Files
document-haness/docs/keycloak-session-store/final/assets/renewal-to-serving-gap/renewal-to-serving-gap.drawio
T

44 lines
4.2 KiB
XML

<?xml version="1.0" encoding="UTF-8"?>
<mxfile host="app.diagrams.net" modified="2026-07-23T00:00:00.000Z" agent="techviz-harness" version="24.7.17" type="device">
<diagram id="renewal-to-serving-gap" name="인증서 갱신이 서빙에 닿기까지">
<mxGraphModel dx="958" dy="319" grid="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="1" pageScale="1" pageWidth="958" pageHeight="1169" math="0" shadow="0">
<root>
<mxCell id="0"/>
<mxCell id="1" parent="0"/>
<mxCell id="n_certbot" value="certbot renew&lt;br/&gt;--force-renewal" tooltip="ACME 로 새 인증서를 받아 archive 에 쓰고 live 링크를 옮긴다. | Evidence: L1027-L1032" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#2563eb;strokeWidth=2;" vertex="1" parent="1">
<mxGeometry x="70.0" y="131.5" width="150.0" height="71.0" as="geometry"/>
</mxCell>
<mxCell id="n_deploy-hook" value="renewal-hooks/deploy&lt;br/&gt;nginx -t &amp;&amp; nginx -s reload" tooltip="갱신이 실제로 일어났을 때만 실행된다. 이 실험대에서는 비어 있었다. | Evidence: L1055-L1062" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#d97706;fillColor=#fffdf5;" vertex="1" parent="1">
<mxGeometry x="380.0" y="60.0" width="223.0" height="71.0" as="geometry"/>
</mxCell>
<mxCell id="n_live-link" value="live/fullchain.pem&lt;br/&gt;→ archive/cert2.pem" tooltip="심볼릭 링크. 경로는 그대로이고 가리키는 대상만 바뀐다. | Evidence: L1066-L1067" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;shape=cylinder3;boundedLbl=1;backgroundOutline=1;fillColor=#eef6fb;strokeColor=#2563eb;strokeWidth=2;" vertex="1" parent="1">
<mxGeometry x="408.0" y="203.0" width="167.0" height="71.0" as="geometry"/>
</mxCell>
<mxCell id="n_nginx" value="nginx 워커&lt;br/&gt;마스터 유지 · 워커 교체" tooltip="기동 시점에 읽은 인증서를 메모리에 들고 있다. reload 해야 새 워커가 새 인증서를 읽는다. | Evidence: L1077-L1085" style="whiteSpace=wrap;html=1;rounded=1;strokeWidth=2;fontSize=14;fontStyle=1;fillColor=#ffffff;strokeColor=#2d4357;verticalAlign=middle;strokeColor=#2563eb;strokeWidth=2;" vertex="1" parent="1">
<mxGeometry x="763.0" y="131.5" width="150.0" height="71.0" as="geometry"/>
</mxCell>
<mxCell id="e_needs-reload" value="reload 필요" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_live-link" target="n_nginx">
<mxGeometry relative="1" as="geometry">
<mxPoint x="693.0" y="207.2" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_reload" value="reload 신호" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_deploy-hook" target="n_nginx">
<mxGeometry relative="1" as="geometry">
<mxPoint x="707.0" y="126.8" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_trigger" value="갱신 성공 시 호출" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_certbot" target="n_deploy-hook">
<mxGeometry relative="1" as="geometry">
<mxPoint x="324.0" y="126.8" as="offset"/>
</mxGeometry>
</mxCell>
<mxCell id="e_write" value="새 인증서 기록" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeWidth=2;endArrow=block;endFill=1;" edge="1" parent="1" source="n_certbot" target="n_live-link">
<mxGeometry relative="1" as="geometry">
<mxPoint x="338.0" y="207.2" as="offset"/>
</mxGeometry>
</mxCell>
</root>
</mxGraphModel>
</diagram>
</mxfile>