FaceKom — Enterprise Identity Verification Platform

Internal codename: vuer. Built by TechTeamer. Real-time face recognition, document verification, liveness detection for banking, telecom, government. Current deployment: NUSZ (Hungarian financial institution).

Architecture

graph TB
    Browser[Customer Browser] -->|HTTPS| NginxProxy[Nginx Proxy :443]
    OperatorUI[Operator Browser] -->|HTTPS| NginxProxy

    NginxProxy -->|*.css-*| vuer_css[vuer_css<br/>React + MVC Frontend<br/>:10082-3]
    NginxProxy -->|*.oss-*| vuer_oss[vuer_oss<br/>Node.js Backend<br/>:10080-1]
    NginxProxy -->|*.cv-*| vuer_cv[vuer_cv<br/>Python ML/CV<br/>:40080]
    NginxProxy -->|esign-css-*| esign_css[esign_css<br/>eSign Frontend<br/>:10183-4]
    NginxProxy -->|esign-oss-*| esign_oss[esign_oss<br/>eSign Backend<br/>:10180-2]

    vuer_css <-->|RabbitMQ RPC<br/>40+ endpoints| vuer_oss
    esign_css <-->|RabbitMQ RPC<br/>8 endpoints| esign_oss
    vuer_oss -->|HTTP/WebSocket| vuer_cv
    vuer_oss <-->|RabbitMQ| nyilvantarto[nyilvantarto_scraper<br/>Gov Registry]
    esign_oss -->|RabbitMQ| pdfservice[pdfservice<br/>Kotlin/Spring Boot]

    vuer_oss --> PostgreSQL[(PostgreSQL)]
    esign_oss --> PostgreSQL
    vuer_cv --> Redis[(Redis<br/>Image Cache)]
    vuer_oss --> Redis2[(Redis<br/>Sessions)]

    nyilvantarto -->|HTTPS + Client Cert| KKSZB[KKSZB<br/>Hungarian Gov API]

Services

ServiceTechPurposeDeep Dive
vuer_ossNode.js, Sequelize, ExpressBackend API, auth, business logic, 65 DB models~650 source files
vuer_cssReact 18 + custom MVC, Express, Socket.IOCustomer UI, queue mgmt, real-time videoDual-server architecture
vuer_cvPython, ONNX Runtime16 ML models, face/document/livenessMulti-process, Redis RPC
esignNode.js (frontend + backend)Electronic signature with 2FAPDF signing via Java/Kotlin
pdfserviceKotlin, Spring BootPAdES digital signatures, EU trust validationApache PDFBox + EU DSS
nyilvantarto-scraperNode.jsHungarian gov document registry queriesKKSZB integration

Cross-Cutting Documentation

TopicDocument
Inter-service messaging (40+ RPC endpoints)rabbitmq-communication
Auth (Passport, SAML, FIDO2, TOTP, JWT/JWE)authentication
Database (55+ vuer_oss models, 27 esign models)database-schema
Security findings (CRITICAL/HIGH/MEDIUM)security-audit
Technical debt (50+ TODOs, code smells)tech-debt
Docker, Nginx, monitoring, containersinfrastructure
21 active client deploymentscustomization-branches
Core file merge conflict hotspotsbreakage-risks
Reproducing sessions from exportsroom-export-blueprint
Debug agent pipeline (YouTrack → RCA)debug-agents
Ticket investigations & RCAsInvestigations
Release process & versioningrelease-process

Tech Stack

LayerTechnologies
BackendNode.js >= 22.18.0, Express 5, Sequelize (TechTeamer fork), Passport
FrontendReact 18, custom MVC engine, esbuild, Stylus, i18n (EN/HU mandatory)
ML/CVPython, ONNX Runtime, PyTorch, Detectron2, OpenCV, 16 ONNX models
SignaturesKotlin 2.0, Spring Boot 3.5, Apache PDFBox 3.0, EU DSS v6.3, BouncyCastle
DatabasesPostgreSQL (primary), Redis (cache/sessions/image store)
MessagingRabbitMQ (AMQPS with client certs, @techteamer/mq)
AuthPassport (Local, SAML, AD, FIDO2, TOTP), JWT/JWE encryption
InfraNginx, Supervisor, Docker Compose (host networking), Tailscale
ObservabilityGrafana, Loki, Prometheus, Tempo, OpenTelemetry
VideoJanus WebRTC Gateway, CoTURN

Key Numbers

MetricCount
Source files (vuer_oss server/)~650
Source files (vuer_css)~25K (incl. node_modules)
Python files (vuer_cv)213
DB models (vuer_oss)55+
DB models (esign_oss)27
ONNX ML models16
RPC endpoints (oss>css)40+
WebSocket task types (cv)13
Document definitions (cv)17 (14 HU, 3 SRB)
Cron jobs19+
Docker Compose files15+
Critical security findingsSee security-audit

Naming Conventions

  • OSS = Operator Side Server (admin/back-office)
  • CSS = Client Side Server (customer-facing)
  • CV = Computer Vision

Development Environment (levander)

ItemLocation
Remote serverUbuntu 22.04.5 LTS, SSH + Tailscale
Remote workspace/workspace/vuer_*/
Local SSHFS mount/Users/levander/coding/mnt/Facekom/
DNSdnsmasq: *.facekomdev.net 100.103.48.49
ContainersPodman 5.7.1 (not Docker)
Container registryharbor.techteamer.com
IssuesJIRA: FKITDEV-XXXX
Branchesfeature/FKITDEV-XXXX
GitHubTechTeamer