| Database | PostgreSQL + pgvector | Advanced OSS DB with vector search |
| IAM (AuthN/AuthZ) | Any OIDC IdP - Keycloak, Auth0, ZITADEL, dexidp/dex (default) + Postgres RLS | AuthN/AuthZ via OIDC claims, RLS, envoy ext-authz |
| Object Storage | Any S3-compatible - AWS S3, Cloudflare R2, RustFS (default OSS), Ceph RGW (edgeflare cloud) | S3-compatible object storage |
| REST API / Events | edgeflare/pigo | PostgREST-compatible REST API + Debezium-compatible CDC |
| Messaging | NATS (JetStream) | Realtime CDC fan-out from/to Postgres over NATS, WebSocket, MQTT; used by pigo in place of Kafka |
| API Gateway | Istio/Envoy/Cilium, cert-manager, optional Cloudflare | Secures/routes service and internet traffic |
| Serverless | Knative / Cloudflare Workers | Serverless apps/functions |
| Observe | Grafana + ClickHouse + OpenTelemetry | Monitoring and alerting |