Skip to main content

System Architecture

Flezi Galaxy follows an isolated, defense-in-depth architecture deployed on Microsoft Azure.

Security & Access Model​

  • Edge Gateway: Traefik automatically issues and renews Let's Encrypt TLS certificates.
  • Identity & SSO: Authentik IdP secures internal developer surfaces, dashboards, and internal documentation.
  • Zero-Trust Network: Non-gateway virtual machines have zero public IP addresses and communicate entirely through private VNet subnets.