Architecture overview

rumahl OS is a Rust workspace of more than 20 crates, organised as loosely coupled microservices. Each service has a clear job — and a clear port assignment.

The most important services

• rumahl-home (:3001 dev / :8126 prod) — main API and dashboard, Axum + SQLite
• rumahl-core (:8090) — service discovery and plugin registry
• rumahl-supervisor (:8097) — Docker container management for apps
• rumahl-appstore (:8098) — the app store
• rumahl-security (:8095) — threat detection and lockdown
• rumahl-secrets (:8093) — encrypted storage of secrets
• rumahl-control (:8091) — control center and system services

The platform principle

The architecture separates consistently: apps install features, the core ships the platform. Everything above the permission boundary is app territory — everything below belongs to the core and stays stable, tested and documented.

Security layers

• Authentication & authorization: JWT, API keys, PIN, RBAC
• Network: domain whitelist, IP access control, sandbox
• Data: AES-256-GCM, hash-chained audit logs
• Platform: AppArmor, Docker isolation, read-only filesystem