Demos
Infrastructure & Routing
The Stack, End‑to‑End
A compressed view of how traffic reaches flexinfer.ai, how requests route through nginx ingress, and how FluxCD keeps everything in sync.
Loading diagram...
Real routing (NGINX)
The public entrypoint is an NGINX ingress with TLS issued via cert-manager + Cloudflare DNS-01.
hosts: flexinfer.ai, www.flexinfer.ai
/ → flexinfer-site
/api/public/* → flexdeck-api
/flexdeck/* → flexdeck-api (rewrite)
GitOps
FluxCD reconciles manifests and drives image rollouts from the registry with drift correction.
- Git is the source of truth
- Image policy updates tags automatically
- Replica rollouts keep traffic live
Runtime hardening
The site deployment runs non-root with a readonly filesystem and probes for safe rollouts.
runAsNonRoot
readOnlyRootFilesystem
readinessProbe
livenessProbe