refactor: 문서 개선 중
This commit is contained in:
+28
-28
@@ -1,8 +1,8 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<svg xmlns="http://www.w3.org/2000/svg" width="958" height="345" viewBox="0 0 958 345" role="img" aria-labelledby="diagram-title diagram-description">
|
||||
<svg xmlns="http://www.w3.org/2000/svg" width="958" height="319" viewBox="0 0 958 319" role="img" aria-labelledby="diagram-title diagram-description">
|
||||
<title id="diagram-title">인증서 갱신이 서빙에 닿기까지</title>
|
||||
<desc id="diagram-description">certbot renew 는 archive 디렉터리에 새 인증서를 쓰고 live 심볼릭 링크가 그것을 가리키게 한다. nginx 는 ssl_certificate 가 가리키는 파일을 기동 시점에 한 번 읽어 메모리에 보관하므로, 경로가 그대로여도 reload 없이는 옛 인증서를 계속 서빙한다. 이 실험대에서는 certbot-renew.service 의 ExecStartPost, renewal-hooks 의 세 디렉터리, certbot 의 nginx 플러그인이 모두 비어 있어 2305초 동안 옛 인증서가 서빙됐다. deploy 훅 하나를 넣자 같은 구간이 1~2초가 됐다.</desc>
|
||||
<metadata>{"techviz":{"spec_version":"1.1","id":"renewal-to-serving-gap","profile":"component-flow"},"source_context":{"document":"docs/keycloak-session-store/final/document.md","document_sha256":"609353e10bfd37a9bbb6a79ecf2a32f3d3c02d5d161879a14ad4713e49e7e5e8","anchor":{"kind":"heading","value":"D-4 · D-4a — 인증서, 그리고 이 실험대 최대의 발견","line":497}},"evidence_policy":"Each factual element cites source lines or is marked assumption.","diagram_only":true}</metadata>
|
||||
<metadata>{"techviz":{"spec_version":"1.1","id":"renewal-to-serving-gap","profile":"component-flow"},"source_context":{"document":"docs/keycloak-session-store/final/document.md","document_sha256":"28aef96a2bbb94fbb10ade26a71238fee62a5a4d9fa6e7749ae98cfd0a65e560","anchor":{"kind":"heading","value":"D-4 · D-4a — 인증서, 그리고 이 실험대 최대의 발견","line":1025}},"evidence_policy":"Each factual element cites source lines or is marked assumption.","diagram_only":true}</metadata>
|
||||
<defs>
|
||||
<marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse">
|
||||
<path d="M 0 0 L 10 5 L 0 10 z" />
|
||||
@@ -49,41 +49,41 @@
|
||||
.timeline-detail { font-size: 11px; fill: #4b5563; text-anchor: middle; }
|
||||
</style>
|
||||
</defs>
|
||||
<rect class="canvas" width="958" height="345" />
|
||||
<polyline class="edge kind-blocked style-solid emphasis-normal" points="575.0,251.5 669.0,251.5 669.0,189.0 763.0,189.0" data-evidence="536-540" />
|
||||
<rect class="edge-label-bg" x="653.9" y="206.2" width="78.3" height="22" rx="3" />
|
||||
<text class="edge-label" x="693.0" y="221.2">reload 필요</text>
|
||||
<polyline class="edge kind-request style-solid emphasis-normal" points="603.0,95.5 683.0,95.5 683.0,171.0 763.0,171.0" data-evidence="556-562" />
|
||||
<rect class="edge-label-bg" x="667.9" y="119.2" width="78.3" height="22" rx="3" />
|
||||
<text class="edge-label" x="707.0" y="134.2">reload 신호</text>
|
||||
<polyline class="edge kind-request style-solid emphasis-normal" points="220.0,171.0 300.0,171.0 300.0,95.5 380.0,95.5" data-evidence="527-533" />
|
||||
<rect class="edge-label-bg" x="281.5" y="119.2" width="85.0" height="22" rx="3" />
|
||||
<text class="edge-label" x="324.0" y="134.2">갱신 성공 시 호출</text>
|
||||
<polyline class="edge kind-write style-solid emphasis-normal" points="220.0,189.0 314.0,189.0 314.0,251.5 408.0,251.5" data-evidence="504-510" />
|
||||
<rect class="edge-label-bg" x="302.2" y="206.2" width="71.6" height="22" rx="3" />
|
||||
<text class="edge-label" x="338.0" y="221.2">새 인증서 기록</text>
|
||||
<rect class="canvas" width="958" height="319" />
|
||||
<polyline class="edge kind-blocked style-solid emphasis-normal" points="575.0,238.5 669.0,238.5 669.0,176.0 763.0,176.0" data-evidence="1066-1067" />
|
||||
<rect class="edge-label-bg" x="653.9" y="193.2" width="78.3" height="22" rx="3" />
|
||||
<text class="edge-label" x="693.0" y="208.2">reload 필요</text>
|
||||
<polyline class="edge kind-request style-solid emphasis-normal" points="603.0,95.5 683.0,95.5 683.0,158.0 763.0,158.0" data-evidence="1094-1099" />
|
||||
<rect class="edge-label-bg" x="667.9" y="112.8" width="78.3" height="22" rx="3" />
|
||||
<text class="edge-label" x="707.0" y="127.8">reload 신호</text>
|
||||
<polyline class="edge kind-request style-solid emphasis-normal" points="220.0,158.0 300.0,158.0 300.0,95.5 380.0,95.5" data-evidence="1055-1062" />
