Onboarding
Must-know link map for your first day.
Monozu Cloud — Internal Documentation
Monozu Cloud is a multi-tenant SaaS platform for IT Operations (MSP/MSSP). It combines CMDB, ITSM, Security SOC, VPN, and Backup into a single product, deployed on Azure Container Apps and Cloudflare Pages.
This site is the canonical knowledge base for the monorepo. Agents and developers should start with AGENTS.md at the repo root, then use the must-know onboarding map.
Services at a glance
Section titled “Services at a glance”| Service | Tech | Production | Development |
|---|---|---|---|
| Cloud Backend API | Go + Fiber v3 | https://api-cloud.monozu.io | https://dev-api-cloud.monozu.io |
| Cloud Frontend SPA | React 19 + Vite | https://cloud.monozu.io | https://dev.cloud.monozu.io |
| Management Backend | Go + Fiber v3 | https://api-manage.monozu.io | https://dev-api-manage.monozu.io |
| Management Frontend | React 19 + Vite | https://manage.cloud.monozu.io | https://dev.manage.cloud.monozu.io |
| Ingestor Service | Go | https://ingest.cloud.monozu.io | https://dev-ingest.cloud.monozu.io |
| Edge appliance | Rust (RAUC image) | On-prem / customer site | Lab / VM |
| Host Agent | Planned (hostzu/) | — | Spec only |
| Marketing Website | Astro | https://monozu.io | https://dev.monozu.io |
| Contact Form API | Cloudflare Workers | Worker endpoint | — |
| Public Documentation | Astro + Starlight | https://docs.cloud.monozu.io | https://dev.docs.cloud.monozu.io |
| Internal Docs (this site) | Astro + Starlight | https://internal.docs.cloud.monozu.io | https://dev.internal.docs.cloud.monozu.io |
API hostname: Internal Docs list
api-cloud.monozu.io. Edge defaults toapi.cloud.monozu.io(edgezu-commonendpoints). Treat as env-specific until DNS is unified — see rootTODO.md.
Start here
Section titled “Start here”Architecture
System overview, service map, and inter-service data flow diagrams.
Edge Devices
Claim-code registration, telemetry, commands.
Host Agents
Endpoint inventory agent (Edge-preferred, Cloud fallback).
Security & Auth
JWT lifecycle, RBAC permission catalog, and Entra ID SSO integration.
Product Domains
CMDB, ITSM, Security SOC, VPN, Backup, and more.
Key facts
Section titled “Key facts”- Multi-tenant via Azure SQL Row-Level Security (
SESSION_CONTEXT('tenant_id')) - Edge pairing: claim codes via
monozu edge register(not registration keys) - Always-on modules: CMDB, ITSM, Knowledge, Vulnerabilities, Dashboard, Settings
- Optional modules (feature-flagged): Security SOC, VPN, Backup, Admin Panel
- Compliance: EU Cyber Resilience Act Important Class I