Service Map

Complete map of all services in the Monozu Cloud monorepo — where they live, what they do, and how to reach them.

Services

Cloud Backend API

Property	Value
Path	`Backend/`
Language	Go 1.26
Framework	Fiber v3
Port (local)	`:8000`
Production URL	`https://api-cloud.monozu.io` (docs); Edge default `https://api.cloud.monozu.io` — unify TBD
Development URL	`https://dev-api-cloud.monozu.io`
Deployment	Docker → Azure Container Registry → Azure Container Apps
Database	Azure SQL Server (multi-tenant RLS)

Responsibilities:

REST API for all Cloud Frontend features (/api/v1/*)
WebSocket hubs for real-time features (/api/ws/vpn, /api/ws/security)
JWT authentication and OIDC (Microsoft Entra ID)
Multi-tenant data isolation via Azure SQL Row-Level Security
Background jobs: CVE feed sync, vulnerability scanning, SLA notifications, audit retention
Transactional email via Azure Communication Services (noreply@cloud.monozu.io / noreply@cloud-dev.monozu.io)
Edge claim-code registration and command dispatch (/api/v1/devices/*, /api/v1/commands — Edge clients call /v1/...)
Internal M2M for Management (/internal/* including device assign)
~~Admin cross-tenant /api/v1/admin/*~~ — removed (404)

Cloud Frontend SPA

Property	Value
Path	`Frontend/`
Language	TypeScript / React 19
Build tool	Vite
Port (local)	`:3000`
Production URL	`https://cloud.monozu.io`
Development URL	`https://dev.cloud.monozu.io`
Deployment	Vite build → Cloudflare Pages

Responsibilities:

Primary web interface for end users (CMDB, ITSM, Security, VPN, Backup)
Communicates exclusively with Cloud Backend API
Stores access token in memory, refresh token in HttpOnly cookie
Feature-flagged modules loaded from GET /api/v1/me/features post-login

Management Backend

Property	Value
Path	`Management/management-backend/`
Language	Go 1.26
Framework	Fiber v3
Port (local)	`:8080`
Production URL	`https://api-manage.monozu.io`
Development URL	`https://dev-api-manage.monozu.io`
Deployment	Docker → ACR → Azure Container Apps

Responsibilities:

Tenant provisioning and lifecycle management
License activation and propagation to Cloud via HMAC webhook
Edge fleet: assign claim codes to tenants, device list
M2M communication with Cloud Backend using X-Internal-Token
Entra ID OIDC for management staff authentication

Management Frontend

Property	Value
Path	`Management/management-frontend/`
Language	TypeScript / React 19
Port (local)	`:5173`
Production URL	`https://manage.cloud.monozu.io`
Development URL	`https://dev.manage.cloud.monozu.io`
Deployment	Vite build → Cloudflare Pages

Responsibilities:

Admin UI for tenant provisioning, licenses, and Edge claim assignment
Used by Monozu operators, not end customers

Ingestor Service

Property	Value
Path	`ingestor/`
Language	Go
Production URL	`https://ingest.cloud.monozu.io`
Development URL	`https://dev-ingest.cloud.monozu.io`
Deployment	Azure Container Apps

Responsibilities:

High-throughput ingestion of telemetry from Edge appliances
Single endpoint: POST /v1/ingest
Auth via X-Device-Key header (device api_key from claim-complete)
Payload kinds: telemetry, log, security_alert, discovery, backup_event, host_inventory (planned)

Edge appliance (EdgeZu)

Property	Value
Path	`Edge/`
Language	Rust
Packaging	RAUC-updatable image + `monozu` CLI
Deployment	On customer premises (OT/IT LAN)

Responsibilities:

Claim-code pairing (monozu edge register)
Network discovery, telemetry, security alerts → Ingestor
Command polling from Cloud Backend
Planned: Host Agent LAN gateway

Host Agent (planned)

Property	Value
Path	`hostzu/`
Status	Spec / design — not implemented yet
Docs	Host Agents

Marketing Website

Property	Value
Path	`Website/`
Framework	Astro + Tailwind
Production URL	`https://monozu.io`
Deployment	Cloudflare Pages
Languages	Polish + English

Contact Form API

Property	Value
Path	`WebsiteContactApi/`
Runtime	Cloudflare Workers

Responsibilities:

Contact form submissions from marketing website
Cloudflare Turnstile CAPTCHA + email via Resend (marketing only — Cloud Backend transactional mail uses Azure Communication Services)

Public Documentation

Property	Value
Path	`Documentation/`
Framework	Astro + Starlight
Production URL	`https://docs.cloud.monozu.io`

Internal Documentation (this site)

Property	Value
Path	`Internal-Documentation/`
Framework	Astro 6 + Starlight
Production URL	`https://internal.docs.cloud.monozu.io`
Development URL	`https://dev.internal.docs.cloud.monozu.io`
Deployment	Cloudflare Pages

URL overview

flowchart LR
  Website["monozu.io"]
  CloudSPA["cloud.monozu.io"]
  CloudAPI["api-cloud.monozu.io"]
  Ingest["ingest.cloud.monozu.io"]
  InternalDocs["internal.docs.cloud.monozu.io"]
  PublicDocs["docs.cloud.monozu.io"]
  MgmtSPA["manage.cloud.monozu.io"]
  MgmtAPI["api-manage.monozu.io"]
  Edge["Edge appliance"]

  CloudSPA -->|"REST and WS"| CloudAPI
  MgmtSPA -->|"REST"| MgmtAPI
  MgmtAPI -->|"HMAC webhook"| CloudAPI
  CloudAPI -->|"M2M"| MgmtAPI
  Edge -->|"claim and commands"| CloudAPI
  Edge -->|"POST /v1/ingest"| Ingest
  Website -.-> PublicDocs
  Website -.-> InternalDocs

Shared packages

Package	Path	Used by
`licensing`	`packages/licensing/`	Cloud Backend, Management Backend

Infrastructure

CI/CD pipeline definitions live alongside each service (typically azure-pipelines.yml or pipelines/).