{
  "version": 2,
  "nodes": {
    "access": [
      963,
      214
    ],
    "ai-search": [
      -324,
      1359
    ],
    "api-pod": [
      908,
      810
    ],
    "api-pod-2": [
      1074,
      810
    ],
    "applicant": [
      320,
      -72
    ],
    "azure-ai-foundary": [
      -340,
      1463
    ],
    "azure-alerts": [
      401,
      1276
    ],
    "azure-container-registry": [
      -210,
      682
    ],
    "azure-functions": [
      340,
      1957
    ],
    "azure-monitor": [
      55,
      1275
    ],
    "azure-nat-gateway": [
      850,
      1061
    ],
    "azure-openai": [
      -365,
      1564
    ],
    "azure-public-ip": [
      1063,
      1062
    ],
    "azure-sql": [
      189,
      1637
    ],
    "blob-storage": [
      104,
      1462
    ],
    "bot-detection": [
      515,
      214
    ],
    "cdn": [
      -88,
      214
    ],
    "cloudflared": [
      578,
      590
    ],
    "cloudflared-2": [
      755,
      590
    ],
    "communication-service": [
      559,
      1279
    ],
    "cosmosdb": [
      505,
      1637
    ],
    "ddos-protection": [
      283,
      214
    ],
    "deployment": [
      412,
      590
    ],
    "entra-id": [
      126,
      1067
    ],
    "file-storage": [
      301,
      1463
    ],
    "key-vault-app-secrets": [
      320,
      1796
    ],
    "key-vault-tunnel-token": [
      1294,
      590
    ],
    "log-analytics": [
      217,
      1277
    ],
    "managed-identity": [
      452,
      1067
    ],
    "nsg": [
      1318,
      431
    ],
    "queue-storage": [
      658,
      1462
    ],
    "rate-limiting": [
      743,
      214
    ],
    "redis": [
      340,
      1636
    ],
    "service-clusterip": [
      104,
      810
    ],
    "service-clusterip-2": [
      707,
      810
    ],
    "ssl-tls-termination": [
      415,
      101
    ],
    "table-storage": [
      452,
      1462
    ],
    "visitor": [
      613,
      -72
    ],
    "waf": [
      97,
      214
    ],
    "web-pod": [
      305,
      810
    ],
    "web-pod-2": [
      471,
      810
    ]
  },
  "edges": {
    "aks-cluster>system-2": 17,
    "applicant>cloudflare-edge": 5,
    "ns-cloudflared>ns-api": 12,
    "system-5>system-4": {
      "via": [
        [
          -74,
          1493
        ],
        [
          -74,
          1668
        ]
      ]
    },
    "system-5>system-6": {
      "via": [
        [
          -75,
          1493
        ],
        [
          -75,
          1308
        ]
      ]
    },
    "system-5>system-7": {
      "via": [
        [
          -73,
          1493
        ],
        [
          -73,
          1827
        ]
      ]
    },
    "system-5>system-8": {
      "via": [
        [
          -74,
          1493
        ],
        [
          -74,
          1988
        ]
      ]
    },
    "system>system-3": {
      "via": [
        [
          409,
          1177
        ],
        [
          408,
          1177
        ],
        [
          408,
          1216
        ],
        [
          870,
          1216
        ],
        [
          870,
          1412
        ],
        [
          419,
          1412
        ]
      ]
    },
    "system>system-4": {
      "via": [
        [
          409,
          1177
        ],
        [
          408,
          1177
        ],
        [
          408,
          1203
        ],
        [
          890,
          1203
        ],
        [
          890,
          1588
        ],
        [
          415,
          1588
        ]
      ]
    },
    "system>system-7": {
      "via": [
        [
          409,
          1177
        ],
        [
          408,
          1177
        ],
        [
          408,
          1193
        ],
        [
          916,
          1193
        ],
        [
          916,
          1742
        ],
        [
          440,
          1742
        ]
      ]
    },
    "system>system-8": {
      "via": [
        [
          409,
          1177
        ],
        [
          408,
          1177
        ],
        [
          408,
          1182
        ],
        [
          939,
          1182
        ],
        [
          939,
          1902
        ],
        [
          428,
          1902
        ]
      ]
    }
  },
  "ports": {
    "aks-cluster>system": {
      "from": {
        "side": "bottom",
        "t": 0.495
      },
      "to": {
        "side": "top",
        "t": 0.501
      }
    },
    "aks-cluster>system-2": {
      "from": {
        "side": "bottom",
        "t": 0.496
      },
      "to": {
        "side": "top",
        "t": 0.533
      }
    },
    "azure-container-registry>aks-cluster": {
      "from": {
        "side": "right",
        "t": 0.5
      },
      "to": {
