The brain
stays home.
Customers
run on OVH.

The Synology keeps the Go API, the Vite front-end, secrets and internal services: n8n, Mattermost, GitLab, Outline and Plane. The OVH VPS exposes customer sites with Docker, Traefik, automatic HTTPS and cold OVH Cloud Archive backups.

Open the manager
NAS
Internal services
6vCPU
OVH VPS
12GB
Customer RAM
Cold
Cloud Archive
Under the hood

A real platform.
Not a template.

Every site is isolated, secured, monitored — and scales with your business as it grows.

Ce qui se passe quand un visiteur arrive

Next.js 16
Django REST
PostgreSQL
Docker
OVHCloud

Fast and modern

Next.js 16

Reliable back-office

Django REST

Your data, secured

PostgreSQL

Always isolated

Docker

Automatic HTTPS

Traefik

Hosted in France

OVHCloud

Architecture

Two zones.
One complete core.

The management core stays private with its internal tools. The customer zone is public, isolated and replaceable.

The brain stays on Synology

DataWorlds Manager, the Go API, the Vite front-end, secrets and internal databases stay with us, on the Synology. This brain doesn't just orchestrate — it also centralises internal services.

The OVH VPS serves customers

The 6 vCore, 12 GB RAM VPS becomes the public execution zone: Traefik, customer containers, HTTPS certificates, resource limits and monitoring.

Cold backups on OVH Cloud Archive

Dumps, application snapshots and project archives are externalised cold storage to keep an economical, separate, restorable copy.

Internal brain

More than a manager.
A team platform.

The Synology hosts the services that build, document, automate and track projects before they're exposed on the customer VPS.

n8n

Automation

Mattermost

Notifications & team

GitLab

Code & CI/CD

Outline

Documentation

Plane

Project tracking

Orchestration

Docker, Traefik,
cold backup.

The VPS only holds what needs to be exposed: proxy, customer containers, resource limits and recovery mechanisms.

Docker

Isolated customer stacks, CPU/RAM limits, controlled restarts

Traefik

Public routing, automatic HTTPS, customer domains

SSH or WireGuard

Secure control channel between the NAS and the VPS

Managed scaling

Instance duplication in case of customer traffic spikes

Risk separation

A customer incident doesn't give access to the management core

Backups

Scheduled dumps, snapshots, cold OVH archive

Stack

Six layers.
One clear responsibility.

Each layer has one simple role: build, document, automate, expose, isolate, scale, back up.

01

Synology NAS

Go APIVite front-endn8nMattermostGitLabOutlinePlane
02

Secure link

Dedicated SSHWireGuardDocker API
03

OVH VPS

6 vCores12 GB RAMFR datacenter
04

Public edge

TraefikHTTPSHealth checks
05

Customers

Docker ComposeCPU/RAM limitsScale out
06

Cold archive

DumpsSnapshotsOVH Cloud Archive

A private platform.Customers always online.

Architecture audit, VPS setup, Traefik routing, Docker limits and OVH Cloud Archive backup strategy.

Access the manager
Synologyn8nMattermostGitLabOutlinePlaneOVH VPSDockerTraefikWireGuardCloud Archive