Start with the system model, then move into authentication, domains, delivery, and integration conventions. Documentation reflects the production architecture—not a separate demo environment.
Omnia separates each customer-facing industry application from its backend service. Services share deployment and security conventions while preserving their own runtime, database, and health boundary.
ApplicationNext.js static delivery
→
TLS edgeCaddy routing and headers
→
API serviceNestJS isolated runtime
→
DatabaseScoped PostgreSQL data
02 · Authentication
Identity is resolved before product context.
Protected API calls use an access token, then resolve the account, tenant, permission set, and active product context. Public catalog endpoints remain explicitly separated from authenticated operations.
omniadigital.idBusiness identity and public product landing.
*.omniadigital.idCustomer portals, industry products, and production APIs.
omniadigital.techTechnical identity, documentation, status, labs, and engineering.
04 · Delivery
Private source to controlled production.
1
Review and verify
Build, type-check, and inspect the exact source state.
2
Publish privately
Commit to the designated private repository owned by Omnia.
3
Build on the VPS
Create static frontend artifacts or backend images from the pushed commit.
4
Switch atomically
Replace artifacts only after a successful build, then verify public behavior.
05 · Security
Operational details without exposing secrets.
This site publishes architecture and reachability signals only. Credentials, private environment values, database access, internal logs, and customer data remain outside the public technology surface.