> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hill90.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Overview

> What Hill90 is, how it works, and the technology stack.

# What is Hill90?

Hill90 is a production-ready microservices platform hosted on a single VPS. It provides:

* A **REST API** for managing AI agents, model access, and user profiles
* **Sandboxed agent containers** with configurable tools and resource limits
* **Policy-gated LLM inference** with bring-your-own-key (BYOK) model management
* **Persistent agent knowledge** — memory that survives across sessions, with full-text search
* A **Model Context Protocol (MCP) gateway** for tool-augmented AI
* A **Next.js frontend** with Keycloak-backed authentication
* Full **observability** via the LGTM stack (Loki, Grafana, Tempo, Prometheus)

All services run as Docker containers, orchestrated with Docker Compose, behind a Traefik reverse proxy that provides automatic HTTPS.

## Technology Stack

| Layer              | Technologies                                    |
| ------------------ | ----------------------------------------------- |
| **Languages**      | TypeScript (Node.js), Python                    |
| **Frameworks**     | Express, FastAPI, Next.js                       |
| **Identity**       | Keycloak 26 (OIDC/OAuth2), Auth.js v5           |
| **Infrastructure** | Docker Engine, Docker Compose, Traefik          |
| **Data**           | PostgreSQL, MinIO (S3-compatible)               |
| **Secrets**        | OpenBao (vault), encrypted backup               |
| **Observability**  | Prometheus, Grafana, Loki, Tempo, OpenTelemetry |
| **CI/CD**          | GitHub Actions                                  |
| **DNS**            | Automated via Hostinger DNS API                 |
| **Certificates**   | Let's Encrypt (HTTP-01 + DNS-01)                |

## Architecture at a Glance

```
Internet
   |
Traefik (reverse proxy, automatic HTTPS)
   |
   +-- API Service (Express, TypeScript)
   +-- MCP Gateway (FastAPI, Python)
   +-- Keycloak (Identity Provider)
   +-- UI (Next.js)
   |
Internal Network
   +-- AI Service / Model-Router (FastAPI, Python)
   +-- Knowledge Service / AKM (FastAPI, Python)
   +-- PostgreSQL
   +-- MinIO (S3 storage)
   +-- Observability Stack (Prometheus, Grafana, Loki, Tempo)
   |
Agent Network
   +-- Agentbox containers → AI Service, Knowledge Service
```

Traffic enters through Traefik, which handles TLS termination, routing, and load balancing. Public services use HTTP-01 certificates, while admin-only services use DNS-01 certificates and are restricted to the VPN network. The AI service and Knowledge service are internal-only — agent containers communicate with them on an isolated network.

## Next Steps

<CardGroup cols={2}>
  <Card title="Quickstart" icon="rocket" href="/getting-started/quickstart">
    Set up your environment and make your first API call.
  </Card>

  <Card title="Authentication" icon="lock" href="/getting-started/authentication">
    Understand how authentication and authorization work.
  </Card>
</CardGroup>