Planned sections
1. HTTPS server bootstrap
A minimal but production-shaped C++17 HTTPS server using OpenSSL: socket setup, TLS context with modern cipher suite, accept loop, per-connection thread-pool dispatch. The skeleton used by YPMan, BackDraft, StackSmith, and Webmail.
// Coming soon — distilled from src/server/https_server.cpp
// across the Mcaster1 daemon family.2. FastCGI bridge to PHP-FPM
How the C++ daemon hands an HTTP request off to PHP-FPM over a Unix domain socket: opening the socket, building the FCGI_PARAMS record, streaming the request body, reading the response. The pattern that lets you write all the HTML in PHP without putting nginx in front of the daemon.
3. Hardware-aware thread pool
Sizing pools to CPU cores and memory ceiling at startup. YAML config schema. The cache-line-aligned lock-free SPSC ring buffer used by the DSP encoder for real-time audio paths.
4. HMAC-chained audit log
SOC2-grade append-only audit logging: per-record HMAC chaining, tamper-evident verification, MariaDB schema. The primitive shared by StackSmith, BackDraft, DBOpsMan, and Webmail.
5. AES-256-GCM credential vault
How StackSmith stores registry credentials, SSH keys, and TLS material at rest. Argon2id-derived master key, GCM authenticated encryption, vault-unlock workflow. Why we don't keep plaintext anything on disk.
6. Systemd unit + deployment manifest
A complete unit file for a Celenite app: ExecStart, security hardening (NoNewPrivileges, ProtectSystem, PrivateTmp), file-descriptor limits, restart policy, journal integration. Plus the matching FPM pool configuration and the Docker multi-stage build that produces a sub-100MB image.
7. nginx integration (optional, for the WAF case)
Mcaster1BackDraft is the one Celenite app that does sit behind nginx — because nginx is what it's protecting. The exact proxy_pass + fastcgi_pass configuration that wires nginx → BackDraft (port 9432) → PHP-FPM via FastCGI without proxy loops.
If you want this sooner
The fastest path is to read the source of the Mcaster1 daemons directly on GitHub: github.com/davestj. Several daemons are public; others are private but will be opened over time.