Skip to main content

Vertex — environments overview

Status: Proposed · Last decision session: 2026-09-24 · Owner: TTG Technical Lead

Vertex is the TTG internal platform (Admin, Invoicing, CRM) for up to ~10 users. This section describes the new stage and prod environments. The current running stack (EC2 vertex-dev-app, vertex-dev-* resources, Worker vertex-console) is legacy and stays untouched until it is decommissioned.

At a glance

TopicDecision
Environmentsstage (UAT, prod-like) and prod. No separate dev environment.
Repositoriesthetaxgraph-ai/vertex — application code only (vendor has write). thetaxgraph-ai/ttg-infra — IaC, config, deploy workflows (TTG only).
DeploymentsManual for both envs, triggered from ttg-infra. The vendor asks TTG for a deployment.
EdgeCloudflare Workers vertex-stage / vertex-prod on thetaxgraph.com + one Cloudflare Tunnel per env.
AWS regioneu-west-1 (Ireland) — EU, cheapest EU region for this stack.
ComputeAmazon ECS on Fargate (x86_64): one task per env with three containers — core, identity, cloudflared.
NetworkSeparate VPC per env; task in a private subnet; egress via a NAT instance; nothing accepts inbound internet traffic.
DatabaseDedicated Amazon RDS for PostgreSQL 16 per env (clean start).
LoginGoogle OAuth with a separate Google Cloud project per env.
ImagesGitHub Container Registry (GHCR), built by ttg-infra from an exact commit of vertex.

Architecture

Solution overview

Editable source: ttg-infra/docs/aws-architecture.drawio (four pages: overview, network, security, delivery).