GovernanceMode

Infrastructure & Deployment Dashboard

84.13.157.154 — /var/www/html/governance_mode

Services

Front Modules

Mongo DBs

Supervisor Procs

Ports

Scripts

System Architecture

GovernanceMode is a microservices GRC platform: a Vue 3 SPA served by Nginx, an API gateway written in Go, and 13 Laravel/PHP domain services running behind RoadRunner gRPC workers, backed by MongoDB and Redis.

Request Flow Topology

Browser → Nginx → Go Gateway → RoadRunner PHP → MongoDB/Redis

Edge — Nginx :80

/governance_mode/ → SPA

/governance-mode/gateway/api/ → :8000

storage aliases

PHP-FPM fallback

API Gateway — Go binary

HTTP :8000

Enrich gRPC :50050

JWT verify

Rate limit (Redis)

CORS

service_model_maps

Domain Services — 13 x PHP 8.3 / RoadRunner gRPC

:50051 User

:50053 Notification

:50054 Regulator

:50055 Governance

:50056 Operations

:50057 Continuity

:50058 Workflow

:50059 Dashboard

:50060 Messaging

:50061 Task

:50062 Import/Export

:50063 Reporting

:50070 Risk

Data & Queue Layer

MongoDB :27017

Redis :6379

artisan queue:work (Mongo driver)

Reverb WS :7002

Tech Stack

Vue 3 + Vite Go 1.22+ PHP 8.3 Laravel RoadRunner 2024.3.5 gRPC MongoDB 7.x Redis 7.x Nginx Supervisor Laravel Reverb Ubuntu 22.04/24.04 Node 22.x Composer 2.7

Microservices Map

13 PHP/Laravel domain services + 1 Go API gateway. All PHP services communicate via gRPC through RoadRunner. Direct HTTP to PHP services returns 403 — clients must use the Go gateway.

Nginx Routing Map

Site config at /etc/nginx/sites-available/governance-mode. Gateway snippet included from /etc/nginx/snippets/governance-mode-gateway.conf. Server name: 84.13.157.154. Headers: client_max_body_size 100M, large header buffers for JWT.

Location	Type	Target	Notes
`/governance_mode/`	STATIC	front/dist/	Vue SPA, try_files fallback to index.html
`/governance_mode/assets/`	STATIC	front/dist/assets/	Hashed JS/CSS, no-cache headers
`/governance-mode/gateway/api/`	PROXY	127.0.0.1:8000/api/	Main API entry, 300s timeout
`/governance-mode/api/`	PROXY	127.0.0.1:8000/api/	Alternate API path
`/governance-mode-release-5/api/`	PROXY	127.0.0.1:8000/api/	Legacy release path
`/governance-mode/`	302	/governance_mode/$1	Dash to underscore rewrite
`/governance_mode/Shared-Import-Export-Service/storage/`	STATIC	public/storage/	Template logos, exports
`/governance_mode/Shared-Reporting/storage/`	STATIC	storage/app/public/	PDF/Excel reports
`/governance_mode/gateway/storage/user-reports/`	STATIC	Shared-Reporting/...	Back-compat for old APP_URL
`/governance_mode/Shared-User-Service`	PHP-FPM	php8.3-fpm.sock	Laravel public dir
`/governance_mode/Shared-Import-Export-Service`	PHP-FPM	php8.3-fpm.sock	Laravel public dir
`/governance_mode/Domain-Workflow-Engine`	PHP-FPM	php8.3-fpm.sock	Laravel public dir
`/governance_mode/Regulator-Service`	PHP-FPM	php8.3-fpm.sock	Laravel public dir
`/governance_mode_qa/`	STATIC	governance_mode_qa/front/dist/	QA instance SPA
`/governance-mode-qa/gateway/api/`	PROXY	127.0.0.1:8100/api/	QA gateway on :8100

Supervisor Process Map

Two config files under /etc/supervisor/conf.d/: gateway-grc.conf (14 RR workers + gateway) and gateway-grc-queues.conf (14 queue workers + 1 schedule + 1 reverb).

gRPC Workers (gateway-grc.conf)

RoadRunner + Go gateway

Queues & Schedule (gateway-grc-queues.conf)

artisan queue:work + schedule:work + reverb:start

Port Allocation Map

Visual map of all ports used by the GovernanceMode stack. Public-facing ports are Nginx (:80) and Reverb (:7002). Everything else binds to localhost.

All Ports

Hover for details

Web (public) HTTP (local) gRPC (local) WebSocket Database

MongoDB Databases

Each service uses its own database (named after the folder). The grc database stores gateway service_model_maps. No auth on reference; local bind 127.0.0.1:27017.

Shared Secrets Matrix

Must match across all services

Variable	Set In	Purpose
JWT_SECRET	Gateway + all PHP services	JWT sign/verify
SERVICE_API_KEY	Gateway + all PHP + front (VITE_APP_SERVICE_API_KEY)	x-api-key header
API_GATEWAY_SECRET	All PHP services	HMAC session tokens
API_GATEWAY_GRPC	All PHP services	127.0.0.1:50050
REVERB_APP_KEY / SECRET	Notification .env + front VITE_NOTIFICATION_REVERB_KEY	WebSocket auth

Operations Scripts

Helper scripts bundled in devops-docs/scripts/. Copy to /var/www/html/governance_mode/ for use.

Common Failures & Gotchas

Known issues from the reference deployment. Filter by severity.

New Server Checklist

Interactive checklist for deploying GovernanceMode on a fresh server. Progress is saved locally in your browser.

0 / 0 completed