|
||||
<rect class="edge-label-bg" x="281.5" y="112.8" width="85.0" height="22" rx="3" />
|
||||
<text class="edge-label" x="324.0" y="127.8">갱신 성공 시 호출</text>
|
||||
<polyline class="edge kind-write style-solid emphasis-normal" points="220.0,176.0 314.0,176.0 314.0,238.5 408.0,238.5" data-evidence="1032-1038" />
|
||||
<rect class="edge-label-bg" x="302.2" y="193.2" width="71.6" height="22" rx="3" />
|
||||
<text class="edge-label" x="338.0" y="208.2">새 인증서 기록</text>
|
||||
<g id="node-certbot">
|
||||
<rect class="node-shape kind-process emphasis-primary role-source" data-evidence="499-504" x="70.0" y="144.5" width="150.0" height="71.0" rx="7" />
|
||||
<text class="node-label" x="145.0" y="171.5">certbot renew</text>
|
||||
<line class="node-detail-divider" x1="84.0" y1="192.5" x2="206.0" y2="192.5" />
|
||||
<text class="node-detail" x="86.0" y="209.5">--force-renewal</text>
|
||||
<rect class="node-shape kind-process emphasis-primary role-source" data-evidence="1027-1032" x="70.0" y="131.5" width="150.0" height="71.0" rx="7" />
|
||||
<text class="node-label" x="145.0" y="158.5">certbot renew</text>
|
||||
<line class="node-detail-divider" x1="84.0" y1="179.5" x2="206.0" y2="179.5" />
|
||||
<text class="node-detail" x="86.0" y="196.5">--force-renewal</text>
|
||||
</g>
|
||||
<g id="node-deploy-hook">
|
||||
<rect class="node-shape kind-process emphasis-warning role-control" data-evidence="527-533" x="380.0" y="60.0" width="223.0" height="71.0" rx="7" />
|
||||
<rect class="node-shape kind-process emphasis-warning role-control" data-evidence="1055-1062" x="380.0" y="60.0" width="223.0" height="71.0" rx="7" />
|
||||
<text class="node-label" x="491.5" y="87.0">renewal-hooks/deploy</text>
|
||||
<line class="node-detail-divider" x1="394.0" y1="108.0" x2="589.0" y2="108.0" />
|
||||
<text class="node-detail" x="396.0" y="125.0">nginx -t && nginx -s reload</text>
|
||||
</g>
|
||||
<g id="node-live-link">
|
||||
<rect class="node-shape kind-datastore emphasis-primary role-store" data-evidence="536-540" x="408.0" y="216.0" width="167.0" height="71.0" /><ellipse class="node-shape kind-datastore emphasis-primary role-store" cx="491.5" cy="216.0" rx="83.5" ry="13.0" /><path class="storage-bottom" d="M 408.0 287.0 A 83.5 13.0 0 0 0 575.0 287.0" />
|
||||
<text class="node-label" x="491.5" y="243.0">live/fullchain.pem</text>
|
||||
<line class="node-detail-divider" x1="422.0" y1="264.0" x2="561.0" y2="264.0" />
|
||||
<text class="node-detail" x="424.0" y="281.0">→ archive/cert2.pem</text>
|
||||
<rect class="node-shape kind-datastore emphasis-primary role-store" data-evidence="1066-1067" x="408.0" y="214.8" width="167.0" height="47.3" /><ellipse class="node-shape kind-datastore emphasis-primary role-store" cx="491.5" cy="214.8" rx="83.5" ry="11.8" /><path class="storage-bottom" d="M 408.0 262.2 A 83.5 11.8 0 0 0 575.0 262.2" />
|
||||
<text class="node-label" x="491.5" y="230.0">live/fullchain.pem</text>
|
||||
<line class="node-detail-divider" x1="422.0" y1="251.0" x2="561.0" y2="251.0" />
|
||||
<text class="node-detail" x="424.0" y="268.0">→ archive/cert2.pem</text>
|
||||
</g>
|
||||
<g id="node-nginx">
|
||||
<rect class="node-shape kind-service emphasis-primary role-target" data-evidence="541-548" x="763.0" y="144.5" width="150.0" height="71.0" rx="7" />
|
||||
<text class="node-label" x="838.0" y="171.5">nginx 워커</text>
|
||||
<line class="node-detail-divider" x1="777.0" y1="192.5" x2="899.0" y2="192.5" />
|
||||
<text class="node-detail" x="779.0" y="209.5">마스터 유지 · 워커 교체</text>
|
||||
<rect class="node-shape kind-service emphasis-primary role-target" data-evidence="1077-1085" x="763.0" y="131.5" width="150.0" height="71.0" rx="7" />
|
||||
<text class="node-label" x="838.0" y="158.5">nginx 워커</text>
|
||||
<line class="node-detail-divider" x1="777.0" y1="179.5" x2="899.0" y2="179.5" />
|
||||
<text class="node-detail" x="779.0" y="196.5">마스터 유지 · 워커 교체</text>
|
||||
</g>
|
||||
</svg>
|
||||
|
||||
|
Before Width: | Height: | Size: 7.6 KiB After Width: | Height: | Size: 7.6 KiB |
Reference in New Issue
Block a user