Security stack¶
Security services for the people of your organisation: a password vault, and a NetBird client for the overlay network. On the website: Security Stack.
These are modules whose purpose is security. They are not the whole of TAPPaaS's security posture — that is built into the platform rather than added on: identity and single sign-on come from the foundation, network separation from the zone model (see Network Zones), and off-site, encrypted backup from backup. A stack groups modules by what they are for; it does not say where the security lives.
| Module | What it is | Status |
|---|---|---|
| netbird-client | TAPPaaS NetBird Client for accessing private zone (so you can operate as if you are local to TAPPaaS) | Development |
| vaultwarden | VaultWarden password manager (Bitwarden-compatible) in DMZ | Development |
Install them as INSTALL.md says.
How modules are grouped into stacks: ADR-004, Where a module's directory is. The module lists here and in INSTALL.md are generated by src/foundation/tappaas-cicd/scripts/gen-stack-readme.py from src/module-catalog.json.