Domains & Routing

All domains are under *.ayinza.dev with Let’s Encrypt wildcard SSL certificates. Nginx runs globally (one instance per node) and routes each domain to the correct internal service.

DEV Environment

Accessible via *.swarm.ayinza.dev (APIs) and *.ayinza.dev (UIs).

Domain	Routes To	Type
`taxpayer.ayinza.dev`	taxpayer-web-portal:80	UI
`taxadmin.ayinza.dev`	taxadmin-web-dashboard:80	UI
`admin.swarm.ayinza.dev`	admin-service:8080	API
`retail.swarm.ayinza.dev`	retail-operations-service:8080	API
`fiscal.swarm.ayinza.dev`	fiscal-document-service:8080	API
`notification.swarm.ayinza.dev`	notification-localization-service:8080	API
`reporting.swarm.ayinza.dev`	reporting-service:8080	API
`auth.swarm.ayinza.dev`	keycloak:8080	Auth
`rabbitmq.swarm.ayinza.dev`	rabbitmq:15672	Infra
`superset.ayinza.dev`	superset:8088	Infra
`garageui.ayinza.dev`	garage-webui:3909	Infra
`s3.swarm.ayinza.dev`	garage:3900	S3

UAT Environment

Accessible via *.ayinza.dev directly. Portals use *uat.ayinza.dev.

Domain	Routes To	Type
`taxpayeruat.ayinza.dev`	uat_taxpayer-web-portal:80	UI
`taxadminuat.ayinza.dev`	uat_taxadmin-web-dashboard:80	UI
`admin.ayinza.dev`	uat_admin-service:8080	API
`retail.ayinza.dev`	uat_retail-operations-service:8080	API
`fiscal.ayinza.dev`	uat_fiscal-document-service:8080	API
`notification.ayinza.dev`	uat_notification-localization-service:8080	API
`reporting.ayinza.dev`	uat_reporting-service:8080	API
`auth.ayinza.dev`	uat_keycloak:8080	Auth
`s3.ayinza.dev`	84.247.134.135:3910	S3

Shared Services

Domain	Routes To	Type
`harbor.ayinza.dev`	proxy:8080 (Harbor Nginx)	Registry
`portainer.swarm.ayinza.dev`	portainer:9000	Mgmt
`docs.ayinza.dev`	docs:80 (Basic Auth)	Docs

Adding a New Domain

See Nginx Reverse Proxy for step-by-step instructions on adding a new domain to the routing.