```mermaid
graph TD
    subgraph Clients ["1. Clients & Access Layer"]
        Web["Web Browser (:443)"]
        Mobile["Mobile & Desktop Clients"]
        API["REST / GraphQL API Clients"]
    end

    subgraph Edge ["2. Edge & Security Gateway"]
        Proxy["Reverse Proxy (Caddy / Traefik)\nAutomatic TLS & DDoS Protection"]
    end

    subgraph Container ["3. overlook Core Service"]
        App["overlook Daemon Container\nRuntime: Go\nLicense: MIT"]
    end

    subgraph Storage ["4. Persistent State & Volumes"]
        Data[("overlook Data Storage\n(/data /media)")]
        DB[("Embedded SQLite / Key-Value\nPersistent Database")]
    end

    Web -->|HTTPS| Proxy
    Mobile -->|HTTPS / WSS| Proxy
    API -->|Authenticated Calls| Proxy
    Proxy -->|Local Network| App
    App -->|Mounts| Data
    App -->|Queries| DB
```