Architecture

System overview

Component	Responsibility
Azure Front Door Standard	CDN, WAF, DDoS protection, custom domain
Azure Static Web Apps	Docusaurus hosting, SSO enforcement, route-level ACL
Azure Entra ID	Identity provider, group membership, role assignment
Backend API	Business logic, data access
Azure SQL	Primary relational data store
Azure Redis	Session cache, rate limiting counters