Environnements

URLs par environnement

Environnement	API (Orchestrator)	CMMS Dashboard
Staging	https://staging.paywithnex.com/api	https://cmms-staging.paywithnex.com
Review	https://review.paywithnex.com/api	https://cmms-review.paywithnex.com
Production	https://paywithnex.com/api	A venir

Endpoints publics

Tous les services sont accessibles via l'orchestrator (/api/*).

Health checks

Endpoint	Description
/api/health	Health check orchestrator
/api/auth/...	Routes auth (via orchestrator)
/api/configuration/...	Routes configuration (via orchestrator)

Health checks directs par service

Disponibles sur staging et review via le path /hz/<service> :

Service	URL (staging)
auth	https://staging.paywithnex.com/hz/auth
configuration	https://staging.paywithnex.com/hz/configuration
orchestrator	https://staging.paywithnex.com/hz/orchestrator
ledger-wallets	https://staging.paywithnex.com/hz/ledger-wallets
customer-profiles-kyc	https://staging.paywithnex.com/hz/customer-profiles-kyc
notifications	https://staging.paywithnex.com/hz/notifications
file-service	https://staging.paywithnex.com/hz/file-service
providers-gateway	https://staging.paywithnex.com/hz/providers-gateway
risk-engine	https://staging.paywithnex.com/hz/risk-engine
service-catalog	https://staging.paywithnex.com/hz/service-catalog
logs-reporting	https://staging.paywithnex.com/hz/logs-reporting

Infrastructure Kubernetes

Environnement	Namespace	Replicas	Cluster
Staging	nex-staging	2	EKS eu-west-3
Review	nex-review	1 (ressources reduites)	EKS eu-west-3
Production	nex-production	2-3 (services cles: 3)	EKS eu-west-3

Secrets

Les secrets sont synchronises depuis Doppler (projet paywithnex, config stg) via ExternalSecrets. Refresh automatique toutes les heures vers le K8s Secret nex-secrets.

TLS

Certificats Let's Encrypt via cert-manager, renouvellement automatique. SSL mode Cloudflare : Full (strict).