# Deployment Topology

<!-- BOOKSTACK-DOCUMENT-RELEASE:BEGIN -->
# Deployment Topology

| Field | Value |
| --- | --- |
| Distribution | WCT English — OpenC5ISR |
| Product | OpenC5ISR |
| Release | 0.15.1 |
| Deployment | `openc5isr-en.wallacecorptech.com` |
| Source | `/srv/wct/releases/OpenC5ISR-v0.15.0` |
| Evidence | Release and readable host configuration |
| Source fingerprint | `63d2b1097707e25d666401cdc6362e395968600a40a08690210cd8c0b75fbf50` |
| Status | Generated baseline — human review required |

> **Verification boundary:** This page combines platform design guidance with static evidence from the release. It does not prove that every detected interface is enabled, reachable, secure, or operational in the deployed environment.

## Observed services

| Service | Working directory | ExecStart | Evidence |
| --- | --- | --- | --- |
| opencybersec-agent.service | `—` | `/opt/opencybersec-agent/opencybersec_agent.py --config /etc/opencybersec-agent.json` | edge/opencybersec/systemd/opencybersec-agent.service |
| openlvc-ais-bridge.service | `/opt/opensof/edge/openlvc` | `/usr/bin/python3 /opt/opensof/edge/openlvc/ais_nmea_bridge.py --opensof ${OPENSOF_URL} --token [REDACTED] --bind 0.0.0.0 --port 10110` | edge/openlvc/systemd/openlvc-ais-bridge.service |
| openlvc-dis-bridge.service | `/opt/opensof/edge/openlvc` | `/usr/bin/python3 /opt/opensof/edge/openlvc/dis_udp_bridge.py --opensof ${OPENSOF_URL} --token [REDACTED] --bind 0.0.0.0 --port 3000` | edge/openlvc/systemd/openlvc-dis-bridge.service |
| openlvc-flightgear-bridge.service | `/opt/opensof/edge/openlvc` | `/usr/bin/python3 /opt/opensof/edge/openlvc/flightgear_bridge.py --opensof ${OPENSOF_URL} --token [REDACTED] --bind 0.0.0.0 --port 5505` | edge/openlvc/systemd/openlvc-flightgear-bridge.service |
| openlvc-rti-gateway.service | `/opt/opensof/edge/openlvc` | `/usr/bin/python3 /opt/opensof/edge/openlvc/rti_openbus_gateway.py --opensof ${OPENSOF_URL} --token [REDACTED] --federation ${OPENLVC_FEDERATION} --federate ${OPENLVC_FEDERATE} --sidecar-command ${OPENLVC_RTI_SIDECAR_COMMAND}` | edge/openlvc/systemd/openlvc-rti-gateway.service |
| openpnt-phc2sys@.service | `—` | `/opt/openpnt/bin/openpnt-linuxptp run phc2sys --instance /etc/openpnt/linuxptp/instances/%i.json --bin-dir /opt/openpnt/linuxptp/bin` | edge/openpnt-linuxptp/systemd/openpnt-phc2sys@.service |
| openpnt-ptp4l@.service | `—` | `/opt/openpnt/bin/openpnt-linuxptp run ptp4l --instance /etc/openpnt/linuxptp/instances/%i.json --bin-dir /opt/openpnt/linuxptp/bin` | edge/openpnt-linuxptp/systemd/openpnt-ptp4l@.service |
| openpnt-ts2phc@.service | `—` | `/opt/openpnt/bin/openpnt-linuxptp run ts2phc --instance /etc/openpnt/linuxptp/instances/%i.json --bin-dir /opt/openpnt/linuxptp/bin` | edge/openpnt-linuxptp/systemd/openpnt-ts2phc@.service |
| openrf-agent.service | `/opt/openrf-agent` | `/usr/local/bin/openrf-agent --config /etc/openrf/openrf-agent.json` | openrf/agent/systemd/openrf-agent.service |
| openc5isr-wct-en.service | `/srv/wct/instances/openc5isr-en/current` | `/usr/local/bin/npm start` | /etc/systemd/system/openc5isr-wct-en.service |

## Observed reverse-proxy topology

| Source | Server names | Locations | proxy_pass |
| --- | --- | --- | --- |
| /etc/nginx/sites-available/openc5isr-en.wallacecorptech.com | openc5isr-en.wallacecorptech.com<br>openc5isr-en.wallacecorptech.com | / | http://127.0.0.1:3101/ |

## Topology verification

- Confirm which directory or symlink is the authoritative current release.
- Confirm each public hostname terminates TLS and routes to the intended instance/port.
- Document shared backends separately from edition-specific application instances.
- Record network zones and firewall policy for public, management, data and sensor interfaces.
<!-- BOOKSTACK-DOCUMENT-RELEASE:END -->

---

## Maintainer Notes

<!-- BOOKSTACK-DOCUMENT-RELEASE:NOTES-BEGIN -->
Add human-reviewed deployment notes, corrections, decisions, screenshots, and links here. Content outside the generated block is preserved on future runs.
<!-- BOOKSTACK-DOCUMENT-RELEASE:NOTES-END -->