| ID | iomodel.reverse_proxy |
|---|---|
| Description | TLS termination and routing into the stack. |
| Key | reverse_proxy |
| Type | ingress_controller |
Table of contents
Reverse Proxy Guide
The Reverse Proxy is the single front door of the stack. Every request from the outside world hits it first — it terminates TLS and forwards traffic to the right internal service over the private network.
Role in the stack
It routes HTTPS to Studio, proxies authentication to Keycloak, and upgrades WebSocket connections for the Yjs Realtime Server. Internal services never need to be exposed directly.
Why it’s needed
- One TLS boundary — certificates and HTTPS live in one place instead of every service.