🏗️ Server Architecture

KioskGaming production infrastructure documentation: 5 Hetzner servers (Ashburn, us-east) behind Cloudflare, nginx-lb gateway, Redis/Postgres replication, RabbitMQ, and OpenSearch log pipeline. Current state surveyed directly on servers, updated 04/07/2026.

Suggested reading order:1 System Diagram→2 Deep Dive→3 Comparison & Plan→4 Target System

📐

System Diagram & Nginx Configuration

One-page blueprint: Cloudflare → nginx-lb (V1) → 5 internal servers, nginx config cards per hop, key conclusions & action items.

Start hereBlueprint1 page🔍

Infrastructure Deep Dive

Layer-by-layer details: Cloudflare edge, nginx gateway, domain routing, data services, log pipeline, gamify engine — with port tables, health-check playbook, and 14 risks & recommendations.

14 sectionsPlaybookRisks⚖️

Guideline Comparison & Migration Plan

System Design Guideline vs. current state, step-by-step migration roadmap 0A → 3C: firewall patches, nginx SPOF removal, idempotency key, PgBouncer, failover runbook.

Roadmap 0A→3CRecommendations🎯

Target System

Post-migration architecture: 2 gateways + Cloudflare LB, before/after metrics table, behavior when each server fails, acceptance criteria with verification commands.

Before / AfterFailure modesAcceptance

Source & scope — Documentation compiled from the nginx/ infrastructure repo (running production config) + Hetzner Console + direct survey of 5 servers. Passwords/tokens have been redacted. Documents open in a new tab (standalone HTML pages with their own light/dark toggle).