System Architecture

Flezi Galaxy follows an isolated, defense-in-depth architecture deployed on Microsoft Azure.

Security & Access Model

• Edge Gateway: Traefik automatically issues and renews Let's Encrypt TLS certificates.
• Identity & SSO: Authentik IdP secures internal developer surfaces, dashboards, and internal documentation.
• Zero-Trust Network: Non-gateway virtual machines have zero public IP addresses and communicate entirely through private VNet subnets.