{
	"nodes":[
		{"id":"90a562a87023ed87","type":"group","x":-380,"y":-220,"width":480,"height":500,"color":"4","label":"Lab"},
		{"id":"d8ba7cba021817a4","type":"group","x":-340,"y":-120,"width":400,"height":380,"color":"#666666","label":"maldev"},
		{"id":"b0c20f537b144d46","type":"group","x":-260,"y":-580,"width":480,"height":211,"label":"Internet"},
		{"id":"402a19b789a6c23e","x":-280,"y":-240,"width":192,"height":55,"color":"#005726","type":"text","text":"unifi"},
		{"id":"044cec72f1872a95","x":-320,"y":-88,"width":160,"height":50,"color":"6","type":"text","text":"[[simulacrum]]"},
		{"id":"3662c3608ab5adaf","x":-320,"y":-18,"width":250,"height":60,"color":"6","type":"text","text":"[[coder|coder workspaces]]"},
		{"id":"eb983c95ff534381","type":"text","text":"[[garm|garm runners]]","x":-320,"y":60,"width":250,"height":60,"color":"6"},
		{"id":"ad926a5105ab02f0","type":"text","text":"cache","x":-70,"y":-140,"width":94,"height":52,"color":"#646262"},
		{"id":"54f2a1b51cf48358","x":120,"y":-240,"width":418,"height":469,"type":"text","text":"UNIFI exception list:\n```\ncoder.astral-labs.work\ngit.galaxygridlabs.com\nvault.galaxygridlabs.com\ntavern.aws-metadata.com\ngarm.astral-labs.work\n```\n\nThese exist to bootstrap workloads in the airgap but should be removed.\ncoder, garm, and git are all reqired by windows workloads since the current image doesn't have the vault CA built-in and cannot be installed at runtime.\n\nThe vault exception exists so linux runners can get the root CA cert at startup and configure trust to the proxy"}
	],
	"edges":[
		{"id":"92b9e13e82c2b63b","fromNode":"ad926a5105ab02f0","fromSide":"top","toNode":"b0c20f537b144d46","toSide":"bottom"},
		{"id":"48758527fd372c09","fromNode":"402a19b789a6c23e","fromSide":"top","toNode":"b0c20f537b144d46","toSide":"bottom"}
	]
}