2 Servers
Azure (DEV) and Contabo (UAT + Shared), connected by an encrypted WireGuard VPN tunnel.
SSERIS (South Sudan Electronic Receipting and Invoicing System) is a tax administration platform. The infrastructure runs on a 2-node Docker Swarm cluster connected via WireGuard VPN across two cloud providers.
2 Servers
Azure (DEV) and Contabo (UAT + Shared), connected by an encrypted WireGuard VPN tunnel.
50 Services
Backend microservices, React frontends, PostgreSQL, Redis, Kafka, Keycloak, and more — all running as Docker Swarm services.
3 Stacks
DEV (21 services), UAT (17 services), Shared (12 services) — Nginx is a global-mode service within the DEV stack.
24+ Domains
All under *.ayinza.dev with Let’s Encrypt wildcard SSL. Nginx routes each domain to the right service.
| Layer | What | Where |
|---|---|---|
| Frontend | Taxpayer Portal, Tax Admin Dashboard | Nginx → React apps |
| Backend | Admin, Retail, Fiscal, Notification, Audit, Reporting | Backend microservices |
| Auth | Keycloak | Separate instance per environment |
| Data | PostgreSQL, Redis, Kafka, ImmuDB, Garage S3 | Stateful services with persistent volumes |
| Infra | Harbor, Nexus, Portainer, Nginx (global) | Shared stack on Contabo + Nginx in DEV stack |
| CI/CD | GitHub Actions → Harbor → Swarm | Self-hosted runners on Contabo |