Ghaymah Cloud Platform — Feature Discovery Report

Date: September 16, 2026
Tester: Automated QA Agent
URL: https://deploy.ghaymah.systems
Account: ziadalex2003@gmail.com

1. Executive Summary

Ghaymah Cloud is a cloud deployment and infrastructure management platform built as a single-page application (SPA). It provides a comprehensive suite for deploying and managing containerized applications, databases, storage, static sites, and AI services.

Tip

The architecture relies heavily on microservices managed through a central gateway, with modern robust state management (XState) on the frontend.

2. Platform Architecture

graph TD
    Client[Web Browser SPA] -->|HTTPS| Gateway[Nginx 1.29.8]
    
    Gateway -->|Auth Check| Nhost[Nhost Auth Service]
    Gateway -->|Data Fetching| Hasura[Hasura GraphQL Engine]
    Gateway -->|AI Requests| LiteLLM[LiteLLM AI Gateway]
    
    Hasura --> DB[(PostgreSQL)]
    LiteLLM --> AIModels(OpenAI / Custom Models)
    
    subgraph Third-Party Integrations
    Chaport[Chaport Live Chat]
    Cumin[Cumin Status Page]
    HF[HuggingFace RAG]
    end
    
    Client -.->|External Scripts| Third-Party Integrations

3. Technology Stack Identified

Component	Technology	Version / Details
Frontend Framework	React (SPA)	Vite bundler
UI Components	Radix UI	Primitives-based
State Management	XState	State machines
Backend / Auth	Nhost (Hasura)	GraphQL-based
Web Server	Nginx	v1.29.8
GenAI Gateway	LiteLLM	v1.77.5

4. Infrastructure Map — Discovered Subdomains

Warning

Several internal domains are referenced within the public client bundle, allowing an attacker to map out internal services easily.

Subdomain	Purpose	Status
`deploy.ghaymah.systems`	Main Dashboard SPA	Active (200)
`auth.ghaymah.systems`	Authentication Service	Active
`graphql.ghaymah.systems`	Hasura GraphQL API	Active
`genai.ghaymah.systems`	LiteLLM AI Gateway	Active (200, Swagger exposed)
`logs.ghaymah.systems`	Logging Service	Active
`integrations.ghaymah.systems`	Integrations API	Active (401)
`docs.ghaymah.cloud`	Documentation Portal	Active

(Other domains referenced in code: db, acme, hosted, myapp)

The platform offers a diverse set of capabilities accessible from the main dashboard (/dashboard).

🛠️ Applications & Deployment

Applications Management: Deploy containerized applications, configure resources (CPU, RAM), map custom domains, and view real-time log streaming (ListApps, CreateApp).
Static Sites: Host static websites, generate upload URLs, and configure domains (CreateStaticApp).
Container Registry / Pull Secrets: Manage credentials for private registries like Docker Hub or GitHub Container Registry (CreatePullSecret).

💾 Databases & Storage

PostgreSQL Databases: Provision managed PostgreSQL instances and retrieve connection strings (CreatePostgresDb).
S3-Compatible Storage: Create storage buckets, manage access keys, and implement key rotation lifecycles (CreateS3Bucket, RotateS3BucketKey).
Persistent Volumes: Provision storage volumes and attach them to specific applications (CreateVolume).

🤖 AI & GenAI Services

Endpoint: genai.ghaymah.systems (LiteLLM)
Features: OpenAI-compatible API for Chat completions, Embeddings, Image Generation, Text-to-Speech, Model & Key management.

6. API Architecture

GraphQL API

Endpoint: graphql.ghaymah.systems/v1/graphql
Auth Strategy: JWT-based using the https://hasura.io/jwt/claims namespace.
Surface Area: 28 total mutations discovered across deployment, storage, and user management.

GenAI Capabilities

/v1/chat/completions (Chat)
/v1/audio/speech (Text-to-Speech)
/key/generate (API Key issuance)

7. Third-Party Integrations

Note

The platform leverages a healthy ecosystem of specialized third-party tools to handle non-core functionalities.

Service	Purpose	Integration Point
Chaport	Live chat support	Embedded script in SPA
Cal.com	Meeting scheduling	Direct link
HuggingFace	RAG documentation assistant	Hosted Space integration
Cumin	Status page hosting	Dedicated hosted domain

Report generated on September 16, 2026 by automated QA testing agent.

4.8 KiB خام الرابط الدائم اللوم التاريخ