diff --git a/docs/reference/diagrams/infrastructure-diagram.mermaid b/docs/reference/diagrams/infrastructure-diagram.mermaid
new file mode 100644
index 0000000..322c345
--- /dev/null
+++ b/docs/reference/diagrams/infrastructure-diagram.mermaid
@@ -0,0 +1,105 @@
+graph TB
+ subgraph Internet["đ PUBLIC INTERNET"]
+ Users["đĨ Players & Community"]
+ Cloudflare["âī¸ Cloudflare
(DNS + DDoS Protection)"]
+ end
+
+ subgraph CommandCenter["đ¯ COMMAND CENTER
63.143.34.217
(Primary Gateway + Management Layer)"]
+ direction TB
+ PrimaryGW["Primary Gateway
63.143.34.217"]
+
+ subgraph ManagementServices["Management Services (/29 Block: .201-.206)"]
+ Gitea["đ Gitea
git.firefrostgaming.com
74.63.218.202
â
LIVE"]
+ UptimeKuma["đ Uptime Kuma
status.firefrostgaming.com
74.63.218.203
âŗ NEXT"]
+ BookStack["đ BookStack
docs.firefrostgaming.com
74.63.218.204
đ PLANNED"]
+ Netdata["đ Netdata
metrics.firefrostgaming.com
74.63.218.205
đ PLANNED"]
+ Vaultwarden["đ Vaultwarden
vault.firefrostgaming.com
74.63.218.206
đ PLANNED"]
+ end
+ end
+
+ subgraph ControlPlane["đŽ CONTROL PLANE"]
+ Panel["đšī¸ Pterodactyl Panel
panel.firefrostgaming.com
45.94.168.138"]
+ Billing["đ° Paymenter
billing.firefrostgaming.com
38.68.14.188
(Stripe Integration)"]
+ Ghost["đģ Ghost CMS
firefrostgaming.com
64.50.188.14
(Website + Ignis)"]
+ end
+
+ subgraph NC1["đĸ NC1 - CHARLOTTE NODE
216.239.104.130-134"]
+ direction LR
+ NC1_Server1["The Ember Project
216.239.104.130:25565"]
+ NC1_Server2["Minecolonies
216.239.104.131:25565"]
+ NC1_Server3["Peace of Mind
216.239.104.132:25565"]
+ NC1_Server4["Sandbox
216.239.104.133:25565"]
+ NC1_Server5["ATM 10
216.239.104.134:25565"]
+ NC1_Server6["Farming Crossing
216.239.104.134:25566"]
+ NC1_Server7["Homestead
216.239.104.133:25566"]
+ NC1_Server8["Hytale
216.239.104.131:5520"]
+ NC1_Server9["EMC Subterra
216.239.104.132:25566"]
+ end
+
+ subgraph TX1["đĸ TX1 - DALLAS NODE
38.68.14.26-30"]
+ direction LR
+ TX1_Server1["Stoneblock 4
38.68.14.26:25565"]
+ TX1_Server2["Reclamation
38.68.14.27:25565"]
+ TX1_Server3["Society
38.68.14.28:25565"]
+ TX1_Server4["Vanilla 1.21.1
38.68.14.29:25565"]
+ TX1_Server5["All The Mons
38.68.14.30:25565"]
+ TX1_Server6["FoundryVTT
38.68.14.26:30000"]
+ end
+
+ subgraph Frostwall2["đĄī¸ FROSTWALL 2.0
(Multi-Layer Security)"]
+ direction TB
+ Layer1["Layer 1: IP Firewall
(UFW/nftables)"]
+ Layer2["Layer 2: Intrusion Detection
(Fail2Ban)"]
+ Layer3["Layer 3: DDoS Mitigation
(CrowdSec)"]
+ Layer4["Layer 4: App Protection
(Rate Limiting)"]
+ Layer5["Layer 5: Monitoring
(Alerts â Discord)"]
+ end
+
+ subgraph Monitoring["đĄ MONITORING & ALERTS"]
+ UptimeKumaMonitor["Uptime Kuma
(Public Status Page)"]
+ NetdataMonitor["Netdata
(Real-Time Metrics)"]
+ DiscordWebhooks["đŦ Discord Webhooks
(The Wizard Alerts)"]
+ end
+
+ %% Connections
+ Users -->|DNS Lookup| Cloudflare
+ Cloudflare -->|Proxy/Cache| CommandCenter
+ Cloudflare -->|Proxy/Cache| ControlPlane
+
+ CommandCenter --> Panel
+ CommandCenter --> Billing
+ CommandCenter --> Ghost
+
+ Panel -->|Manage| NC1
+ Panel -->|Manage| TX1
+
+ Billing -->|Provision| Panel
+ Ghost -->|Membership| Billing
+
+ NC1 -->|Protected By| Frostwall2
+ TX1 -->|Protected By| Frostwall2
+ CommandCenter -->|Protected By| Frostwall2
+
+ Frostwall2 -->|Alerts| Monitoring
+ Monitoring -->|Notify| DiscordWebhooks
+
+ UptimeKuma -->|Monitor| NC1
+ UptimeKuma -->|Monitor| TX1
+ UptimeKuma -->|Monitor| ControlPlane
+
+ Netdata -->|Metrics| NC1
+ Netdata -->|Metrics| TX1
+ Netdata -->|Metrics| CommandCenter
+
+ %% Styling
+ classDef liveService fill:#00E5FF,stroke:#01579B,stroke-width:3px,color:#000
+ classDef nextService fill:#FFD600,stroke:#FF3D00,stroke-width:3px,color:#000
+ classDef plannedService fill:#666,stroke:#999,stroke-width:2px,color:#fff
+ classDef security fill:#FF3D00,stroke:#BF360C,stroke-width:3px,color:#fff
+ classDef monitoring fill:#00E5FF,stroke:#01579B,stroke-width:2px,color:#000
+
+ class Gitea liveService
+ class UptimeKuma,UptimeKumaMonitor nextService
+ class BookStack,Netdata,Vaultwarden,NetdataMonitor plannedService
+ class Frostwall2,Layer1,Layer2,Layer3,Layer4,Layer5 security
+ class Monitoring,DiscordWebhooks monitoringx