Underlying Engine: Documenso Open Source Project
• Management: Configured, deployed, and managed by CultureOS
• Core Function: Legally binding electronic signatures, verifiable digital audit trails, administrative template workflows.

3. ToFF Operations Handbook

• Official URL: https://handbook.tomoffinland.org
• Underlying Engine: Standardized Open Source Static Engine
• Management: Configured, deployed, and managed by CultureOS
• Core Function: Central governance repository, onboarding SOPs, media guides.

Portability and Disaster Recovery

The entire infrastructure follows a zero-lock-in model engineered by CultureOS:

• Storage Encapsulation: All data volumes, configuration maps, and cryptographic state reside within /opt/ on the host machine.
• Database Isolation: PostgreSQL databases execute scheduled automated dumps.
• Migration Capability: The complete foundation stack can be cloned and restored onto any independent Linux host in under ten minutes using standard container runtime commands.