This is a backend service, not a website. There is no product UI here by design —
the platform exposes a JSON API and a database. A browser landing on the root sees this page;
everything else lives under
/api/v1/… behind authentication.
Live
Commerce & finance
running
What it does, end to end
Place an order & pay — commerce-finance
Provision visa quota from the paid order — entitlement, event-driven
Register & incorporate a company — which issues its trade licence
Renew / suspend / expire the licence — full lifecycle, QR-verifiable
Reserve & issue a work visa — refused unless the licence is active
Verify a licence — public, no login
Anyone holding a licence's QR token can confirm it is real and current. No credentials, no tenant — the token is the authorisation:
curl -k 'https://165.245.211.54/api/v1/public/licenses/verify?token=<qr-token>'
The rest of the API is gated with HTTP Basic auth and a tenant header, e.g. /api/v1/companies, /api/v1/orders.
The TLS certificate is self-signed, so a browser shows a one-time warning
(Advanced → Proceed ). A real certificate follows once a domain points here.
Build
8 bounded-context services
29 database migrations
182 tables
376 Java tests
32 SQL guards
freezone-os · Java 21 · Spring Boot 4 · PostgreSQL 18 · Kafka — backend + database only.
Health probed from your browser: …