API service operations
TelAPI Fastify HTTP/WebSocket API behind a managed load balancer — operations, runbook, configuration, troubleshooting.
TelAPI Fastify HTTP/WebSocket API behind a managed load balancer — operations, runbook, configuration, troubleshooting.
IAM, SSM Parameter Store, Secrets Manager, ECR access, and instance-profile patterns for Delphi deployments on AWS.
Where Delphi runtime configuration lives, how it loads, and how to change it safely — bootstrap .env, AWS SSM, AWS Secrets Manager, and the vars.yaml manifest.
Back up and restore Delphi deployment configuration across bootstrap env, generated config bundles, AWS SSM, Secrets Manager, and Postgres-backed settings.
Migration vs runtime Postgres users — MIGRATION_DATABASE_URL for schema work, DATABASE_URL for application CRUD, and optional DATABASE_SECRET_ARN for day-2 rotation.
PostgreSQL 17, Redis 7, and PgBouncer with attached block storage — operations, runbook, configuration, troubleshooting.
How fetch-env.sh resolves each variable from bootstrap, AWS SSM, AWS Secrets Manager, external secrets, defaults, and runtime composition — including precedence and namespace conventions.
Searchable catalogue of environment variables consumed by Delphi services, with source, scope, and default.
Inventory of platform feature flags, what each one turns on or off across services, and how an operator changes them in their deployment.
The two scripts every service uses — init.sh brings the service up from a clean shell, update.sh wraps it with backups and confirmation for steady-state operations.
PostgreSQL SSL and Redis TLS rollout across api, web, voice, ops, and telpro. Staged sequence with rollback-friendly intermediate states.
Pulling database credentials from a managed-database secret like the RDS master user JSON, instead of the per-service Secrets Manager bundle.
Private HTTPS TTS media cache (Caddy + media-upload) at static private IP 10.0.1.30 — operations, runbook, configuration, troubleshooting.
Scaler and Tasker — autoscaling, background jobs, cron, DB backups, and email notifications.
Which Delphi services must be restarted after image, config, SSM, Secrets Manager, TLS, and database changes.
SigNoz observability backend on static private IP 10.0.1.10 — operations, runbook, configuration, troubleshooting.
HTTP/HTTPS proxy for private-network instances — operations, runbook, configuration, troubleshooting.
Platform-managed team secrets and WebRTC TelAPI keys provisioned on team creation — OpenAI and Azure by subscription tier, and what operators must configure first.
SIP proxy (Kamailio), media proxy (RTPEngine), WebRTC gateway (Janus), and TURN server — operations, runbook, configuration, troubleshooting.
Field-by-field reference for the vars.yaml manifest each service ships, with worked examples for required, sensitive, secret.arn_from, and compose.template.
Asterisk (TelSys) plus the AI conversation engine (TelPhi) — operations, runbook, configuration, troubleshooting.
TelWeb management dashboard behind Caddy — operations, runbook, configuration, and troubleshooting.