Tools

Every Shadow Templars tool and service, with its link, how access is gated, and the repository that defines it. Ordered by access tier — public first, then gated, then direct-access.

Public

Reachable by anyone; no login required.

Service	URL	Purpose	Owned by
Shadow Portal	https://shadow-templars.com	Marketing site	shadow-portal
Shadow Nexus	https://nexus.shadow-templars.com	Clan management app — tools, guides, rosters	shadow-nexus
Authentik	https://account.shadow-templars.com	Account management / identity provider	sanctum-codex
Horadric Vault	https://di.shadow-templars.com	Diablo Immortal game assets (CDN)	horadric-vault
Discord invite	https://discord.shadow-templars.com	Redirect to the clan Discord	sanctum-codex

Behind Cloudflare Access

Requires a Cloudflare Access login (scoped to ops admins). Reachable even if Authentik is down — the gate is Cloudflare, not our own identity provider.

Service	URL	Purpose	Owned by
Sanctum Wiki	https://wiki.shadow-templars.com	This wiki — service catalog, links, runbooks	sanctum-wiki
Grafana	https://grafana.shadow-templars.com	Log aggregation (Grafana + Loki + Alloy)	sanctum-codex
Gatus	https://status.shadow-templars.com	Uptime / status monitoring	sanctum-codex
Argo CD	https://argocd.shadow-templars.com	GitOps deployment control plane	sanctum-codex

Direct access

Not a web surface — reached over SSH.

Service	Host	Purpose	Owned by
Sanctum (server)	sanctum.shadow-templars.com	The Hetzner server itself (admin user, SSH)	sanctum-codex

Keeping this current

When a service is added, changed, or retired in sanctum-codex, update the matching row here. The routing source of truth is the Domains table in the sanctum-codex README.