13 — External Services
All third-party SaaS and cloud services used by the Ecotrans infrastructure. Each entry lists the purpose, account, and where credentials are stored.
Credentials for all services are managed via SOPS+age — see README for vault access. Infisical CE was decommissioned 2026-06-21.
Service Inventory
| Service | Purpose | Account | Credential location |
|---|---|---|---|
| Supabase | PostgreSQL + auth + storage for et-operational-platform | mwkqmgadqnkkihjdeqsi | SOPS secrets/monitoring.env.sops + GH Secrets |
| Cloudflare | DNS, CDN, Workers, Email Routing | radieu@gmail.com | CLOUDFLARE_TOKEN_ZINTEGROWANA, CF_API_TOKEN |
| Mailgun EU | SMTP for Alertmanager email alerts only (report delivery moved to Cloudflare email-api) | EU account | SMTP_HOST, SMTP_USER, SMTP_PASSWORD |
| Cloudflare Email API | Transactional email delivery for report scheduler via p24-email-sender service | radieu@gmail.com | EMAIL_SENDER_API_KEY, EMAIL_SENDER_URL |
| Wasabi S3 | Long-term metrics storage (Thanos), PDFs, backups | IAM user p24-infra | P24_INFRA_WASABI_ACCESS_KEY + secret |
| Discord | Infra error notifications, alert webhooks | radieu@gmail.com | P24_DISCORD_INFRA_SCRIPTS_ERRORS_WEBHOOK_URL |
| Vercel | et-operational-platform hosting | radieu@gmail.com | VERCEL_TOKEN |
| GitHub | Source control, Actions CI/CD, issue pipeline | radieu/p24-infra | GH_TOKEN, GH_PAT |
| OVH / Kimsufi | Bare-metal servers bms-1 through bms-4 | OVH account | SSH keys |
| IONOS | vps-i1 (AlmaLinux 9.7) | IONOS account | SSH key |
| Hostinger | vps-h1 (Ubuntu 24.04) | Hostinger account | HOSTINGER_ROOT_PASSWORD |
| Teltonika | GPS hardware devices for fleet vehicles | — | teltonika-device-setup.md |
| Traccar | GPS server (self-hosted on vps-i1) | Self-hosted | Traccar admin credentials |
| n8n Cloud | Alternative n8n instance (not primary) | n8n Cloud account | HSTGR_N8N_API_KEY |
| Mezmo (LogDNA) | Centralized log ingestion from bms-1 Pinbox24 containers via logdna-agent | radieu@gmail.com | P24_INFRA_MEZMO_SERVICE_KEY in secrets/monitoring.env.sops; legacy alias LOGDNA_API_KEY in secrets/bms-servers.env.sops |
| Infisical CE | DECOMMISSIONED 2026-06-21 — replaced by SOPS+age | N/A | N/A |
| Sentry | Runtime error capture in et-operational-platform (@sentry/nextjs) + alert→GitHub issue routing via n8n | radieu@gmail.com | SENTRY_AUTH_TOKEN — GH Secret · .env.local · Vercel env vars |
| OpenAI | AI API for non-Claude use cases | radieu@gmail.com | OPENAI_ADMIN_KEY |
Key Documents
| Document | Description |
|---|---|
| sentry-operations.md | Sentry error tracking — token rotation, source map uploads, n8n webhook |
| cloud-services-operations.md | Cloudflare + other cloud service operations |
| supabase-operations.md | Supabase project operations |
| media-storage.md | Wasabi S3 storage operations |
| discord-notifications.md | Discord webhook setup |
| waha.md | WAHA service details |