---
# System prepended metadata

title: Innovation Spaces - Architecture + Infrastructure
tags: [Innovation Spaces, Traefik, DevOps]

---

#   Innovation Spaces - Architecture + Infrastructure

## Overview / Current context

  
## Goals

We would like to make Alkemio a more appealing `solution` for partners, and not just a generic `platform` (at least not in their eyes). In order to do that, we need to add focus to the specific problems our customers face and declutter the application for their day-to-day business opperations. To make it even more appealing, we can add custom branding for each customer. 

## Current state

We have a [branch](https://github.com/alkem-io/infrastructure-operations/tree/infra-ops-504-traefik) on infra ops with PoC on URL rewrites + DNS configured for `vng.alkem.io`. Currently, homepage can be opened + unauthenticated GraphQL requests are routed properly. 
We haven't started solving how identity can work in a subdomain setup (or whether it should at all, maybe we can do redirects there?). More details on the diagram below.

![Request routing](https://i.imgur.com/FKYWe92.png)

## Desired state

- [ ] https://demo.alkem.io shows only demo hubs
- [ ] https://archive.alkem.io shows only archived hubs
- [ ] https://customerA.alkem.io shows the hub and filters only this specific customer's hub

NS>>The setup has to be flexible. I see the url of xx.allkem.io as being one input (of potentially multiple later) to the criteria of what Innovation Space to show, and once the server has identified which InnovationSpace is applicable then that InnovationSpace has configuration that is used in subsequent platform behavior. So one case could indeed be that a domain ('xxx') maps to InnovationSpace 'xxx', which is then configured to show only one Hub.

## Actions
- [ ] Spike on identity


###### tags: `Innovation Spaces`, `Traefik`, `DevOps`
