Additionally, it would be nice to see more details around security and operations. What ports are opened? What roles are created? Is all traffic encrypted in t

Additionally, it would be nice to see more details around security and operations. What ports are opened? What roles are created? Is all traffic encrypted in transit? Is all data encrypted at rest? Etc. I could dig through the configs, but just a high level overview would be nice. Bonus points for a detailed threat model. Operationally, how do I monitor this thing? How do I scale it? How is patching handles? Just some constructive thoughts on areas that could be improved.