- PostgreSQL remains the canonical control-plane database
- ClickHouse remains the shared warehouse and telemetry store
- vendor tools attach around those core stores
obs-proxyprovides stable hostnames in front of the stack
What The Overlay Starts
The intelligence overlay adds these services:- Langfuse
- Redash
- Bytebase
- ChartDB
- Gigapipe
- MindsDB
- Telescope
- MinIO for Langfuse object storage
obs-proxyfor hostname-based ingresscloudflaredfor the optional hosted tunnel path
Runtime Topology
Primary Commands
Use the overlay wrapper rather than raw compose commands:DATABASE_URL when possible, prepares the local databases, starts obs-proxy, and only starts cloudflared when the tunnel is intentionally enabled.
Local Service URLs
| Surface | Local URL | Hosted URL |
|---|---|---|
| Paperclip monitor | http://obs.localhost | https://obs.sydiolabs.com |
| Langfuse | http://langfuse.localhost | https://langfuse.sydiolabs.com |
| Redash | http://redash.localhost | https://redash.sydiolabs.com |
| Bytebase | http://bytebase.localhost | https://bytebase.sydiolabs.com |
| MindsDB | http://mindsdb.localhost | https://mindsdb.sydiolabs.com |
| Telescope | http://telescope.localhost | https://telescope.sydiolabs.com |
| ChartDB | http://chartdb.localhost | https://chartdb.sydiolabs.com |
| Gigapipe | http://gigapipe.localhost | https://gigapipe.sydiolabs.com |
| MinIO API | http://minio.localhost | https://minio.sydiolabs.com |
| MinIO console | http://minio-console.localhost | https://minio-console.sydiolabs.com |
Hosted Ingress Notes
For hosted use:obs.sydiolabs.comis the canonical monitor origin- each tool keeps its own protected hostname
- Cloudflare Access sits in front of the tunnel
obs-proxyremains the only browser-facing local origin behind the tunnel
Verification
Typical verification commands:Operational Boundaries
- The monitor summarizes system health but does not replace the vendor tools.
- Tool metadata is external; Paperclip only owns its control-plane records and derived summaries.
- Hosted ingress should never be debugged before local service health is confirmed.