Root Ingress & Sovereign Network Topology

Domillio.org Apex Gateway

domillio.org serves as the primary apex coordination domain and cryptographic root of trust for the entire Domillio Compliance Suite. From this gateway, traffic routes securely to specialized regulatory micro-applications, customer storefront proxies, and sovereign local node clusters.

Read Self-Hosting Runbook

Root Domain Status

Active • 200 OK

Cloudflare Edge Anycast

Transport Encryption

TLS 1.3 Strict

Automated Origin Certificates

Origin Hardware

Raspberry Pi 5

Quad-core 2.4GHz • 8GB RAM

Third-Party Scripts

0.00%

Zero Tracking • Zero Telemetry

Subdomain Routing & Regulatory Services

Official subdomains routed through the domillio.org apex DNS zone.

Endpoint Subdomain	Role & Jurisdiction	Underlying Service	Security	Action
`domillio.org`	Apex Root & Flagship Knowledge Hub	React Router 7 SSR & Regulatory Knowledge Center	HTTPS / TLS 1.3	Explore
`tax.domillio.org`	Tax Exemption Desk Portal	B2B Resale Permit Verification & Shopify Customer Exemption	HTTPS / TLS 1.3	Explore
`cpc.domillio.org`	Children's Product Safety Desk	16 CFR § 1110 CPC Generation & Customs Laboratory Tracking	HTTPS / TLS 1.3	Explore
`gpsr.domillio.org`	EU GPSR Safety Desk	Regulation (EU) 2023/988 Dossier & Responsible Person Passports	HTTPS / TLS 1.3	Explore
`epr.domillio.org`	EU EPR Recycling Desk	VerpackG LUCID & French SYDEREP Producer Responsibility Ledgers	HTTPS / TLS 1.3	Explore
`prop65.domillio.org`	California Prop 65 Desk	27 CCR § 25602(b) Safe Harbor Scanner & 60-Day Notice Defense	HTTPS / TLS 1.3	Explore

🛡️

Zero-Trust Tunnel Ingress

Inbound network traffic to domillio.org does not require open firewall ports or port forwarding. Origin connectivity is mediated exclusively by an outbound Cloudflare Zero Trust Tunnel connection, defending origin hardware from DDoS assaults, port scans, and unauthorized direct access.

Strict TLS 1.3 origin-to-edge mutual verification
Outbound-only origin connection on port 7844 (QUIC/HTTP/2)
Anycast global edge caching for zero-latency static assets

🍓

Raspberry Pi 5 Origin Cluster

The reference production origin is physically deployed on dedicated sovereign hardware running 64-bit Linux with Docker containerization. All merchant resale documents and compliance logs reside in local high-durability storage without dependency on multi-tenant SaaS clouds.

Broadcom BCM2712 Quad-Core ARM Cortex-A76 @ 2.4GHz
Node 22 LTS with Tini process supervisor and non-root sandbox
Local PostgreSQL 16 database with composite state-indexed queries

Cryptographic Integrity

Tamper-Evident SHA-256 Audit Custody

Every compliance filing ingested through domillio.org receives a cryptographic SHA-256 hash stamped with universal UTC timestamps. This immutable fingerprint guarantees that certificates, laboratory reports, and Prop 65 warning impression records cannot be retroactively altered, providing conclusive proof in state tax tribunals and federal customs hearings.

View Resale Audit Standards Browse Compliance FAQ