flowchart TB
    subgraph Clients["External Clients"]
        osu(["osu! Game Client"])
        web(["Web Browser"])
        dclient(["Discord"])
    end

    subgraph CF["Cloudflare (DNS · CDN · DDoS · SSL)"]
        cf{{"Proxy & Cache"}}
    end

    subgraph OVH["OVH VPS — Podman Containers"]
        ng{{"Caddy — Reverse Proxy & Rate Limiting"}}

        subgraph Public["Public Services"]
            bancho["bancho.py<br/>(Python/FastAPI) :10000"]
            gukarkka["gukarkka<br/>(Next.js 14) :3000"]
            payments["payments-service<br/>(Python/FastAPI) :8001"]
        end

        subgraph Internal["Internal Services"]
            circlecore["Circlecore-somtum<br/>(Python/FastAPI) :8555"]
        end

        subgraph Bots["Bots"]
            bot["Discord-Bot-Somtum<br/>(discord.py)"]
        end

        subgraph Data["Data Stores"]
            mysql[("MySQL 9.4<br/>Shared Database")]
            redis[("Redis 8.2<br/>Cache & Sessions")]
            files[("Static Files<br/>Avatars & Replays")]
        end
    end

    subgraph ExternalAPIs["External APIs"]
        osuapi["osu! API v1/v2"]
        discordwh["Discord Webhooks"]
        truemoney["TrueMoney / PromptPay"]
        stripe["Stripe"]
    end

    %% Client connections
    osu -->|"c.somtum.fun"| cf
    web --> cf --> ng
    dclient <--> bot

    %% Caddy routing
    ng -->|"somtum.fun"| gukarkka
    ng -->|"session / api .somtum.fun"| bancho
    ng -->|"a.somtum.fun"| files

    %% Inter-service HTTP
    gukarkka -->|"player & session data"| bancho
    gukarkka -->|"donations"| payments
    bancho -->|"replay analysis"| circlecore
    payments -->|"grant_donator"| bancho
    bot -->|"player actions"| bancho
    bot -->|"replay checks"| circlecore

    %% External APIs
    bancho --> osuapi
    bancho --> discordwh
    circlecore --> discordwh
    payments --> truemoney
    payments --> stripe
    bot --> discordwh

    %% Data stores
    bancho --> mysql & redis
    gukarkka --> redis
    payments & bot --> mysql

    %% Styling
    classDef client fill:#e1f5fe,stroke:#01579b,color:#01579b
    classDef proxy fill:#fff3e0,stroke:#e65100,color:#e65100
    classDef public fill:#e8f5e9,stroke:#2e7d32,color:#1b5e20
    classDef internal fill:#f3e5f5,stroke:#7b1fa2,color:#4a148c
    classDef data fill:#fce4ec,stroke:#c2185b,color:#880e4f
    classDef external fill:#eceff1,stroke:#546e7a,color:#37474f
    classDef bot fill:#e3f2fd,stroke:#1565c0,color:#1565c0

    class osu,web,dclient client
    class cf,ng proxy
    class bancho,gukarkka,payments public
    class circlecore internal
    class mysql,redis,files data
    class osuapi,discordwh,truemoney,stripe external
    class bot bot