Aayushi Kapoor

04 — Project architecture

How I design production Laravel systems.

A blueprint of the architecture I default to for SaaS, multi-tenant ERPs and AI-augmented backends — battle-tested across the live products above.

① Presentation layer

Blade + Livewire for admin & internal portals
REST / JSON APIs for mobile, partners & SPAs
WebSockets (Laravel Broadcasting + Reverb) for real-time
JWT / OAuth 2.0 for stateless cross-client auth

② Application layer (Laravel 12)

Controllers → Form Requests → Services → Repositories
Policies + Gates for RBAC, Middleware for tenant scoping
Events / Listeners for decoupled side-effects
Queues (Horizon) for emails, exports, AI calls, webhooks

③ Data layer

MySQL / PostgreSQL with normalized, index-tuned schemas
Per-tenant DB isolation OR row-level scoping (use-case dependent)
Redis for cache, sessions, locks & queue backend
S3 + signed URLs for private file delivery

④ AI / GenAI layer

OpenAI embeddings + vector store for RAG retrieval
Cosine-similarity ranking with reranking heuristics
Ollama / TinyLlama fallbacks for on-prem inference
Async job pipeline: ingest → chunk → embed → index

⑤ Infrastructure & DevOps

Docker images per service, deployed via Coolify on AWS EC2
Nginx + PHP-FPM, HTTP/2, gzip/brotli, sane cache headers
Jenkins / GitHub Actions CI: test → build → deploy gates
Health checks, supervisor for workers, 99.9% uptime SLA

⑥ Security & observability

OWASP Top-10 hardening: input validation, CSRF, rate limits
Encrypted secrets, key rotation, signed webhooks
Structured logs, error tracking, slow-query monitoring
PHPUnit + TDD — coverage held above 75%

   ┌────────────┐    ┌────────────────┐    ┌─────────────────┐
   │  Browser   │    │  Mobile / SPA  │    │  Webhooks / 3rd │
   │  (Blade /  │    │  (REST + JWT)  │    │  party services │
   │  Livewire) │    │                │    │                 │
   └─────┬──────┘    └────────┬───────┘    └────────┬────────┘
         │                    │                     │
         ▼                    ▼                     ▼
       ┌────────────────────────────────────────────────┐
       │           Nginx  +  PHP-FPM  (HTTPS)           │
       └──────────────────────┬─────────────────────────┘
                              │
                  ┌───────────▼────────────┐
                  │     Laravel 12 App     │
                  │  Auth · RBAC · Tenancy │
                  │  Services · Policies   │
                  └─┬──────┬───────┬───────┘
                    │      │       │
        ┌───────────┘      │       └─────────────┐
        ▼                  ▼                     ▼
   ┌─────────┐       ┌──────────┐         ┌────────────┐
   │  MySQL  │       │  Redis   │         │  Queues    │
   │ (multi- │       │ cache /  │◄────────┤ (Horizon)  │
   │ tenant) │       │ sessions │         │ workers    │
   └─────────┘       └──────────┘         └─────┬──────┘
                                                │
                              ┌─────────────────┼─────────────────┐
                              ▼                 ▼                 ▼
                        ┌──────────┐     ┌─────────────┐    ┌──────────┐
                        │  AWS S3  │     │  OpenAI /   │    │ Webhooks │
                        │  files   │     │  Ollama RAG │    │ + Emails │
                        └──────────┘     └─────────────┘    └──────────┘

Backend craftsmanship, with a GenAI edge.

Seven years of shipping.

Production sites I've shipped.

CyberSecurity Services — DragonX

Highmarks Education — Accounting Portal

JITNIT NAVIS — PMU Management

MyMudra — Analytics & Algo

Mulyankan Gurukul — Stats Framework

Vardhman Threads — Corporate Site

How I design production Laravel systems.

① Presentation layer

② Application layer (Laravel 12)

③ Data layer

④ AI / GenAI layer

⑤ Infrastructure & DevOps

⑥ Security & observability

Things I've built in production.

Tools I reach for.

Got a Laravel role
or a backend that needs rescuing?

Backend craftsmanship, with a GenAI edge.

Seven years of shipping.

Production sites I've shipped.

CyberSecurity Services — DragonX

Highmarks Education — Accounting Portal

JITNIT NAVIS — PMU Management

MyMudra — Analytics & Algo

Mulyankan Gurukul — Stats Framework

Vardhman Threads — Corporate Site

How I design production Laravel systems.

① Presentation layer

② Application layer (Laravel 12)

③ Data layer

④ AI / GenAI layer

⑤ Infrastructure & DevOps

⑥ Security & observability

Things I've built in production.

Tools I reach for.

Got a Laravel roleor a backend that needs rescuing?

Got a Laravel role
or a backend that needs rescuing?