ADR-092 multi-tenancy proof-of-life
loading /api/version…
hello-world is the gyrum fleet's multi-tenancy proof
deployment. It exists to prove one architectural decision:
that a host and the projects it runs are cleanly separated things
— the host owns Docker, the shared Caddy edge, TLS, and security
tooling; a project is just two container images and a hostname.
The only thing that crosses the boundary is the triple
(hostname, upstream_container, upstream_port).
Concretely, this site demonstrated that a second project can run beside the fleet's main workload on the same server with no shared state, no port collisions, and no downtime for its neighbour when this project deploys — exercising the per-project edge snippet, the registry image-pull contract, and the shared deploy pipeline end to end for a project that is not the main one.
The service does the smallest thing that proves the path:
/healthz (the deploy gate), /api/version
(build identity, shown above), and /api/hello?name=…
(a round-trip through the shared edge proxy).
Decision record: ADR-092 — “Host/Project separation: two images
per project, host owns edge” (accepted 2026-04-25, fleet
architecture decisions, 092-host-project-separation.md).
Kept deliberately alive as living documentation of that cut.