@startuml
!include https://raw.githubusercontent.com/plantuml-stdlib/C4-PlantUML/master/C4_Context.puml

Person(user, "Nutzer", "Zugriff über Browser (Desktop/Mobile)")
Person(dev, "Entwickler", "Christoph – Entwicklung, Betrieb, Konfiguration")

System_Ext(cf, "Cloudflare", "DNS + Tunnel + TLS\nKein offener Port am Heimrouter")
System_Ext(github, "GitHub", "Remote Git Repository\nmatu-pi/matus-toolbox")
System_Ext(tailscale, "Tailscale VPN", "Sicherer Remote-Zugriff\nfür Entwicklung und Wartung")

System(platform, "Home Dev Platform", "Microservice-Plattform auf Raspberry Pi\nTraefik · Frontend · Backend-Services · PostgreSQL")

Rel(user, cf, "HTTPS-Zugriff")
Rel(cf, platform, "Cloudflare Tunnel (kein offener Port)")
Rel(dev, github, "git push / pull")
Rel(github, platform, "git pull (manuell)")
Rel(dev, platform, "SSH + VS Code Remote (über Tailscale)")
Rel(dev, tailscale, "VPN-Verbindung")
Rel(tailscale, platform, "Netzwerktunnel")

@enduml