flowchart LR
  Client["Client"]
  DNS["DNS<br/>(Route53 / Gabia)"]
  GH["GitHub Actions"]
  OCIR["OCIR"]
  Vault["OCI Vault"]

  subgraph OCI["OCI Cloud (ap-chuncheon-1)"]
    direction LR
    IGW["Internet Gateway"]

    subgraph VCN["VCN"]
      direction LR

      subgraph PublicSubnet["Public Subnet"]
        direction TB
        subgraph VM["VM.Standard.A1.Flex"]
          direction TB
          subgraph DockerHost["Docker Compose (Container Runtime)"]
            direction LR
            Nginx["Nginx 컨테이너<br/>(정적 파일 서빙 + /api 프록시)"]
            API["API 컨테이너"]
            Crawler["Crawler 컨테이너"]
            Scheduler["Scheduler 컨테이너"]
            Batch["Batch 컨테이너"]
          end
        end
      end

      subgraph PrivateSubnet["Private DB Subnet"]
        MySQL["MySQL"]
      end
    end
  end

  ExternalIntegrations["외부 연동 서비스<br/>(OpenAI API / OCI Email Delivery / Slack)"]

  Client -->|"80/443"| DNS --> IGW --> Nginx
  Nginx -->|"/api"| API

  Scheduler -->|"배치 잡 트리거"| Batch
  GH -->|"배치 잡 수동 실행(SSH)"| Batch

  API -->|"내부 HTTP 8090"| Crawler
  Batch -->|"내부 HTTP 8090"| Crawler

  API -->|"3306"| MySQL
  Batch -->|"3306"| MySQL

  API --> ExternalIntegrations
  Batch --> ExternalIntegrations

  GH -->|"이미지 빌드/푸시"| OCIR
  OCIR -->|"이미지 Pull"| VM
  GH -->|"배포 워크플로우(SSH)"| VM
  VM -->|"Secret 조회"| Vault

  classDef external fill:#f7f7f7,stroke:#7a7a7a,color:#111,stroke-width:1.2px;
  classDef infra fill:#f0f7ff,stroke:#2f6feb,color:#111,stroke-width:1.2px;
  classDef app fill:#eefaf0,stroke:#2da44e,color:#111,stroke-width:1.2px;
  classDef db fill:#fff8e6,stroke:#b08800,color:#111,stroke-width:1.2px;

  class Client,DNS,GH,OCIR,Vault,ExternalIntegrations external;
  class IGW infra;
  class Nginx,API,Crawler,Scheduler,Batch app;
  class MySQL db;