feat: secure frontend and provider ingress

2026-05-04 11:40:56 +00:00
parent caa80ee5e7
commit 8726611b6f
25 changed files with 1491 additions and 450 deletions
@@ -23,8 +23,9 @@
  - Main Server Components
    - UniDesk Stateless Services
      - Run all business microservices as Docker containers
-      - Includes API gateway, task scheduler, project management, and other stateless modules
+      - Includes frontend gateway, task scheduler, project management, provider ingress, and other stateless modules
      - Instances can scale horizontally; failure recovery requires no state synchronization
+      - Only the frontend gateway and provider ingress are public; core REST APIs and PostgreSQL remain on the Docker internal network
    - PostgreSQL Database
      - Deployed as a Docker container with a 10 GB named volume
      - Stores all task metadata, node heartbeats, resource labels, and business state