        "side": "left",
        "t": 0.5
      }
    },
    "cloudflare-edge>aks-cluster": {
      "from": {
        "side": "bottom",
        "t": 0.409
      },
      "to": {
        "side": "top",
        "t": 0.508
      }
    },
    "ns-cloudflared>key-vault-tunnel-token": {
      "from": {
        "side": "right",
        "t": 0.525
      }
    },
    "ns-cloudflared>ns-api": {
      "from": {
        "side": "bottom",
        "t": 0.496
      },
      "to": {
        "side": "top",
        "t": 0.564
      }
    },
    "ns-cloudflared>ns-frontend": {
      "from": {
        "side": "bottom",
        "t": 0.494
      },
      "to": {
        "side": "top",
        "t": 0.458
      }
    },
    "system-5>system-3": {
      "from": {
        "side": "right",
        "t": 0.5
      },
      "to": {
        "side": "left",
        "t": 0.48
      }
    },
    "system-5>system-4": {
      "from": {
        "side": "right",
        "t": 0.5
      },
      "to": {
        "side": "left",
        "t": 0.5
      }
    },
    "system-5>system-6": {
      "from": {
        "side": "right",
        "t": 0.5
      },
      "to": {
        "side": "left",
        "t": 0.5
      }
    },
    "system-5>system-7": {
      "from": {
        "side": "right",
        "t": 0.5
      },
      "to": {
        "side": "left",
        "t": 0.5
      }
    },
    "system-5>system-8": {
      "from": {
        "side": "right",
        "t": 0.5
      },
      "to": {
        "side": "left",
        "t": 0.5
      }
    },
    "system>system-3": {
      "from": {
        "side": "bottom",
        "t": 0.5
      },
      "to": {
        "side": "top",
        "t": 0.435
      }
    },
    "system>system-4": {
      "from": {
        "side": "bottom",
        "t": 0.5
      },
      "to": {
        "side": "top",
        "t": 0.51
      }
    },
    "system>system-6": {
      "from": {
        "side": "bottom",
        "t": 0.5
      },
      "to": {
        "side": "top",
        "t": 0.475
      }
    },
    "system>system-7": {
      "from": {
        "side": "bottom",
        "t": 0.5
      },
      "to": {
        "side": "top",
        "t": 0.5
      }
    },
    "system>system-8": {
      "from": {
        "side": "bottom",
        "t": 0.5
      },
      "to": {
        "side": "top",
        "t": 0.5
      }
    }
  },
  "frames": {
    "aks-cluster": {
      "icon": "boundary:kubernetes"
    },
    "cloudflare-edge": {
      "icon": "boundary:cloudflare"
    },
    "microsoft-azure": {
      "icon": "boundary:azure"
    },
    "ns-api": {
      "tint": "#326ce5",
      "strength": "bold"
    },
    "ns-cloudflared": {
      "tint": "amber",
      "strength": "bold"
    },
    "ns-frontend": {
      "tint": "blue",
      "strength": "bold"
    },
    "vnet": {
      "icon": "component:azure/azure-virtual-network"
    }
  },
  "tints": {
    "ssl-tls-termination": {
      "tint": "green"
    }
  },
  "notes": [
    {
      "id": "note-1",
      "x": 24,
      "y": -8,
      "w": 220,
      "h": 88,
      "text": "DNS resolves app. / api. to Cloudflare anycast IPs — never to Azure",
      "anchor": {
        "group": "cloudflare-edge"
      }
    },
    {
      "id": "note-2",
      "x": 24,
      "y": -8,
      "w": 220,
      "h": 88,
      "text": "Cloudflare Tunnel · TLS 1.3 / QUIC. Dialed OUTBOUND by cloudflared — requests flow back down it",
      "anchor": {
        "group": "ns-cloudflared"
      }
    },
    {
      "id": "note-3",
      "x": 24,
      "y": -8,
      "w": 200,
      "h": 66,
      "text": "NetworkPolicy: cloudflared → frontend / api only",
      "anchor": {
        "group": "aks-cluster"
      }
    },
    {
      "id": "note-4",
      "x": 26,
      "y": 12,
      "w": 184,
      "h": 48,
      "text": "Secretless Layer",
      "anchor": {
        "node": "managed-identity"
      }
    },
    {
      "id": "note-5",
      "x": 24,
      "y": 14,
      "w": 184,
      "h": 48,
      "text": "AI",
      "anchor": {
        "node": "azure-openai"
      }
    },
    {
      "id": "note-6",
      "x": 24,
      "y": 14,
      "w": 184,
      "h": 48,
      "text": "Monitoring & Alerts Tools",
      "anchor": {
        "node": "communication-service"
      }
    },
    {
      "id": "note-7",
      "x": 24,
      "y": 14,
      "w": 184,
      "h": 48,
      "text": "Storage",
      "anchor": {
        "node": "queue-storage"
      }
    },
    {
      "id": "note-8",
      "x": 24,
      "y": 14,
      "w": 184,
      "h": 48,
      "text": "DB & Cache",
      "anchor": {
        "node": "cosmosdb"
      }
    },
    {
      "id": "note-9",
      "x": 24,
      "y": 14,
      "w": 184,
      "h": 48,
      "text": "Secret Store",
      "anchor": {
        "node": "key-vault-app-secrets"
      }
    }
  ]
}