Network Diagram

This is a logical network diagram. We host on a PAAS, fly, and so therefore don’t have direct control over the network layer.

Fly applications are hosted within a wireguard VPN, and only ports explicitly listed are open to the world.

We use Cloudflare for DNS, and for staging use Cloudflare Zero Trust to prevent access to the Fly environment.

Production

flowchart TD
    User([User]) --> CF[Cloudflare DNS / Proxy]
    CF --> FlyProxy

    subgraph FlyProd ["Fly Production"]
        FlyProxy[Fly Proxy]
        FlyProxy --> Momentum
        Momentum --> AppDB[(Application-DB)]
        Momentum --> BKBDB[(BKB-DB)]
        Momentum --> CalcsAPI[Momentum-Calcs]
    end

    Note["📝 Momentum is exposed on port 443"]

Staging

flowchart TD
    User([User]) --> CF[Cloudflare DNS / Proxy]
    User --> FlyVPN[Fly VPN]
    CF --> FlyProxyStg
    FlyVPN --> FlyStaging

    subgraph FlyStaging ["Fly Staging"]
        FlyProxyStg[Fly Proxy]
        FlyProxyStg --> MomentumStg[Momentum]
        MomentumStg --> AppDBStg[(Application-DB)]
        MomentumStg --> BKBDBStg[(BKB-DB)]
        MomentumStg --> CalcsAPIStg[Momentum-Calcs]
    end

    NoteStg["📝 Momentum is exposed on port 443"]