PostgreSQL Architecture & Policies

PostgreSQL is the designated relational database standard for Salitech workloads.

1. Umami PostgreSQL Instance

Version: PostgreSQL 15 (Docker container)
Compose Project: /opt/umami/docker-compose.yml
Network: Private Docker bridge network
Access Rule: Internal access only by the umami container. Never expose ports to host loopback or public interfaces.

2. Salitech Platform PostgreSQL (Planned)

Target Host: production-01
Architectural Role: Authoritative persistent data store for the Salitech Platform.
Client Access Restrictions:
- Direct connection strings are provided strictly to the Salitech API backend.
- Customer AI agents and external callers are prohibited from establishing direct TCP connections or issuing raw SQL queries.

Security & Access Matrix

┌────────────────────────────────────────┐
│ Autonomous AI Agents / External Users  │
└──────────────────┬─────────────────────┘
                   │ (HTTP/REST via api.salitech.de)
                   ▼
┌────────────────────────────────────────┐
│ Salitech API Backend                   │
│ (Service Layer -> Repository Layer)    │
└──────────────────┬─────────────────────┘
                   │ (Internal TCP / Unix Socket)
                   ▼
┌────────────────────────────────────────┐
│ PostgreSQL Platform Database           │
└────────────────────────────────────────┘