How it's built
Built in public, on a sovereign cloud
OpenMath is a real product — and a hands-on lab for learning how to run software properly in production. Here’s the shape of what carries every quiz to your screen.
What happens when you open openmath.hu
- 1 🌐
Public DNS
Four authoritative nameservers resolve the address — with redundancy, so the name keeps working.
- 2 🔒
Secure edge
At the platform edge, HTTPS is terminated with a Let’s Encrypt certificate that renews itself.
- 3 🛡️
Private fabric
From there, traffic crosses an encrypted WireGuard mesh between sites — never the open internet.
- 4 🚦
Application gateway
A gateway and a firewall route the request to the right service, in the right environment.
- 5 🧩
The app
Finally, the OpenMath containers answer: the website, the learner app, the API and the database.
Live in production
- ✓Automatic HTTPS on every public address (Let’s Encrypt)
- ✓Encrypted private networking between sites (WireGuard mesh)
- ✓Three environments — DEV → UAT → PROD — promoted through a release manager
- ✓Full observability: metrics, logs, traces and security monitoring
- ✓Secrets in a vault, object storage for data, automated daily health checks
- ✓On-prem GPU compute, ready for private AI workloads
On the roadmap
- →Kubernetes for orchestration and elastic scaling
- →On-prem AI model serving — private and sovereign
- →AI-assisted quizzes that adapt to each learner
- →A mobile app for iOS and Android
The shape, not the wiring
This page shows how OpenMath is put together — deliberately at a conceptual level. The actual addresses, rules and secrets live only in the private infrastructure, never on a public page. Sharing the architecture, not the keys, is part of building in public responsibly.
See what’s next on the roadmap →