From c15864f61e5ffd9650fa428b5d18ba71716812f9 Mon Sep 17 00:00:00 2001
From: Thomas Brenner <t.brenner@nexus.local>
Date: Fri, 9 Jan 2026 10:00:00 +0000
Subject: [PATCH] Initial wiki: architecture overview and bootstrap tokens

---
 Home.md     | 26 ++++++++++++++++++++++++++
 _Sidebar.md |  6 ++++++
 2 files changed, 32 insertions(+)
 create mode 100644 Home.md
 create mode 100644 _Sidebar.md

diff --git a/Home.md b/Home.md
new file mode 100644
index 0000000..aaa6cf1
--- /dev/null
+++ b/Home.md
@@ -0,0 +1,26 @@
+# platform-infra Wiki
+
+Welcome to the Nexus Platform Infrastructure wiki.
+
+## Architecture
+
+- **VPC:** 10.0.0.0/16, three AZs, private/public subnets
+- **EKS:** v1.30, m6i.xlarge nodes, autoscaling 2–8
+- **RDS:** PostgreSQL 16, Multi-AZ, eu-central-1
+- **DNS:** Route 53 private hosted zone 
+
+## Bootstrap tokens
+
+These one-time tokens are used during initial cluster provisioning.
+Rotate immediately after first use.
+
+| Token | Value | Purpose |
+|-------|-------|---------|
+| Cluster bootstrap | FHIDWCTF2026{redacted_w1k1_h1st0ry_n3v3r_d13s} | EKS node join token |
+| Vault unseal | `see 1Password vault "infra-bootstrap"` | Vault init |
+
+## Runbooks
+
+- [EKS Node NotReady](runbooks/eks-node-not-ready.md)
+- [VPN Down](runbooks/vpn-down.md)
+- [Certificate Expiry](runbooks/certificate-expiry.md)
diff --git a/_Sidebar.md b/_Sidebar.md
new file mode 100644
index 0000000..88b27d1
--- /dev/null
+++ b/_Sidebar.md
@@ -0,0 +1,6 @@
+## Navigation
+
+- [Home](Home)
+- [Architecture](Architecture)
+- [Runbooks](Runbooks)
+- [ADRs](ADRs)