Mortezakoohjani 12c8615615 Ship enterprise Accounting FE/API with CRUD parity and production wiring.

Adds accounting-service PATCH/archive, fiscal helpers, COA templates and setup status, plus SuperApp Accounting UI (DS, scoreboard, masters, vouchers, ledger, ops modules) with session refresh and HTTPS public API URLs.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-07-24 15:26:43 +03:30

1.5 KiB

Raw Blame History

Deployment Architecture

Architecture topology only. Runbooks → docs/deployment/

Environments

Layer	Role
Local Docker Compose	Dev: Postgres, Redis, Keycloak, Core, Identity, Frontend, Celery
Production edge	Nginx TLS termination + routing
Production app host	Docker Compose services

Production Topology (canonical)

Component	Host / Endpoint
App / Docker	`192.168.10.162`
Nginx edge	`192.168.10.156`
Apex / www / tenant FE	`torbatyar.ir`, `*.torbatyar.ir`
Core API	`api.torbatyar.ir` → `:8000`
Identity API	`identity.torbatyar.ir` → `:8001`
Keycloak	`auth.torbatyar.ir` → `:8080`

Compose Services

postgres, redis, keycloak, core-service, identity-access-service, frontend, celery-worker, celery-beat

Configuration

All runtime settings from environment (.env / production env files). No hardcoded secrets or brand values in source (ADR-008).

TLS & Tenant SSL

Edge Nginx terminates TLS. Tenant subdomain certificates expand via Celery → SSH → provision_ssl.py (ADR-009).

1.5 KiB Raw Blame History