On-prem deployment

Architecture

[LB] --- HTTPS --→ [Unimoni API × N]
                    ↓
              [Postgres HA (primary + replicas)]
                    ↓
              [Prometheus-compatible TSDB × N]
                    ↓
              [Storage: SAN / NFS / Cloud blob]

Minimal stack

  • 2× Unimoni API (active/active behind the LB)
  • 1× Postgres primary + 1× read replica
  • 1× Prometheus-compatible TSDB
  • 1× Cabinet (Next.js prod build)

HA

  • Postgres: streaming replication + automatic failover (Patroni / managed)
  • TSDB: a clustered mode (select / store / insert split apart)
  • API: stateless, any number behind the LB

TLS

A terminator (nginx/caddy/HAProxy) in front of the API. The mTLS listener (:8443) goes directly — for agents, TLS termination must happen on the API itself (CA-cert validation requires it).