Aduana Digital de Defensa Argentina
Create ADDA access
← Back to ADDA

Blueprints

Deployment and adoption patterns for each context.

For teams planning how to bring ADDA into their environment.

ADDA Blueprints

Reference architectures for deploying DNS, WAF, Access, and ADDA’s public distribution outside the repository.

Blueprints

4

Kits

4

Release packages

2

Public assets

2

dns / Cloudflare Worker

ADDA DNS Edge / Cloudflare Worker

operational

Defensive DNS bundle with an edge heartbeat, policy resolver, and operational telemetry ready for deployment outside the repository.

APIs

  • /api/adda/v1/dns/edge/bundle
  • /api/adda/v1/dns/edge/telemetry
  • /api/adda/v1/dns/dashboard

Commands

  • curl "$BASE_URL/api/adda/v1/dns/edge/bundle?target=cloudflare-worker&domain=capacero.ar"
  • npm run adda:smoke

Artifacts

  • lib/adda/dns-waf-runtime.ts
  • app/api/adda/v1/dns/edge/bundle/route.ts
  • app/api/adda/v1/dns/edge/telemetry/route.ts

Verification

  • POST to /api/adda/v1/dns/edge/telemetry with a healthy/degraded heartbeat
  • Validate the bundle and p95LatencyMs from the ADDA console

waf / Nginx reverse proxy

ADDA WAF Edge / Nginx Reverse Proxy

operational

Reverse proxy with WAF snippets, adaptive rules, and telemetry/heartbeat for sensitive routes.

APIs

  • /api/adda/v1/waf/edge/bundle
  • /api/adda/v1/waf/edge/telemetry
  • /api/adda/v1/waf/dashboard

Commands

  • curl "$BASE_URL/api/adda/v1/waf/edge/bundle?target=nginx&domain=capacero.ar"
  • npm run adda:smoke

Artifacts

  • lib/adda/dns-waf-runtime.ts
  • app/api/adda/v1/waf/edge/bundle/route.ts
  • app/api/adda/v1/waf/edge/telemetry/route.ts

Verification

  • Send a WAF heartbeat and review blocked/challenged/allowed in the dashboard
  • Validate Nginx snippets and matched rules from the console

access / systemd + lightweight agent

ADDA Access Watch Agent / systemd rollout

ready

Deployment runbook for heartbeats and peer telemetry on Access tunnels with a shared key and device/tunnel IDs.

APIs

  • /api/adda/v1/access/status
  • /api/adda/v1/access/agents/manifest
  • /api/adda/v1/access/agents/heartbeats
  • /api/adda/v1/access/peers/telemetry
  • /api/adda/v1/access/policies/evaluate

Commands

  • curl "$BASE_URL/api/adda/v1/access/agents/manifest?deviceId=access-device-001"
  • npm run adda:cli -- agent install --profile access-watch
  • node examples/adda-access-agent-heartbeat.mjs
  • npm run adda:cli -- access status

Artifacts

  • examples/adda-access-agent-heartbeat.mjs
  • app/api/adda/v1/access/agents/manifest/route.ts
  • scripts/adda-cli.mjs
  • packages/adda-cli/bin/adda.mjs

Verification

  • Confirm an online heartbeat and healthy peer in AddaAccessPanel
  • Review the risk score, stale state, and recommended actions for each peer/agent

tooling / versioned publishing

ADDA SDK + CLI blueprint de publicación

ready

Publishing blueprint for `@capacero/adda-sdk` and `@capacero/adda-cli`, including the `adda` binary, publishing checks, and public components.

APIs

  • /api/adda/v1/release/manifest
  • /api/adda/v1/blueprints
  • /api/adda/v1/kits

Commands

  • npm run typecheck
  • node scripts/adda-cli.mjs --help
  • node packages/adda-cli/bin/adda.mjs --help

Artifacts

  • packages/adda-sdk/package.json
  • packages/adda-cli/package.json
  • app/adda/badge.js/route.ts
  • app/adda/widget.js/route.ts

Verification

  • Validate Access methods and the release manifest in the SDK/CLI
  • Open `/adda/badge.js` and `/adda/widget.js` as real public assets
Blueprints | ADDA