Foundation
Ubuntu host, Docker, shared alma-network, and Nginx Proxy Manager for SSL and routing.
Architecture
How Alma Cloud is wired
One Ubuntu host, Docker on alma-network, Nginx Proxy Manager for SSL, and Authentik as the identity plane for every user-facing service.
Interactive ecosystem
Select layers and nodes to inspect foundation, identity, data, serve, extend, and observe.
Data path
Hover a stage to pause on how data moves through Alma Cloud.
Layer essays
Identity
Authentik is the single IdP — native OIDC or forward-auth for every user-facing service.
Data plane
dbt transforms, Airflow and Dagster orchestration, Postgres metadata, and ClickHouse OLAP.
Serve
BI and product analytics that teams use every day — Superset, Lightdash, and Plausible.
Extend
Self-hosted LLM chat and usage-based billing on infrastructure you control.
Observe
Host monitoring, container ops, and database administration.
Diagram exports
Alternate Mermaid views of infrastructure and data flow.